Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230352e3233342e3136342e302f32342d3234203d3e203631313338.roa
File:                     3230352e3233342e3136342e302f32342d3234203d3e203631313338.roa (raw, json)
Hash identifier:          T7mXi4c30IsXvgY0hjDl+9WaEYYmatDbTvyYvm0h+dQ=
Subject key identifier:   83:8B:FA:9B:66:D3:37:C1:2D:E2:38:3B:B0:33:67:81:56:81:64:70
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       2AFC4B624E5B075700E1BDDF0FB40F3EAC462B1E
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230352e3233342e3136342e302f32342d3234203d3e203631313338.roa
Signing time:             Wed 24 May 2023 09:04:21 +0000
ROA not before:           Wed 24 May 2023 08:59:21 +0000
ROA not after:            Wed 22 May 2024 09:04:21 +0000
asID:                     61138
IP address blocks:        205.234.164.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:fc:4b:62:4e:5b:07:57:00:e1:bd:df:0f:b4:0f:3e:ac:46:2b:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: May 24 08:59:21 2023 GMT
            Not After : May 22 09:04:21 2024 GMT
        Subject: CN=838BFA9B66D337C12DE2383BB033678156816470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c3:a9:61:82:6b:6d:a7:66:56:66:9b:47:64:
                    f5:87:73:af:08:6f:ff:fa:f2:97:6d:b5:bc:23:2e:
                    84:02:70:a1:6d:56:d1:25:18:d0:0f:00:9e:e6:0f:
                    73:4d:1f:9d:01:57:b9:b7:2e:29:55:2a:ee:1d:b7:
                    fc:e8:82:b8:97:43:d2:1e:67:b1:e4:58:55:7b:7f:
                    7c:d1:c8:59:ca:ca:f9:ed:d5:a3:96:d5:8f:5f:6e:
                    ee:98:35:67:17:5e:fd:d6:28:37:e7:49:a8:bb:9f:
                    28:eb:a8:3d:3c:5c:ff:94:44:af:dd:af:52:c2:dd:
                    6d:d0:bb:af:4a:39:e6:5b:3c:ce:35:76:37:c9:ab:
                    98:ba:11:1f:96:bf:b2:0f:64:36:a3:9e:b0:15:8f:
                    fb:3c:80:1b:1d:e0:31:97:17:c5:d3:cf:fe:65:31:
                    41:0f:53:56:f3:1f:50:91:1f:15:f6:a4:42:bd:8d:
                    8c:21:1b:71:eb:00:0f:12:a6:6d:68:af:8d:9e:d5:
                    67:44:0a:c0:89:37:07:a9:04:01:f1:be:f0:8a:4f:
                    b3:c0:de:31:a5:25:75:be:d5:2d:38:25:b0:a6:40:
                    fd:9e:ec:c4:7a:ba:e3:7c:e4:28:52:38:e5:21:32:
                    66:9e:6d:ee:e8:2d:7d:d0:b6:97:9d:6c:b6:a4:00:
                    40:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:8B:FA:9B:66:D3:37:C1:2D:E2:38:3B:B0:33:67:81:56:81:64:70
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230352e3233342e3136342e302f32342d3234203d3e203631313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.234.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:0c:86:40:36:35:eb:49:27:e4:e9:ea:70:7c:4e:f8:15:89:
         e8:87:78:c0:e8:cd:a9:ce:a7:66:ca:bb:96:0e:bd:3f:2e:cf:
         73:d7:ff:23:e0:d7:a7:35:14:28:0a:c0:1e:c1:cd:98:bd:d0:
         e9:07:72:9a:cd:85:4c:62:5e:f6:33:a9:64:d1:33:f2:a8:f3:
         d5:6a:4f:36:12:26:4e:ac:c3:5f:c9:cd:6e:1d:0d:fe:f0:c2:
         2b:75:db:48:ab:ee:2d:1b:fe:73:fb:ea:fc:53:16:3a:e5:32:
         99:69:50:44:c6:fc:77:36:4b:74:39:f6:76:12:9e:56:87:de:
         57:72:19:fd:83:e8:72:d6:64:d8:54:91:be:ab:47:be:6c:98:
         af:6e:5b:60:0b:58:09:21:2f:38:a3:c2:1d:5f:9b:0d:ab:c3:
         bd:fb:83:52:6a:ca:49:fb:1f:d8:e2:39:a3:fd:9f:a0:b0:05:
         ef:ef:ae:ae:94:d7:84:2f:7d:ba:c7:fe:10:63:cd:5c:81:74:
         cb:6d:d4:e7:65:df:c0:db:e3:ea:49:d7:c5:44:9e:be:52:8b:
         d3:7d:8e:c1:4c:cc:29:03:fd:b5:48:64:73:57:30:d9:da:41:
         1f:2b:6b:98:72:d0:5b:bb:6f:fe:ea:dd:84:51:66:0d:13:bb:
         c4:2d:e1:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----