Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230342e39332e3230392e302f32342d3234203d3e20323034383433.roa
File:                     3230342e39332e3230392e302f32342d3234203d3e20323034383433.roa (raw, json)
Hash identifier:          ZrkisVBPkgtG9npW70u+oVLvjb2Kfmlzmt9kJuOxxBQ=
Subject key identifier:   37:BB:19:52:A4:C2:C5:F1:B3:A3:4C:A9:72:B4:59:B6:8D:F2:0D:6B
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       59C8DE2A962E45EB3288B25ECC73EF55A21823FD
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230342e39332e3230392e302f32342d3234203d3e20323034383433.roa
Signing time:             Sat 13 May 2023 16:17:32 +0000
ROA not before:           Sat 13 May 2023 16:12:32 +0000
ROA not after:            Sat 11 May 2024 16:17:32 +0000
asID:                     204843
IP address blocks:        204.93.209.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:c8:de:2a:96:2e:45:eb:32:88:b2:5e:cc:73:ef:55:a2:18:23:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: May 13 16:12:32 2023 GMT
            Not After : May 11 16:17:32 2024 GMT
        Subject: CN=37BB1952A4C2C5F1B3A34CA972B459B68DF20D6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4a:27:be:36:d2:b4:ea:8d:d4:0f:7a:1e:3a:
                    2a:6c:a5:3e:ea:35:67:14:90:d8:a3:fc:0e:b6:05:
                    3a:03:34:fd:b6:50:64:4c:06:62:f3:21:b7:64:a5:
                    e4:e4:f2:3f:47:d8:8c:3d:cf:d3:76:fe:f8:7b:79:
                    53:ca:50:ea:b1:6d:26:30:ef:8b:62:ce:70:9a:aa:
                    15:0c:21:21:7b:9c:7a:86:79:ce:43:fb:36:30:d7:
                    47:f3:d7:0a:f8:5f:36:b8:43:78:52:88:d9:7b:b2:
                    21:22:e0:49:f7:46:e2:03:1c:b9:57:5c:29:00:80:
                    4c:67:de:2e:56:70:57:28:c7:b1:a8:b9:28:d3:0b:
                    75:3b:bd:ac:42:50:f9:9e:4f:6c:1e:db:d7:a2:9a:
                    09:44:29:40:9d:60:40:20:8b:a0:1a:14:07:9c:6f:
                    33:b4:a6:e9:f4:72:4b:de:4e:e8:aa:00:e1:ea:ee:
                    be:37:57:1b:52:8d:b9:18:2b:3b:5b:4b:b4:15:8d:
                    86:11:e9:81:27:43:b0:36:bb:ae:86:3f:25:eb:bd:
                    a0:e1:81:f5:8b:51:26:f5:54:12:14:56:9e:18:80:
                    9c:06:a0:2d:a5:91:84:f2:26:43:60:f7:24:97:d6:
                    9d:67:bf:c0:06:95:84:4c:ec:db:2e:de:6d:1e:76:
                    5b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:BB:19:52:A4:C2:C5:F1:B3:A3:4C:A9:72:B4:59:B6:8D:F2:0D:6B
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230342e39332e3230392e302f32342d3234203d3e20323034383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.93.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:b3:e8:44:f9:d8:0f:6b:ae:67:1a:13:13:9c:08:ce:15:64:
         8b:d1:89:54:ff:c3:fe:50:24:6f:65:18:df:1d:77:12:64:20:
         78:bb:c7:05:61:15:92:6e:7b:95:43:47:cb:af:a8:5e:bb:15:
         27:be:e9:e0:be:86:30:8b:a3:a6:43:2b:38:fa:3e:38:7b:c5:
         f9:b8:f1:83:10:0a:e7:c0:d3:38:36:e8:23:ab:07:da:62:9d:
         a7:3c:f7:33:88:2b:ab:36:f1:f5:76:8b:cd:a5:7f:75:3f:fd:
         39:e6:d2:32:5f:26:60:03:4e:28:1c:c5:c2:33:8e:3d:45:91:
         f4:1a:df:53:d1:d1:85:3d:f1:dd:cf:af:43:89:d5:32:0d:c0:
         96:20:fe:0b:77:bf:7e:70:5f:ef:c3:ea:f6:da:be:e1:99:ce:
         61:8a:d4:44:28:cd:eb:e4:10:85:e9:1c:9c:8d:76:13:df:45:
         23:8e:9a:14:30:24:d1:26:42:a8:ae:ce:55:5c:60:80:b4:e9:
         fc:84:0d:3e:e2:1f:1e:2d:6a:43:52:1e:42:cd:ff:0f:23:7d:
         8d:be:61:ab:87:6f:8c:21:59:0b:ac:14:3e:4b:d0:0b:a5:5b:
         65:88:4c:25:2e:31:a6:32:b7:8a:a7:5e:dc:cf:a0:47:3c:50:
         44:21:64:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----