Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230352e3233342e3230332e302f32342d3234203d3e203336333532.roa
File:                     3230352e3233342e3230332e302f32342d3234203d3e203336333532.roa (raw, json)
Hash identifier:          2xR90vi/sxQ6L8wSzOAhz/ImfTh0qmNAUigx1RO68cc=
Subject key identifier:   B7:37:F6:F9:A0:3C:36:11:2B:23:6B:EC:80:50:A5:86:B3:F8:87:39
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       13F865F94EC571329143B04BCE85E23C3832DEAF
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230352e3233342e3230332e302f32342d3234203d3e203336333532.roa
Signing time:             Mon 17 Apr 2023 18:54:21 +0000
ROA not before:           Mon 17 Apr 2023 18:49:21 +0000
ROA not after:            Mon 15 Apr 2024 18:54:21 +0000
asID:                     36352
IP address blocks:        205.234.203.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:f8:65:f9:4e:c5:71:32:91:43:b0:4b:ce:85:e2:3c:38:32:de:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Apr 17 18:49:21 2023 GMT
            Not After : Apr 15 18:54:21 2024 GMT
        Subject: CN=B737F6F9A03C36112B236BEC8050A586B3F88739
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:18:1b:9c:40:ef:d6:69:42:4b:87:02:af:8d:
                    35:8f:4f:c2:89:54:9d:2a:c3:e2:09:bb:e5:73:0a:
                    d6:e3:60:72:a6:05:8d:9d:03:ae:d0:b4:62:17:45:
                    f4:31:40:a9:c1:e9:40:02:6f:3b:a1:c2:e7:2e:0e:
                    1d:d6:b7:cc:c0:73:e5:1f:be:02:70:64:cd:58:80:
                    16:d5:ef:f1:88:db:69:4a:f4:35:22:74:4a:01:b1:
                    6f:d9:4e:dd:3a:95:a9:60:51:ee:e2:8f:65:ed:12:
                    56:56:45:92:cc:4d:60:c9:ef:60:27:92:ab:93:05:
                    68:21:de:f5:15:e2:d8:3d:40:12:55:24:ec:f4:01:
                    ab:67:31:66:db:11:d5:1d:27:10:f8:15:48:f6:82:
                    32:08:01:03:b2:2e:d6:a5:5e:70:b6:61:ab:33:73:
                    fb:47:6b:7d:91:d6:d8:89:22:55:6d:25:b0:79:e3:
                    de:4c:6d:bc:89:27:74:33:88:c7:eb:a4:18:b9:ab:
                    d5:ca:43:d6:e6:e7:57:01:45:36:66:f9:67:76:a8:
                    3b:2b:1f:fc:b4:a9:ee:02:33:68:ff:d7:dd:d7:d7:
                    f1:e8:cb:b6:bb:76:c1:65:ff:74:eb:e8:08:03:ee:
                    df:32:0a:0e:68:fe:ce:81:57:ab:31:a7:a7:a4:ef:
                    92:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:37:F6:F9:A0:3C:36:11:2B:23:6B:EC:80:50:A5:86:B3:F8:87:39
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230352e3233342e3230332e302f32342d3234203d3e203336333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.234.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:d5:ee:53:0b:8a:36:19:ad:3e:c6:62:ff:f0:8a:7b:07:43:
         23:21:49:03:d5:35:ca:c9:67:35:b6:19:76:68:ea:3a:f7:c2:
         65:ce:cb:7c:ea:cf:16:df:db:1f:5b:04:d2:38:db:25:ac:03:
         be:7a:d7:c2:f4:58:63:74:11:fb:54:2c:1a:96:f6:48:34:95:
         58:22:30:e1:45:93:b2:64:55:b8:9d:a6:94:e1:12:d2:5a:33:
         af:83:6e:7f:71:3d:98:30:ed:6b:2b:2c:5a:8e:88:9a:af:39:
         cb:64:2c:46:41:25:03:09:3c:17:7c:06:d7:56:a3:97:dd:e3:
         65:a8:ab:6e:13:69:9b:56:0e:5b:e4:6e:65:27:6b:11:2f:21:
         05:9d:35:da:35:2f:d2:43:70:1c:e1:3f:f1:a0:2c:57:58:af:
         2f:a7:3f:72:14:7b:87:99:5f:87:3e:75:c6:0c:44:f0:c9:1a:
         12:87:0c:7f:c1:8d:50:9f:20:f9:0b:94:62:f5:61:9a:22:2f:
         35:1d:db:b0:2e:61:78:cf:c9:3e:fd:5d:77:3f:e1:9c:b3:c1:
         dc:b3:89:75:81:73:0d:48:2c:42:8d:05:e6:33:3d:48:bd:63:
         f7:a6:ab:9b:67:ab:4a:67:48:a8:64:d3:bc:27:d1:c6:ce:04:
         05:79:0e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----