Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230342e39332e3234352e302f32342d3234203d3e2031323339.roa
File:                     3230342e39332e3234352e302f32342d3234203d3e2031323339.roa (raw, json)
Hash identifier:          Vvv0xtCqpdJzEaW8686ShV8o/GZ5obp/IPke+Pa/Zu4=
Subject key identifier:   80:58:16:1F:C7:74:A3:16:F8:6A:B0:B1:98:13:92:40:57:81:4C:EC
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       3C7D6F2F9B7073EE708FD58636EDC064EA3C8312
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230342e39332e3234352e302f32342d3234203d3e2031323339.roa
Signing time:             Mon 20 Mar 2023 15:50:48 +0000
ROA not before:           Mon 20 Mar 2023 15:45:48 +0000
ROA not after:            Mon 18 Mar 2024 15:50:48 +0000
asID:                     1239
IP address blocks:        204.93.245.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:7d:6f:2f:9b:70:73:ee:70:8f:d5:86:36:ed:c0:64:ea:3c:83:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Mar 20 15:45:48 2023 GMT
            Not After : Mar 18 15:50:48 2024 GMT
        Subject: CN=8058161FC774A316F86AB0B19813924057814CEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6c:7f:94:f9:35:46:fd:39:6e:4a:d8:34:40:
                    59:97:b9:fd:0a:8d:da:75:33:43:f0:d6:8b:68:a7:
                    0b:10:74:5f:7f:fa:00:0f:c7:93:19:23:44:58:43:
                    6c:e1:b4:65:59:81:91:0f:00:7e:52:92:4f:c8:88:
                    e3:d1:40:12:0d:ae:9d:6c:b5:e5:9a:db:77:e6:64:
                    00:95:dd:29:a1:96:c1:b8:22:73:9e:7c:89:69:f0:
                    81:9f:91:88:ec:05:61:97:d3:f6:a3:82:31:82:0d:
                    eb:84:b8:b4:ec:1e:ac:37:74:10:00:3c:f3:99:71:
                    89:19:5f:df:0a:cd:76:30:c7:5b:65:81:27:c1:72:
                    f2:2c:91:97:c6:9a:6a:ed:1e:47:b7:9a:7e:e8:e4:
                    21:4c:51:60:68:b8:d5:f8:f2:02:7b:1e:6b:ec:02:
                    18:72:ab:7f:89:46:dd:5b:3e:d5:56:3e:40:ca:2d:
                    ee:c2:15:58:af:fe:72:97:da:6f:29:02:33:26:a9:
                    ca:5d:26:83:fa:35:d3:65:31:b8:18:56:e8:63:83:
                    08:1c:61:ee:ee:9d:23:f4:ea:55:07:b8:d3:89:91:
                    9f:8d:be:3d:ae:68:ea:79:d6:a3:5f:f1:94:c6:73:
                    1f:44:4f:29:05:33:66:70:da:1c:a8:2e:18:db:31:
                    7f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:58:16:1F:C7:74:A3:16:F8:6A:B0:B1:98:13:92:40:57:81:4C:EC
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230342e39332e3234352e302f32342d3234203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.93.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:95:09:5d:b6:91:cc:71:a0:dd:0c:3f:95:9a:1a:77:5e:7b:
         f0:ff:5f:ca:4a:b1:f3:b5:47:f9:5f:26:6c:3f:3f:dc:3c:07:
         b6:19:de:5b:ed:0d:55:28:20:0b:80:ef:a7:b4:73:4a:36:5e:
         a2:82:d1:58:ea:f5:a6:e8:6b:6d:cb:0d:61:3a:d4:27:c1:1e:
         11:73:75:b8:26:21:68:32:78:97:c5:df:d5:61:9c:a0:4c:73:
         a9:a6:f7:b5:cb:27:e5:26:c3:65:a4:74:df:3c:7b:db:0c:e7:
         f1:0d:b4:4e:4b:27:59:66:37:ea:5c:cc:d5:41:52:73:25:f9:
         67:7e:c8:f3:e6:3f:c4:2e:e3:6b:23:0e:8f:88:48:10:cb:78:
         bc:20:db:33:1d:c6:1b:56:fd:cc:e9:0f:76:87:1d:e1:fc:01:
         80:5b:ce:d9:03:0d:d7:e1:56:4a:0e:ee:63:aa:89:63:8e:f8:
         5d:f9:bb:fe:85:06:d7:5d:17:65:c3:60:c6:e3:68:5a:52:a7:
         8d:23:66:56:b0:06:ad:6a:6e:80:0f:fb:3a:45:ab:6c:34:67:
         c9:48:f1:34:1c:1f:8a:25:8d:04:81:1e:dc:7e:e5:6b:6e:71:
         18:5c:86:75:af:ad:a0:4f:5a:93:7e:e5:6a:d1:6b:99:f7:2f:
         65:23:53:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----