Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230342e39332e3230392e302f32342d3234203d3e20383334.roa
File:                     3230342e39332e3230392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          XOhV6R7DiUweYhbkW+y+Sj6C1d9wN5Ls41k8VmdU6sQ=
Subject key identifier:   FA:03:79:D8:AD:26:B6:BC:B9:26:3B:1D:57:30:60:35:DD:97:BE:DF
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       22A23B8DB93A37831CA2F23EEEBE7826C9705663
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230342e39332e3230392e302f32342d3234203d3e20383334.roa
Signing time:             Thu 20 Apr 2023 00:00:15 +0000
ROA not before:           Wed 19 Apr 2023 23:55:15 +0000
ROA not after:            Thu 18 Apr 2024 00:00:15 +0000
asID:                     834
IP address blocks:        204.93.209.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:a2:3b:8d:b9:3a:37:83:1c:a2:f2:3e:ee:be:78:26:c9:70:56:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Apr 19 23:55:15 2023 GMT
            Not After : Apr 18 00:00:15 2024 GMT
        Subject: CN=FA0379D8AD26B6BCB9263B1D57306035DD97BEDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e5:8d:4f:f6:b8:bc:b3:40:c2:1c:42:90:79:
                    f6:5a:ae:ad:67:dd:a1:5f:06:37:b5:26:a9:d8:24:
                    0c:9e:8a:e5:7e:7c:ef:9d:7d:ef:89:02:eb:ea:4a:
                    4b:9e:1b:07:17:ba:0f:ed:df:6d:ec:df:7a:34:9b:
                    31:b0:06:68:9b:e6:84:5d:98:e4:7d:84:37:3c:21:
                    76:95:74:d7:da:33:6e:4e:b7:35:64:38:f4:28:be:
                    63:51:40:ee:60:26:92:71:36:46:22:0c:a0:b2:9c:
                    95:18:b3:b7:31:1b:63:83:5e:ec:c9:41:15:94:aa:
                    b9:d0:95:a2:30:2e:01:cc:c3:0c:5e:a0:96:0f:ec:
                    6a:f9:c2:c3:ed:1d:70:4c:03:e5:4b:a0:52:8a:44:
                    7b:99:10:bd:68:3b:70:ca:ac:3a:53:c0:96:77:37:
                    6d:c5:98:8b:30:85:15:8e:55:21:08:94:15:b3:30:
                    3b:5d:94:c5:d1:8e:9c:5f:bd:f3:49:b1:19:5e:fa:
                    f3:5c:a6:40:3b:01:e4:87:d1:99:d2:83:52:bf:b0:
                    75:74:a0:69:18:88:06:e0:29:c6:6d:1a:0e:5d:f5:
                    0a:c3:fd:33:a5:b3:cf:cd:b6:e1:e1:fa:e3:d1:5d:
                    f3:7a:32:e0:ac:f5:35:df:a7:90:2a:0f:25:7a:3a:
                    c0:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:03:79:D8:AD:26:B6:BC:B9:26:3B:1D:57:30:60:35:DD:97:BE:DF
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230342e39332e3230392e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.93.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:c0:09:2c:5e:7c:4d:d2:6f:5c:fe:0f:63:c8:ee:2d:6a:12:
         13:55:94:34:f0:b7:30:a1:c2:37:1b:ff:81:68:90:0e:09:90:
         68:df:74:6c:a4:6a:2f:91:a8:6c:38:d5:17:b7:70:b8:aa:be:
         12:68:9e:f6:77:f1:99:8c:42:60:81:3a:12:49:e8:53:49:da:
         bf:6a:bc:e6:52:93:83:b7:92:95:e1:1d:0e:2e:61:39:49:61:
         36:9a:e4:b5:b7:5d:0b:7a:97:aa:fd:7f:93:51:88:f7:17:f2:
         d5:2d:ee:ec:ec:bd:6d:0c:44:e1:78:4b:be:70:c7:67:51:94:
         d0:21:86:ec:f1:f3:74:e7:16:d4:ab:3d:78:3f:dd:87:40:c8:
         94:e1:4e:ba:48:0a:86:b9:b9:27:8e:27:11:eb:6d:da:a3:23:
         74:9b:44:36:1a:92:e1:e1:a1:e1:f4:86:41:62:1e:2c:8e:85:
         85:a8:75:fb:30:ed:2d:9e:8a:66:e9:e6:a1:26:8c:b7:7e:ce:
         01:ef:b4:25:ca:96:cc:56:cd:a3:49:c9:c3:1e:d9:fd:60:0f:
         fd:73:18:61:9b:f4:29:04:ed:52:ab:f7:48:92:93:a1:a6:7c:
         2a:cf:f5:51:15:ce:42:29:6a:10:e5:cf:de:85:b9:2d:7e:95:
         d3:e6:15:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----