Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230342e39332e3233352e302f32342d3234203d3e203439393939.roa
File:                     3230342e39332e3233352e302f32342d3234203d3e203439393939.roa (raw, json)
Hash identifier:          aIsw1rbzrPZ5wJOa9cG7ZHsjMJC1kVW649jKuKMV0Ww=
Subject key identifier:   56:C3:12:1B:AB:EF:3F:0E:EE:74:DF:CB:4E:DF:6F:36:B4:D6:FC:D3
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       4B25EF1B7B83BAE530A01D5965096C1AA9E78DB8
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230342e39332e3233352e302f32342d3234203d3e203439393939.roa
Signing time:             Wed 03 May 2023 11:17:17 +0000
ROA not before:           Wed 03 May 2023 11:12:17 +0000
ROA not after:            Wed 01 May 2024 11:17:17 +0000
asID:                     49999
IP address blocks:        204.93.235.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:25:ef:1b:7b:83:ba:e5:30:a0:1d:59:65:09:6c:1a:a9:e7:8d:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: May  3 11:12:17 2023 GMT
            Not After : May  1 11:17:17 2024 GMT
        Subject: CN=56C3121BABEF3F0EEE74DFCB4EDF6F36B4D6FCD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:52:42:1e:77:3a:82:0e:70:08:41:ac:b2:13:
                    33:c4:3e:4d:b5:3c:52:92:eb:2f:57:d5:ad:7d:1d:
                    9e:1e:32:5a:5c:7d:4f:6c:14:94:8d:51:3b:05:49:
                    0e:e4:0b:6d:fd:32:ef:0e:0e:00:fa:aa:30:e4:1e:
                    c6:a3:dd:e1:8f:b9:7a:3a:e9:71:5d:3c:13:33:71:
                    ca:3b:1b:dc:20:35:99:cd:42:01:ce:b8:0a:8d:68:
                    12:79:2d:e7:0e:f5:21:e1:cb:73:8b:03:09:2a:48:
                    bc:af:b5:42:b6:35:43:16:4a:b8:45:55:2e:6b:58:
                    b3:26:9e:5a:af:1b:c6:23:bf:f8:55:bd:54:84:eb:
                    33:97:6a:27:54:83:48:d0:d3:55:57:d8:fa:a5:b3:
                    ae:5a:51:9e:53:e3:ca:3e:0c:bb:d0:34:fb:20:1b:
                    a2:9e:22:a9:88:6b:19:83:23:64:dd:c2:c7:e7:5f:
                    bf:d5:04:75:da:31:4f:21:c2:cb:9b:20:30:21:2d:
                    4d:08:70:0e:68:78:9e:d8:f2:fe:2c:19:0d:a3:7c:
                    18:33:c2:58:39:07:e2:2a:26:3c:6a:1a:63:39:47:
                    4f:3a:73:8c:3d:cf:6c:6e:33:a5:f3:24:24:c6:48:
                    c0:d1:6a:36:60:1b:4a:b1:c6:47:1a:c4:72:08:01:
                    dc:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:C3:12:1B:AB:EF:3F:0E:EE:74:DF:CB:4E:DF:6F:36:B4:D6:FC:D3
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230342e39332e3233352e302f32342d3234203d3e203439393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.93.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:65:35:f8:c0:b8:a7:c3:d7:a1:64:e6:44:6f:b7:62:bb:d4:
         b6:a3:68:8e:c5:b9:c6:25:22:b4:0c:2e:f3:d0:df:56:cc:d9:
         5b:07:d3:23:30:ea:eb:79:25:a9:ab:27:cb:4f:73:05:8f:63:
         bc:db:a8:21:10:32:9a:0b:22:86:46:61:e3:42:c9:23:83:68:
         48:6e:44:0c:62:35:28:46:31:10:11:ac:e5:c5:ae:ce:f5:0e:
         32:c7:31:66:84:a0:02:56:03:60:31:ad:7e:18:47:ea:9e:b5:
         bf:1e:e6:39:55:8e:34:41:4e:f9:28:b7:db:bb:69:ba:19:2b:
         1f:09:43:bb:2f:ea:39:29:d2:4b:eb:91:90:de:ea:92:b0:f6:
         a6:10:08:2e:b3:1f:bc:d2:d9:b0:39:d4:20:99:47:35:dc:98:
         07:08:2d:a2:e3:d9:76:30:cb:55:f8:f7:d7:9c:92:a7:1c:21:
         60:51:7b:da:ba:d5:a5:4c:2a:75:08:5a:13:78:58:16:e7:9d:
         a9:5b:11:2e:ad:8d:27:d8:40:c2:4f:0a:b1:4a:f2:c7:d6:12:
         b7:ba:c6:1c:ec:94:6f:ba:e5:0e:02:45:c1:f3:90:d6:ec:74:
         72:3c:10:9e:f9:eb:58:36:d0:85:ce:f4:0f:f1:6a:ac:4a:27:
         d5:31:89:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----