Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230352e3233342e3136312e302f32342d3234203d3e203230343733.roa
File:                     3230352e3233342e3136312e302f32342d3234203d3e203230343733.roa (raw, json)
Hash identifier:          5ogn9U3LUIEh7Uye2Zd7G9bFh/ATchj4uydlxZnYEcU=
Subject key identifier:   A0:08:E1:91:75:AE:94:16:A7:EB:95:1E:BD:03:D5:B6:D1:32:8A:8A
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       3C6DB7768E176B4713E54EA8975979F426BE3D66
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230352e3233342e3136312e302f32342d3234203d3e203230343733.roa
Signing time:             Mon 13 Mar 2023 07:40:47 +0000
ROA not before:           Mon 13 Mar 2023 07:35:47 +0000
ROA not after:            Mon 11 Mar 2024 07:40:47 +0000
asID:                     20473
IP address blocks:        205.234.161.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:6d:b7:76:8e:17:6b:47:13:e5:4e:a8:97:59:79:f4:26:be:3d:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Mar 13 07:35:47 2023 GMT
            Not After : Mar 11 07:40:47 2024 GMT
        Subject: CN=A008E19175AE9416A7EB951EBD03D5B6D1328A8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3b:a3:52:83:05:55:be:98:8a:05:c6:46:9f:
                    2e:fc:fc:c3:de:c5:4d:1b:ce:8b:58:84:21:d3:35:
                    06:d2:29:45:f7:d0:3e:a0:dd:91:80:5e:93:72:a0:
                    e4:db:5e:db:be:69:a0:d8:ea:03:fe:58:ad:c9:8e:
                    4e:8b:e7:50:db:4c:68:cc:55:41:68:8b:4c:9d:b8:
                    45:43:76:f4:13:23:50:ca:66:fe:d3:4c:d8:83:09:
                    f5:40:ed:20:23:10:36:4a:a7:2e:5b:eb:df:76:8a:
                    91:ce:75:ad:30:4c:0b:20:a8:53:0c:af:39:1a:77:
                    b8:49:1d:cc:78:35:d1:fd:e6:22:18:ac:67:1e:a5:
                    23:8b:5a:7e:4f:ff:f1:d8:2b:c3:49:25:af:c7:91:
                    60:45:e1:0c:a2:36:0e:36:92:d3:36:bf:3d:52:b3:
                    17:e7:41:ab:52:00:e6:a6:47:bb:a2:55:08:dd:2d:
                    fd:31:73:cd:5b:bb:18:19:41:4b:18:0c:98:ac:e2:
                    0d:07:88:46:ca:88:b8:ab:22:b1:4b:f9:53:09:fd:
                    0f:89:8d:ea:ea:47:31:61:83:55:30:c6:61:f7:d8:
                    a8:f0:6e:60:6b:ff:00:eb:e8:a5:49:37:77:89:41:
                    cf:e2:dd:86:b1:b7:65:b4:37:09:94:00:38:89:bb:
                    93:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:08:E1:91:75:AE:94:16:A7:EB:95:1E:BD:03:D5:B6:D1:32:8A:8A
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230352e3233342e3136312e302f32342d3234203d3e203230343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.234.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:0f:86:10:69:d0:f9:8f:3c:ac:b4:d8:1f:c0:44:36:19:46:
