Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230352e3233342e3135312e302f32342d3234203d3e20333937353633.roa
File:                     3230352e3233342e3135312e302f32342d3234203d3e20333937353633.roa (raw, json)
Hash identifier:          jOyJ86iZ+tJys0kADdKwXdiiH8SJ/He+flL3J18Uqxg=
Subject key identifier:   52:E8:A4:76:0C:72:20:44:36:63:E7:11:3E:F3:4A:81:E0:45:19:13
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       211112E742AED09BFE19A102709ED9BD71B0BFBB
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230352e3233342e3135312e302f32342d3234203d3e20333937353633.roa
Signing time:             Fri 26 May 2023 16:18:12 +0000
ROA not before:           Fri 26 May 2023 16:13:12 +0000
ROA not after:            Fri 24 May 2024 16:18:12 +0000
asID:                     397563
IP address blocks:        205.234.151.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:11:12:e7:42:ae:d0:9b:fe:19:a1:02:70:9e:d9:bd:71:b0:bf:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: May 26 16:13:12 2023 GMT
            Not After : May 24 16:18:12 2024 GMT
        Subject: CN=52E8A4760C7220443663E7113EF34A81E0451913
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a1:c9:a9:91:60:a0:fa:f2:e1:8b:55:33:8b:
                    be:c1:76:1c:a4:bc:7c:8b:be:1c:ad:7f:f4:6f:45:
                    98:41:aa:7e:2f:01:71:a5:6a:68:a6:9c:da:4a:f6:
                    01:04:a8:5c:71:b9:9f:22:09:10:70:3f:f6:30:3c:
                    a0:30:01:6b:dd:cd:10:5f:81:e4:46:0c:7f:ba:50:
                    0c:aa:e8:8b:a7:50:39:c2:4c:7f:e4:07:11:6f:2b:
                    fb:61:05:12:63:4e:eb:f4:c0:2c:1f:74:ea:b2:36:
                    07:f0:fd:d7:cd:1c:42:bd:67:fc:8f:be:1a:30:a9:
                    a8:72:65:f2:4e:f5:5b:a0:51:d2:2f:36:af:24:29:
                    33:8c:de:e1:97:8b:43:fa:e3:3c:6b:1a:14:00:bb:
                    75:63:d8:94:09:17:4e:c7:84:34:f5:9f:78:d7:3a:
                    20:af:57:30:5b:65:2b:20:39:86:37:39:63:b7:c2:
                    12:62:22:a7:75:47:ad:db:a3:a4:e5:b1:01:f5:7b:
                    af:d4:86:1f:18:f7:45:3d:64:28:3b:cc:d1:c8:c6:
                    0d:a6:28:2a:7a:01:7e:a9:0d:a3:36:67:41:db:72:
                    70:8c:35:13:68:bd:81:f2:60:2e:b0:28:61:81:6d:
                    9d:25:48:1a:d6:49:7c:1f:5f:ff:95:3c:a7:07:cc:
                    d8:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:E8:A4:76:0C:72:20:44:36:63:E7:11:3E:F3:4A:81:E0:45:19:13
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230352e3233342e3135312e302f32342d3234203d3e20333937353633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.234.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:5f:6d:a4:d2:4f:c7:2f:d4:b4:43:ef:69:cb:d5:ac:82:f5:
         e1:d0:3f:4d:5d:ae:07:f4:c8:0f:53:2b:ae:77:4a:bc:81:a9:
         b8:5a:af:1b:32:c3:44:15:8d:d6:28:d4:e6:3d:1a:df:38:15:
         1f:9f:89:bc:25:7c:87:72:4e:e5:8a:7f:92:db:c3:9f:94:bf:
         dd:59:bb:07:9c:e8:ba:35:a3:3c:61:47:d1:11:e5:a2:15:3f:
         42:9a:6d:a3:ed:02:49:e0:44:3d:0f:0a:6d:20:bd:30:e2:de:
         4f:0d:f4:3c:0b:b1:c6:87:f6:ce:d2:0f:34:fd:e0:c2:54:41:
         96:85:af:75:59:33:b3:f9:f6:0c:81:00:ef:f4:4c:40:9c:10:
         6c:58:b4:38:d7:e1:7c:17:b9:65:e2:65:3c:9c:ad:e6:aa:00:
         61:e8:a5:b2:d8:0e:bd:08:c9:4b:05:fd:e1:f0:b3:fd:03:a2:
         68:2b:3c:50:5b:25:33:2b:2c:49:86:e3:2e:eb:e2:0d:00:9e:
         af:b0:66:6e:07:12:09:43:02:fe:38:08:e6:f2:03:2d:83:db:
         4c:6c:ca:21:10:d5:3e:0e:19:6f:df:66:85:8e:98:f8:6e:1a:
         31:c9:02:c7:d5:fc:14:6a:04:da:86:14:da:dd:f2:cc:d9:6e:
         14:56:2c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----