Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230342e39332e3234352e302f32342d3234203d3e203439393939.roa
File:                     3230342e39332e3234352e302f32342d3234203d3e203439393939.roa (raw, json)
Hash identifier:          +wNU1/teSuUzToqntFBIqAlXdCKw+04GGLCJ3o/rDJA=
Subject key identifier:   86:25:AE:47:EF:D2:CE:4B:33:DD:52:44:0F:4F:69:66:72:93:6D:0C
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       2237745F9B578334A873AE265D4BC1C8EA38F07A
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230342e39332e3234352e302f32342d3234203d3e203439393939.roa
Signing time:             Sun 14 May 2023 19:07:20 +0000
ROA not before:           Sun 14 May 2023 19:02:20 +0000
ROA not after:            Sun 12 May 2024 19:07:20 +0000
asID:                     49999
IP address blocks:        204.93.245.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:37:74:5f:9b:57:83:34:a8:73:ae:26:5d:4b:c1:c8:ea:38:f0:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: May 14 19:02:20 2023 GMT
            Not After : May 12 19:07:20 2024 GMT
        Subject: CN=8625AE47EFD2CE4B33DD52440F4F696672936D0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:37:e1:75:08:89:ce:d3:7c:0f:64:bf:1f:69:
                    b7:ea:a7:83:e5:02:f7:95:92:e5:17:db:e8:ba:be:
                    20:bc:26:a9:ad:a3:cb:46:53:24:40:91:96:fa:e5:
                    3b:cb:fe:c5:86:e6:aa:b3:b2:fa:d4:e2:a0:5f:65:
                    9c:80:27:a7:2b:58:06:af:43:00:eb:37:6c:58:1f:
                    7e:a4:40:af:3d:46:12:34:3c:8c:de:c5:94:fd:d3:
                    19:75:9d:ba:fd:69:6b:01:b5:65:1c:62:a8:7e:a1:
                    11:5c:ed:44:f1:82:62:f2:4b:ed:51:49:43:79:49:
                    6f:fc:0d:c3:ee:34:f6:41:82:44:78:f8:55:2f:ca:
                    02:9a:ad:1e:79:8e:47:48:78:89:6b:f1:b8:8c:24:
                    b1:15:b4:87:c2:e4:32:4e:72:49:94:1f:2f:36:c4:
                    7f:62:16:88:a7:a3:8e:7f:e2:d7:b8:b0:36:2e:29:
                    fb:80:90:d3:c9:53:4a:b0:1f:23:57:44:06:54:f8:
                    54:b4:09:a8:2c:28:d6:d8:42:06:cb:04:29:4f:cf:
                    3e:f0:3f:04:c9:5d:28:b0:a1:6b:58:e4:5e:dd:83:
                    fa:9e:49:a1:90:98:b1:54:da:ee:64:28:28:21:60:
                    e0:ca:7c:83:23:bb:ee:9d:29:15:e7:eb:2b:58:30:
                    c3:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:25:AE:47:EF:D2:CE:4B:33:DD:52:44:0F:4F:69:66:72:93:6D:0C
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230342e39332e3234352e302f32342d3234203d3e203439393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.93.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:66:17:28:17:10:19:85:d1:8b:c6:c5:aa:54:f2:ff:92:2f:
         16:c7:00:64:23:69:19:24:02:98:64:11:be:02:33:44:7b:43:
         95:11:62:04:b6:13:04:bf:cf:df:79:b6:8f:34:f0:87:f9:bf:
         a8:97:c4:00:83:9a:f1:f6:4b:2d:1e:4f:69:b8:e6:d3:0d:77:
         01:66:6c:19:07:cb:f5:04:83:58:71:67:57:bc:8a:b4:f1:89:
         2f:b0:54:cc:cf:cd:62:68:18:e7:8e:e9:c6:6e:2a:5d:dd:e1:
         3b:9f:72:4b:ad:fe:1c:98:d1:c6:93:e4:40:ef:13:32:70:ad:
         b3:16:1a:5b:31:2f:48:71:eb:1f:4b:9b:a1:4e:19:60:45:c0:
         58:7a:40:3e:52:69:b5:f1:7b:ee:7e:c3:52:2b:7c:75:89:70:
         73:ee:b0:1c:26:9e:eb:ef:1a:f1:d1:92:3b:30:9d:5c:d8:4e:
         68:66:ad:09:78:71:c3:d2:a7:7d:38:44:86:1e:ad:ed:d1:83:
         78:47:dc:75:bf:22:a0:cd:b9:4d:54:16:66:36:4a:1b:bf:c5:
         37:1b:51:7f:5b:d0:31:1a:ef:a0:f1:c8:02:78:d2:af:ed:39:
         0b:05:f3:82:63:4c:39:2b:cd:30:03:30:31:f9:dd:84:e2:ed:
         af:9f:86:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----