         8d:13:61:18:41:d2:a7:51:2d:16:69:ba:59:b3:c3:5c:b0:d4:
         35:44:12:52:9a:f7:b2:1a:91:cb:f6:ad:f8:5d:dc:88:91:2b:
         ad:b8:7f:a8:2b:1d:a1:72:6d:67:2a:02:ec:07:92:2c:a3:15:
         84:71:fa:53:e2:55:e1:5a:a8:9a:b8:04:a0:4b:f0:76:47:f8:
         0f:47:76:bc:0e:ac:86:41:ea:4d:9b:66:47:10:84:2e:30:b3:
         8c:2a:b1:d0:22:9a:cf:63:82:04:13:b4:0e:3f:e8:8a:83:97:
         71:3a:d4:cc:ee:91:5f:60:61:1c:0c:57:4d:b7:6b:f4:5a:c3:
         3a:4e:99:40:59:9b:6d:c6:05:4f:2f:fb:f3:03:ce:6e:08:19:
         c0:e5:e8:cb:78:5d:19:cb:15:8f:25:51:99:14:26:d5:1f:b5:
         47:e8:c6:ac:3d:c8:77:62:0f:48:6d:ba:95:fd:78:fe:93:97:
         30:49:46:e1:64:b9:40:ca:2d:6a:fd:ef:39:c8:55:cc:2c:6e:
         02:c4:7c:4d:77:37:b6:22:0e:8b:df:79:59:74:8c:a1:43:dd:
         96:7c:0b:fb:0b:ef:c5:26:45:d0:31:fb:2d:06:e0:7d:0d:37:
         3f:82:64:50
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUPG23do4Xa0cT5U6ol1l59Ca+PWYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjk2MjZjMmUwYjk2NGVkNWU4YmE2YTZmM2VkMGZkNjM2
Y2YzNjQ1ZDZjY2I2MTIzYjkwHhcNMjMwMzEzMDczNTQ3WhcNMjQwMzExMDc0MDQ3
WjAzMTEwLwYDVQQDEyhBMDA4RTE5MTc1QUU5NDE2QTdFQjk1MUVCRDAzRDVCNkQx
MzI4QThBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTujUoMFVb6Y
igXGRp8u/PzD3sVNG86LWIQh0zUG0ilF99A+oN2RgF6TcqDk217bvmmg2OoD/lit
yY5Oi+dQ20xozFVBaItMnbhFQ3b0EyNQymb+00zYgwn1QO0gIxA2SqcuW+vfdoqR
znWtMEwLIKhTDK85Gne4SR3MeDXR/eYiGKxnHqUji1p+T//x2CvDSSWvx5FgReEM
ojYONpLTNr89UrMX50GrUgDmpke7olUI3S39MXPNW7sYGUFLGAyYrOINB4hGyoi4
qyKxS/lTCf0PiY3q6kcxYYNVMMZh99io8G5ga/8A6+ilSTd3iUHP4t2GsbdltDcJ
lAA4ibuTHQIDAQABo4ICtDCCArAwHQYDVR0OBBYEFKAI4ZF1rpQWp+uVHr0D1bbR
MoqKMB8GA1UdIwQYMBaAFE8GHzq5hjgo92M+vEYwD5t+h3q8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODY5M2YwNjAwMTg2YzZlN2ZkOGQzNjYwLzAv
NEYwNjFGM0FCOTg2MzgyOEY3NjMzRUJDNDYzMDBGOUI3RTg3N0FCQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2FkOWIzMDEwLTMxMTYtNDY0ZS04YzU4LTk1ODY1MDBmMTcwMS82OTYy
NmMyZTBiOTY0ZWQ1ZThiYTZhNmYzZWQwZmQ2MzZjZjM2NDVkNmNjYjYxMjNiOS5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg2OTNmMDYwMDE4NmM2
ZTdmZDhkMzY2MC8wLzMyMzAzNTJlMzIzMzM0MmUzMTM2MzEyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMjMwMzQzNzMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzeqhMA0GCSqGSIb3DQEB
CwUAA4IBAQB7D4YQadD5jzystNgfwEQ2GUaNE2EYQdKnUS0WabpZs8NcsNQ1RBJS
mveyGpHL9q34XdyIkSutuH+oKx2hcm1nKgLsB5IsoxWEcfpT4lXhWqiauASgS/B2
R/gPR3a8DqyGQepNm2ZHEIQuMLOMKrHQIprPY4IEE7QOP+iKg5dxOtTM7pFfYGEc
DFdNt2v0WsM6TplAWZttxgVPL/vzA85uCBnA5ejLeF0ZyxWPJVGZFCbVH7VH6Mas
Pch3Yg9IbbqV/Xj+k5cwSUbhZLlAyi1q/e85yFXMLG4CxHxNdze2Ig6L33lZdIyh
Q92WfAv7C+/FJkXQMfstBuB9DTc/gmRQ
-----END CERTIFICATE-----