Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230342e39332e3139352e302f32342d3234203d3e20383334.roa
File:                     3230342e39332e3139352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          ARPaaEXicEI+Vwi/60l4fnkZj4eVN4A/9cKcdfhZVwM=
Subject key identifier:   AA:B0:CA:EB:C5:89:2B:38:DA:3B:40:1A:22:51:AA:A2:EB:FD:A8:EE
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       03DFFD9271D1DC249AECE69977B32501086EA504
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230342e39332e3139352e302f32342d3234203d3e20383334.roa
Signing time:             Thu 20 Apr 2023 00:00:10 +0000
ROA not before:           Wed 19 Apr 2023 23:55:10 +0000
ROA not after:            Thu 18 Apr 2024 00:00:10 +0000
asID:                     834
IP address blocks:        204.93.195.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:df:fd:92:71:d1:dc:24:9a:ec:e6:99:77:b3:25:01:08:6e:a5:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Apr 19 23:55:10 2023 GMT
            Not After : Apr 18 00:00:10 2024 GMT
        Subject: CN=AAB0CAEBC5892B38DA3B401A2251AAA2EBFDA8EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:70:c5:18:b4:ab:a9:d1:66:99:07:71:8f:fc:
                    ed:80:03:ba:66:6d:46:54:16:a1:79:75:7d:90:c6:
                    ee:3f:3f:cc:39:77:50:ed:07:2d:13:5c:37:ef:ee:
                    d8:d9:c4:55:e1:d3:83:88:1e:5d:e4:3f:72:97:fc:
                    23:f3:a5:7e:af:1c:c5:f1:cd:ed:62:a7:5d:7d:01:
                    9e:27:bd:8f:ca:3f:77:82:c7:90:81:2e:94:19:e0:
                    8e:ad:25:9d:77:fd:b6:59:17:79:84:12:be:0b:18:
                    9e:5d:af:17:da:41:25:a6:13:7b:e8:9c:ca:f0:82:
                    8a:30:9b:7d:aa:12:a4:be:16:7a:e3:e9:15:ec:62:
                    66:1c:6c:32:6e:5d:09:74:3f:93:05:89:03:d7:50:
                    00:25:d0:af:0f:ef:41:75:e9:72:cf:07:68:ab:1a:
                    51:38:27:51:b6:a1:ae:0d:f8:2e:d7:1e:15:2e:c5:
                    a6:af:47:77:ba:18:2a:18:d8:eb:91:11:e6:7c:20:
                    15:1b:68:fe:29:2e:cf:b6:80:42:59:13:8d:37:0d:
                    67:78:39:5b:cf:33:bf:b6:75:89:29:0a:df:fe:bc:
                    9e:72:18:0d:3a:5e:a5:77:72:7d:be:26:c1:5a:54:
                    04:d0:90:cd:a9:3d:60:5d:77:b7:c0:e7:2d:ef:3f:
                    2b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:B0:CA:EB:C5:89:2B:38:DA:3B:40:1A:22:51:AA:A2:EB:FD:A8:EE
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230342e39332e3139352e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.93.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:54:1c:02:19:a9:37:a9:9b:92:2b:48:6f:85:34:78:7f:a3:
