Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230342e39332e3231302e302f32342d3234203d3e20383334.roa
File:                     3230342e39332e3231302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          lulBepZpl20KW/ubgBYx7/Xd3odBsYJDRA7Vy4WJIkw=
Subject key identifier:   DA:68:88:16:B6:AE:5B:63:BB:91:69:10:11:6B:53:70:0E:B4:16:D7
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       6A93E9533F0102E86821DFF09E2B047D61046E10
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230342e39332e3231302e302f32342d3234203d3e20383334.roa
Signing time:             Thu 04 May 2023 00:00:07 +0000
ROA not before:           Wed 03 May 2023 23:55:07 +0000
ROA not after:            Thu 02 May 2024 00:00:07 +0000
asID:                     834
IP address blocks:        204.93.210.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:93:e9:53:3f:01:02:e8:68:21:df:f0:9e:2b:04:7d:61:04:6e:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: May  3 23:55:07 2023 GMT
            Not After : May  2 00:00:07 2024 GMT
        Subject: CN=DA688816B6AE5B63BB916910116B53700EB416D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:9d:69:ad:e6:56:1c:f7:f6:d8:23:0e:4b:37:
                    f1:27:ea:b4:8d:cb:f1:b8:02:53:3f:2a:03:c6:79:
                    3e:45:e5:b2:eb:76:d2:cd:9b:7d:d3:f6:fc:11:19:
                    e7:51:b1:c4:47:98:0b:a8:39:dc:fd:0e:21:89:d5:
                    ca:02:91:58:b5:b0:6a:cf:cd:01:66:2f:96:c4:39:
                    c9:70:4b:8f:6f:4c:4e:7a:74:65:1f:49:4a:c7:ec:
                    d9:87:98:28:7a:08:57:93:49:ca:1c:d9:0c:fc:a9:
                    10:bf:c3:75:fe:2d:6f:a4:21:ec:2f:e3:56:e3:0c:
                    a3:3c:d6:5b:94:cc:58:c6:03:40:8c:c7:be:b4:7d:
                    a8:a0:5e:ae:a8:c5:17:65:90:f6:74:3b:2a:05:ee:
                    e7:db:b7:60:81:5c:8e:91:a5:fa:c2:05:88:aa:1b:
                    29:2f:68:f3:a5:4c:1a:e8:db:04:b1:59:1e:ef:1f:
                    89:7f:57:3a:af:44:b5:f9:29:1f:db:8e:46:4e:bd:
                    b5:4e:bd:4a:1c:21:09:f3:1d:0a:dc:71:bf:8e:14:
                    00:ab:13:e3:76:95:8f:b2:2e:90:55:e1:00:9c:6b:
                    a0:af:a8:a7:bd:40:b5:08:4f:d9:e4:2b:fb:37:ce:
                    e4:ee:72:0b:b2:cd:d6:57:af:b1:ee:0c:d0:65:35:
                    68:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:68:88:16:B6:AE:5B:63:BB:91:69:10:11:6B:53:70:0E:B4:16:D7
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230342e39332e3231302e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.93.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:29:99:ec:f4:48:cc:87:8b:10:69:f4:d1:b1:1c:e0:b4:0b:
