Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230342e39332e3230392e302f32342d3234203d3e2031323339.roa
File:                     3230342e39332e3230392e302f32342d3234203d3e2031323339.roa (raw, json)
Hash identifier:          kOqe1T2sPNWT2PkZbIqXB/vZzaQ3hpCzGo/oe93D56c=
Subject key identifier:   AE:91:29:62:35:06:A9:13:0E:BC:04:A3:B4:52:33:EB:D0:EE:0E:E8
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       5E6CAB472ACC6B1F7084C8E92CC1D8EA85CDD3B2
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230342e39332e3230392e302f32342d3234203d3e2031323339.roa
Signing time:             Mon 20 Mar 2023 15:50:47 +0000
ROA not before:           Mon 20 Mar 2023 15:45:47 +0000
ROA not after:            Mon 18 Mar 2024 15:50:47 +0000
asID:                     1239
IP address blocks:        204.93.209.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:6c:ab:47:2a:cc:6b:1f:70:84:c8:e9:2c:c1:d8:ea:85:cd:d3:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Mar 20 15:45:47 2023 GMT
            Not After : Mar 18 15:50:47 2024 GMT
        Subject: CN=AE9129623506A9130EBC04A3B45233EBD0EE0EE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:7d:43:51:2b:1b:c5:6c:15:10:1d:23:7e:2f:
                    30:25:c8:af:3b:a4:28:77:a5:33:1b:a7:c4:dc:c9:
                    b1:c1:f0:18:1d:23:96:72:62:ff:7f:d6:38:9b:0e:
                    8d:ae:ae:40:0c:4d:74:2e:84:c7:39:6a:0c:73:20:
                    fe:e6:76:c6:11:e8:0f:48:3b:30:27:8e:ef:0d:f7:
                    5a:5e:e0:3f:f2:89:97:81:14:57:0b:05:b6:dd:b0:
                    a1:7b:40:f0:f8:0f:09:ec:bb:d7:39:71:10:e6:fd:
                    b9:1c:91:d0:39:1a:4c:24:50:bf:f0:30:fd:69:a8:
                    86:24:66:7f:9e:d4:df:68:af:35:7c:12:97:b2:c1:
                    4d:79:a8:5d:5c:2d:65:d2:4e:0a:dc:9c:31:d4:f8:
                    ad:8d:50:d4:47:e0:68:b9:9f:78:58:7b:8a:23:76:
                    11:c7:ec:e3:0e:a6:53:86:10:64:64:bd:6c:93:14:
                    ba:3b:77:1c:66:1b:da:eb:1c:00:b7:28:68:6c:c1:
                    a1:9c:d5:6b:0b:a0:aa:f0:37:70:a7:6b:13:b8:45:
                    87:c7:7b:85:c8:00:3b:50:d3:5b:b5:5d:e4:12:58:
                    24:77:19:f3:1a:03:ce:32:e2:8d:b5:e3:2d:7f:d4:
                    a2:b3:57:96:14:36:12:75:1b:40:02:23:bc:2a:78:
                    53:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:91:29:62:35:06:A9:13:0E:BC:04:A3:B4:52:33:EB:D0:EE:0E:E8
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230342e39332e3230392e302f32342d3234203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.93.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:c1:1c:11:c7:94:fc:c9:79:23:1a:f8:a6:7f:4a:2a:0a:82:
         d6:1a:20:fa:75:bd:5f:af:02:99:91:8a:4c:fc:58:aa:40:11:
         a6:51:1b:13:48:3c:e9:b0:3b:d8:36:a3:87:2d:b3:e9:7b:ae:
         2a:1b:af:2b:69:3c:7e:95:82:05:1a:cc:06:ee:f0:33:ba:3d:
         ac:77:25:65:c5:21:4d:28:ed:cc:66:b6:27:8b:a8:79:50:bd:
         21:2f:7a:a9:0b:f1:10:da:58:0e:3e:c1:5a:ed:8d:6d:e3:3a:
         6a:ea:07:df:5b:a1:3d:92:98:ee:19:bd:5a:c3:9a:d4:d6:55:
         f0:09:12:97:be:2a:24:6a:b2:fd:6b:44:b1:56:50:36:e3:4d:
         96:62:49:28:d8:90:bc:25:c1:6c:1d:50:b9:1e:c7:19:55:9a:
         d9:84:04:4d:fd:9d:e3:53:e7:9a:8d:bd:fc:b3:d9:55:be:24:
         ab:cd:ee:2d:c2:fa:25:d0:ca:13:72:90:9e:e3:e0:4c:c3:80:
         35:8f:97:d8:73:42:ba:65:44:ef:23:9e:17:4e:e8:e4:ff:5d:
         e0:a2:5a:97:b2:1e:91:b0:d9:23:44:93:26:dd:5b:d9:ef:c5:
         a7:f8:9d:56:54:0e:c1:a8:e7:a1:98:bd:a8:d3:c6:52:f6:84:
         86:01:93:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----