         9f:c9:21:a7:c0:8f:0d:a9:2c:4e:47:dd:88:9c:0b:7e:d2:e9:
         d5:29:1f:34:01:dc:c3:68:e3:71:54:e2:df:5e:b6:f5:f5:02:
         35:fc:5a:dd:f2:a3:9b:61:d1:6e:d6:1b:9b:28:ad:0f:51:35:
         c8:82:9e:67:b2:25:ad:5c:ab:5e:16:d1:a0:e0:84:5d:b9:4c:
         a9:6e:32:4c:7a:dc:df:85:3e:26:9f:fb:92:e8:bf:ae:28:75:
         9d:12:69:33:ac:84:3a:8b:90:77:62:43:80:68:43:a1:f7:55:
         15:3e:5b:43:37:3a:ba:61:16:b4:a2:60:82:e0:a1:10:7a:d5:
         78:8c:d0:6b:d8:1e:d3:34:4a:87:21:c5:44:1e:5c:51:8f:e7:
         f3:89:e1:b4:05:b4:91:45:c3:d5:af:96:07:0d:a6:e5:94:37:
         db:d6:3e:f9:82:b2:da:93:b6:25:09:da:79:65:55:35:92:0b:
         13:48:48:c6:1b:1a:c6:87:f2:c3:2f:ff:04:7a:40:2e:3c:92:
         5b:97:9b:88:e6:2a:1e:16:37:e5:6c:8d:47:94:49:36:63:ed:
         71:f8:cd:3d:c5:7c:16:fa:0f:ac:a8:c7:a6:bd:d3:ab:c5:11:
         bd:81:5c:20
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIUA9/9knHR3CSa7OaZd7MlAQhupQQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjk2MjZjMmUwYjk2NGVkNWU4YmE2YTZmM2VkMGZkNjM2
Y2YzNjQ1ZDZjY2I2MTIzYjkwHhcNMjMwNDE5MjM1NTEwWhcNMjQwNDE4MDAwMDEw
WjAzMTEwLwYDVQQDEyhBQUIwQ0FFQkM1ODkyQjM4REEzQjQwMUEyMjUxQUFBMkVC
RkRBOEVFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXDFGLSrqdFm
mQdxj/ztgAO6Zm1GVBaheXV9kMbuPz/MOXdQ7QctE1w37+7Y2cRV4dODiB5d5D9y
l/wj86V+rxzF8c3tYqddfQGeJ72Pyj93gseQgS6UGeCOrSWdd/22WRd5hBK+Cxie
Xa8X2kElphN76JzK8IKKMJt9qhKkvhZ64+kV7GJmHGwybl0JdD+TBYkD11AAJdCv
D+9BdelyzwdoqxpROCdRtqGuDfgu1x4VLsWmr0d3uhgqGNjrkRHmfCAVG2j+KS7P
toBCWRONNw1neDlbzzO/tnWJKQrf/ryechgNOl6ld3J9vibBWlQE0JDNqT1gXXe3
wOct7z8rLwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFKqwyuvFiSs42jtAGiJRqqLr
/ajuMB8GA1UdIwQYMBaAFE8GHzq5hjgo92M+vEYwD5t+h3q8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODY5M2YwNjAwMTg2YzZlN2ZkOGQzNjYwLzAv
NEYwNjFGM0FCOTg2MzgyOEY3NjMzRUJDNDYzMDBGOUI3RTg3N0FCQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2FkOWIzMDEwLTMxMTYtNDY0ZS04YzU4LTk1ODY1MDBmMTcwMS82OTYy
NmMyZTBiOTY0ZWQ1ZThiYTZhNmYzZWQwZmQ2MzZjZjM2NDVkNmNjYjYxMjNiOS5j
ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRlODY5M2YwNjAwMTg2YzZl
N2ZkOGQzNjYwLzAvMzIzMDM0MmUzOTMzMmUzMTM5MzUyZTMwMmYzMjM0MmQzMjM0
MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADMXcMwDQYJKoZIhvcNAQELBQADggEB
AAhUHAIZqTepm5IrSG+FNHh/o5/JIafAjw2pLE5H3YicC37S6dUpHzQB3MNo43FU
4t9etvX1AjX8Wt3yo5th0W7WG5sorQ9RNciCnmeyJa1cq14W0aDghF25TKluMkx6
3N+FPiaf+5Lov64odZ0SaTOshDqLkHdiQ4BoQ6H3VRU+W0M3OrphFrSiYILgoRB6
1XiM0GvYHtM0SochxUQeXFGP5/OJ4bQFtJFFw9WvlgcNpuWUN9vWPvmCstqTtiUJ
2nllVTWSCxNISMYbGsaH8sMv/wR6QC48kluXm4jmKh4WN+VsjUeUSTZj7XH4zT3F
fBb6D6yox6a906vFEb2BXCA=
-----END CERTIFICATE-----