         a5:f6:04:1c:2f:0d:f4:00:9d:7d:30:7f:4f:14:3d:8c:74:88:
         5e:5e:bb:bd:2e:a6:15:49:d5:20:b4:56:f2:f4:93:cb:3e:59:
         f1:3e:e9:96:f4:3d:74:d5:df:c1:42:45:9a:aa:e3:c8:a9:4d:
         59:63:bd:d4:01:a8:52:fe:23:56:03:39:63:42:8e:77:71:c5:
         b9:1d:61:03:fe:4c:60:5b:ba:a1:3e:b8:af:1b:7b:0e:6d:bf:
         1f:93:ae:3a:d8:3c:06:9a:af:6d:a4:00:f4:ff:21:a8:88:85:
         e7:88:3a:41:f8:1e:f4:e7:15:08:93:f4:89:54:99:c5:62:41:
         8d:e4:33:c7:f9:0d:35:a6:c3:cf:fb:0e:33:13:7c:cd:81:b2:
         6a:d8:ee:e3:2c:7b:47:96:7d:90:67:2a:bc:7d:e3:4b:66:b6:
         ad:6b:52:b2:01:0d:27:56:d1:a7:ce:ab:50:f0:fd:75:87:82:
         74:34:26:0c:15:4b:27:57:2a:d6:a0:be:f4:93:63:fa:04:a1:
         03:29:8e:27:a8:0f:0b:ba:5b:2c:49:84:d0:31:46:09:3b:f6:
         cc:db:49:9f:1a:67:9a:09:ba:80:85:9a:2b:b3:63:89:d1:3a:
         c3:09:14:e9
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIUapPpUz8BAuhoId/wnisEfWEEbhAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjk2MjZjMmUwYjk2NGVkNWU4YmE2YTZmM2VkMGZkNjM2
Y2YzNjQ1ZDZjY2I2MTIzYjkwHhcNMjMwNTAzMjM1NTA3WhcNMjQwNTAyMDAwMDA3
WjAzMTEwLwYDVQQDEyhEQTY4ODgxNkI2QUU1QjYzQkI5MTY5MTAxMTZCNTM3MDBF
QjQxNkQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJ1preZWHPf2
2CMOSzfxJ+q0jcvxuAJTPyoDxnk+ReWy63bSzZt90/b8ERnnUbHER5gLqDnc/Q4h
idXKApFYtbBqz80BZi+WxDnJcEuPb0xOenRlH0lKx+zZh5goeghXk0nKHNkM/KkQ
v8N1/i1vpCHsL+NW4wyjPNZblMxYxgNAjMe+tH2ooF6uqMUXZZD2dDsqBe7n27dg
gVyOkaX6wgWIqhspL2jzpUwa6NsEsVke7x+Jf1c6r0S1+Skf245GTr21Tr1KHCEJ
8x0K3HG/jhQAqxPjdpWPsi6QVeEAnGugr6invUC1CE/Z5Cv7N87k7nILss3WV6+x
7gzQZTVo8QIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFNpoiBa2rltju5FpEBFrU3AO
tBbXMB8GA1UdIwQYMBaAFE8GHzq5hjgo92M+vEYwD5t+h3q8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODY5M2YwNjAwMTg2YzZlN2ZkOGQzNjYwLzAv
NEYwNjFGM0FCOTg2MzgyOEY3NjMzRUJDNDYzMDBGOUI3RTg3N0FCQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2FkOWIzMDEwLTMxMTYtNDY0ZS04YzU4LTk1ODY1MDBmMTcwMS82OTYy
NmMyZTBiOTY0ZWQ1ZThiYTZhNmYzZWQwZmQ2MzZjZjM2NDVkNmNjYjYxMjNiOS5j
ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRlODY5M2YwNjAwMTg2YzZl
N2ZkOGQzNjYwLzAvMzIzMDM0MmUzOTMzMmUzMjMxMzAyZTMwMmYzMjM0MmQzMjM0
MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADMXdIwDQYJKoZIhvcNAQELBQADggEB
AL0pmez0SMyHixBp9NGxHOC0C6X2BBwvDfQAnX0wf08UPYx0iF5eu70uphVJ1SC0
VvL0k8s+WfE+6Zb0PXTV38FCRZqq48ipTVljvdQBqFL+I1YDOWNCjndxxbkdYQP+
TGBbuqE+uK8bew5tvx+TrjrYPAaar22kAPT/IaiIheeIOkH4HvTnFQiT9IlUmcVi
QY3kM8f5DTWmw8/7DjMTfM2BsmrY7uMse0eWfZBnKrx940tmtq1rUrIBDSdW0afO
q1Dw/XWHgnQ0JgwVSydXKtagvvSTY/oEoQMpjieoDwu6WyxJhNAxRgk79szbSZ8a
Z5oJuoCFmiuzY4nROsMJFOk=
-----END CERTIFICATE-----