Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230342e39332e3138372e302f32342d3234203d3e20383334.roa
File:                     3230342e39332e3138372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          U93W8k0cRNc/l1AZlMFESxLcZlr/Ic4bY4knkCRZKHs=
Subject key identifier:   F9:E3:27:26:15:0A:E4:8C:0D:93:FE:F0:BA:D6:83:73:6A:75:73:72
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       05AD41EAE17289D9D588DD66B90C3214AE6B18FC
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230342e39332e3138372e302f32342d3234203d3e20383334.roa
Signing time:             Mon 03 Apr 2023 05:00:12 +0000
ROA not before:           Mon 03 Apr 2023 04:55:12 +0000
ROA not after:            Mon 01 Apr 2024 05:00:12 +0000
asID:                     834
IP address blocks:        204.93.187.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:ad:41:ea:e1:72:89:d9:d5:88:dd:66:b9:0c:32:14:ae:6b:18:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Apr  3 04:55:12 2023 GMT
            Not After : Apr  1 05:00:12 2024 GMT
        Subject: CN=F9E32726150AE48C0D93FEF0BAD683736A757372
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:81:9f:43:a7:06:1d:4e:51:0f:a0:82:ab:fd:
                    8e:65:97:65:59:bb:f0:01:56:ce:25:d0:5b:8f:1d:
                    8c:32:35:45:7b:2e:2f:3d:9d:47:9f:25:c7:9f:66:
                    bb:e6:7e:17:d3:71:e9:47:e2:72:f7:6e:1c:fa:b7:
                    80:91:40:d5:70:aa:de:6e:d6:45:2d:1e:90:14:c0:
                    de:63:7f:2c:e0:c0:7c:6e:07:10:25:79:cc:74:6f:
                    60:f4:7f:e7:83:61:d2:5a:98:3a:d2:e7:af:5b:77:
                    f4:77:d9:fd:80:91:23:62:96:28:bb:be:8f:a8:5e:
                    7f:f8:bc:11:f9:64:fb:e4:ae:98:c8:2a:25:2e:fb:
                    2a:bd:86:13:a3:43:50:32:7c:8f:60:d7:b1:b7:0b:
                    6b:ee:91:c0:f7:79:db:56:22:59:db:e9:c7:29:6e:
                    29:d2:ac:97:f3:d2:a9:59:8d:5e:6d:d2:b3:57:90:
                    0e:06:2b:3a:f6:f9:4f:7e:52:30:23:68:c6:59:31:
                    71:de:ed:20:23:08:af:ef:8b:87:45:fa:d4:e8:ff:
                    85:73:a9:3e:df:fd:fd:75:43:9d:9c:c6:a9:e4:a6:
                    d9:36:86:7d:7e:da:a9:7e:ae:99:e0:87:cc:3a:36:
                    02:fa:38:84:10:b4:78:10:84:c0:3e:75:d8:8c:4d:
                    f0:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:E3:27:26:15:0A:E4:8C:0D:93:FE:F0:BA:D6:83:73:6A:75:73:72
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230342e39332e3138372e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.93.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:ac:69:95:84:67:22:71:54:7e:ea:7b:d7:9c:45:32:1f:95:
