Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230342e39332e3231372e302f32342d3234203d3e20323132343438.roa
File:                     3230342e39332e3231372e302f32342d3234203d3e20323132343438.roa (raw, json)
Hash identifier:          4sL2r8ButsS28XLdiHHkfcPESOtgPbBOuUTR3pvjU8U=
Subject key identifier:   04:B0:44:57:77:86:BC:91:52:81:81:77:DE:DC:84:44:4A:86:F7:12
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       42183EBA538628304FD37BA655CD423DCBA8BFD3
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230342e39332e3231372e302f32342d3234203d3e20323132343438.roa
Signing time:             Tue 16 May 2023 15:24:46 +0000
ROA not before:           Tue 16 May 2023 15:19:46 +0000
ROA not after:            Tue 14 May 2024 15:24:46 +0000
asID:                     212448
IP address blocks:        204.93.217.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:18:3e:ba:53:86:28:30:4f:d3:7b:a6:55:cd:42:3d:cb:a8:bf:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: May 16 15:19:46 2023 GMT
            Not After : May 14 15:24:46 2024 GMT
        Subject: CN=04B044577786BC9152818177DEDC84444A86F712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:68:54:a4:4c:61:2a:45:3b:8d:62:d0:d4:95:
                    3a:80:76:75:23:5c:d1:c0:91:e7:64:3d:8d:65:c8:
                    8d:1c:b7:85:83:5a:36:77:29:22:c6:57:ef:a5:d1:
                    e7:df:07:a5:c7:2c:e0:41:16:5d:79:5b:b0:bc:31:
                    cb:9f:e1:5e:8b:47:9d:20:68:21:ff:4d:e3:5b:77:
                    c7:75:d2:da:bb:93:93:af:da:2b:83:c9:44:d0:07:
                    d4:23:85:78:be:ae:b0:ca:5b:3e:f9:f3:4f:2d:d9:
                    c8:de:c1:e2:ac:e4:2c:3a:ed:0b:1f:d5:52:af:63:
                    de:e7:76:84:65:e0:5e:98:ed:fe:73:8b:0b:b9:9c:
                    0b:7e:19:6c:f9:ea:59:23:2f:af:46:a9:5d:83:92:
                    46:7f:4a:90:3f:a0:e6:37:da:50:10:39:3f:4e:a2:
                    5c:8b:ee:8a:82:4c:37:62:26:a8:2a:68:06:08:32:
                    3e:f4:85:cd:24:d2:fd:89:f6:9c:2a:69:f8:3c:bb:
                    c7:67:d9:9d:8d:1f:d3:48:01:bb:4b:35:4f:91:cf:
                    fc:19:b3:25:19:88:a1:47:c8:be:bb:c0:56:bd:bf:
                    df:bf:a4:2d:18:7e:6d:41:b5:c1:99:4e:b0:9a:45:
                    9f:8e:09:18:58:c2:2e:3b:d2:76:48:43:e8:98:22:
                    77:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:B0:44:57:77:86:BC:91:52:81:81:77:DE:DC:84:44:4A:86:F7:12
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230342e39332e3231372e302f32342d3234203d3e20323132343438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.93.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:65:da:47:48:14:f3:a2:26:e7:cf:dc:84:ac:25:26:31:62:
         53:39:f2:d9:3f:6b:86:97:c0:ff:70:a4:12:5f:9e:29:0b:da:
         8c:39:e2:bd:3e:e3:ae:d5:d6:a0:9b:ff:e3:c8:91:bb:68:db:
         30:e2:a4:5c:57:40:2e:47:ae:b5:7d:ab:82:3b:19:62:d1:a2:
         17:59:22:92:49:53:d8:56:53:f6:75:a1:8c:28:3b:dd:f1:3e:
         7f:ff:06:2e:44:7a:cf:e0:a3:8d:db:09:8b:5c:4d:cb:b0:ba:
         df:10:16:48:78:ab:e6:ea:77:6a:fc:32:0d:c4:52:f8:c8:77:
         02:f5:9d:69:ba:09:87:d3:e7:26:7d:45:be:2e:2e:4f:47:95:
         2a:06:b1:d8:35:04:f3:ab:14:46:34:cf:b7:cc:38:ca:6d:04:
         2c:d6:eb:1d:49:8a:e2:3c:2b:23:8d:eb:15:b7:46:8b:8c:dd:
         97:b7:8a:d9:2e:16:09:97:ac:cc:54:f6:ea:41:e2:9b:25:c6:
         6e:45:78:40:91:c0:e1:fd:3d:b6:81:50:bc:9d:c1:83:51:32:
         5c:3c:79:ca:af:d4:7f:e8:01:66:41:65:78:fd:8a:47:ed:b6:
         9d:7a:12:46:42:67:17:95:2e:91:aa:c7:40:3b:5a:bf:d9:b0:
         0b:bd:12:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----