         41:5d:b0:23:60:a5:6b:5a:19:b3:b3:f6:f6:de:38:d2:e9:d7:
         cf:87:62:0c:f9:9e:8f:11:9e:ce:a1:52:bd:53:72:5d:48:42:
         c5:95:44:bd:03:33:83:31:62:4e:27:09:e8:3d:1d:e0:c0:89:
         cd:b1:0c:f7:a5:c8:81:ce:6e:32:d4:06:e1:d3:be:72:67:c9:
         74:f8:82:b2:65:70:b4:26:fe:e0:92:99:c7:01:f9:e8:a2:ef:
         b4:6d:0a:12:b7:43:d2:e3:1d:43:35:cf:a3:82:95:b1:b0:a0:
         e7:3a:26:f7:71:78:5b:26:d9:5a:dd:6d:31:97:52:82:06:88:
         58:d8:55:d0:e5:a3:68:26:32:fd:08:49:cc:24:ba:2a:e7:36:
         bf:75:68:3d:21:db:17:8e:eb:0f:00:1f:55:a7:69:44:d3:17:
         a4:33:8a:5f:bd:ab:ee:f8:f0:97:90:64:8f:13:1f:c1:1d:84:
         4e:9f:34:51:e5:11:bf:75:36:44:bc:f3:ee:39:09:2c:5c:1d:
         75:11:c3:5c:45:55:02:83:f4:ac:65:dc:07:7e:89:5a:28:ab:
         6a:8f:61:12:06:4a:a3:e4:41:6e:28:fe:04:da:df:22:27:53:
         36:ce:2a:18
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIUBa1B6uFyidnViN1muQwyFK5rGPwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjk2MjZjMmUwYjk2NGVkNWU4YmE2YTZmM2VkMGZkNjM2
Y2YzNjQ1ZDZjY2I2MTIzYjkwHhcNMjMwNDAzMDQ1NTEyWhcNMjQwNDAxMDUwMDEy
WjAzMTEwLwYDVQQDEyhGOUUzMjcyNjE1MEFFNDhDMEQ5M0ZFRjBCQUQ2ODM3MzZB
NzU3MzcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoGfQ6cGHU5R
D6CCq/2OZZdlWbvwAVbOJdBbjx2MMjVFey4vPZ1HnyXHn2a75n4X03HpR+Jy924c
+reAkUDVcKrebtZFLR6QFMDeY38s4MB8bgcQJXnMdG9g9H/ng2HSWpg60uevW3f0
d9n9gJEjYpYou76PqF5/+LwR+WT75K6YyColLvsqvYYTo0NQMnyPYNextwtr7pHA
93nbViJZ2+nHKW4p0qyX89KpWY1ebdKzV5AOBis69vlPflIwI2jGWTFx3u0gIwiv
74uHRfrU6P+Fc6k+3/39dUOdnMap5KbZNoZ9ftqpfq6Z4IfMOjYC+jiEELR4EITA
PnXYjE3wyQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFPnjJyYVCuSMDZP+8LrWg3Nq
dXNyMB8GA1UdIwQYMBaAFE8GHzq5hjgo92M+vEYwD5t+h3q8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODY5M2YwNjAwMTg2YzZlN2ZkOGQzNjYwLzAv
NEYwNjFGM0FCOTg2MzgyOEY3NjMzRUJDNDYzMDBGOUI3RTg3N0FCQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2FkOWIzMDEwLTMxMTYtNDY0ZS04YzU4LTk1ODY1MDBmMTcwMS82OTYy
NmMyZTBiOTY0ZWQ1ZThiYTZhNmYzZWQwZmQ2MzZjZjM2NDVkNmNjYjYxMjNiOS5j
ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRlODY5M2YwNjAwMTg2YzZl
N2ZkOGQzNjYwLzAvMzIzMDM0MmUzOTMzMmUzMTM4MzcyZTMwMmYzMjM0MmQzMjM0
MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADMXbswDQYJKoZIhvcNAQELBQADggEB
AJ6saZWEZyJxVH7qe9ecRTIflUFdsCNgpWtaGbOz9vbeONLp18+HYgz5no8Rns6h
Ur1Tcl1IQsWVRL0DM4MxYk4nCeg9HeDAic2xDPelyIHObjLUBuHTvnJnyXT4grJl
cLQm/uCSmccB+eii77RtChK3Q9LjHUM1z6OClbGwoOc6JvdxeFsm2VrdbTGXUoIG
iFjYVdDlo2gmMv0IScwkuirnNr91aD0h2xeO6w8AH1WnaUTTF6Qzil+9q+748JeQ
ZI8TH8EdhE6fNFHlEb91NkS88+45CSxcHXURw1xFVQKD9Kxl3Ad+iVooq2qPYRIG
SqPkQW4o/gTa3yInUzbOKhg=
-----END CERTIFICATE-----