Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230352e3233342e3232322e302f32332d3234203d3e2031323339.roa
File:                     3230352e3233342e3232322e302f32332d3234203d3e2031323339.roa (raw, json)
Hash identifier:          5P4jmvkEZpWC+4fNT0iNzl4Ah5F4M5JSUq2Sxs/iW3M=
Subject key identifier:   1F:0A:D4:26:86:E3:FC:3B:A4:41:EB:B5:3E:06:33:26:FE:D1:B7:C7
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       28008B081384CE049D4B67F0FF8B5E05018545E7
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230352e3233342e3232322e302f32332d3234203d3e2031323339.roa
Signing time:             Mon 20 Mar 2023 15:50:48 +0000
ROA not before:           Mon 20 Mar 2023 15:45:48 +0000
ROA not after:            Mon 18 Mar 2024 15:50:48 +0000
asID:                     1239
IP address blocks:        205.234.222.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:00:8b:08:13:84:ce:04:9d:4b:67:f0:ff:8b:5e:05:01:85:45:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Mar 20 15:45:48 2023 GMT
            Not After : Mar 18 15:50:48 2024 GMT
        Subject: CN=1F0AD42686E3FC3BA441EBB53E063326FED1B7C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:fa:ff:fc:50:24:50:91:05:28:4f:e8:db:43:
                    bd:e7:a6:33:99:4a:1c:1d:b4:9c:c3:59:da:de:ea:
                    8d:b1:2a:68:79:1d:ec:21:c5:98:fe:28:e3:6c:03:
                    b4:14:84:9b:3d:46:8a:c2:91:05:df:73:ab:6f:5e:
                    d7:ef:08:92:45:d8:0a:9c:8d:b4:49:55:20:fa:3d:
                    d2:26:f9:c5:8a:49:40:a8:26:57:24:38:1a:6f:c2:
                    37:d1:d8:f6:f0:14:61:6c:33:d8:6d:bc:e3:cb:3a:
                    df:f3:6a:e2:aa:3e:bd:e4:2d:df:dd:3d:7a:9e:da:
                    a0:71:b9:83:b4:b1:71:66:94:a0:a7:9a:c9:55:9c:
                    cf:58:a9:3e:7b:07:5f:7b:ba:bb:94:fd:05:40:33:
                    66:67:16:48:bb:0d:c8:35:9b:e7:80:ec:02:6f:cb:
                    a8:8d:24:a0:84:3a:85:c1:1c:0b:02:ef:93:86:b4:
                    24:88:a0:f5:e7:8e:d5:3f:2b:59:a2:09:52:0a:b2:
                    17:f3:22:11:cd:9f:2d:73:4b:f9:5a:d3:09:51:0c:
                    f6:e3:95:cf:b9:0b:91:d6:4c:ff:1d:75:6d:0f:6c:
                    f0:8d:46:f3:31:15:9d:04:59:a2:e9:3a:a0:d8:88:
                    c5:e7:84:7b:81:43:33:a8:76:38:ac:74:43:19:32:
                    e6:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:0A:D4:26:86:E3:FC:3B:A4:41:EB:B5:3E:06:33:26:FE:D1:B7:C7
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230352e3233342e3232322e302f32332d3234203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.234.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b4:03:0c:d1:2f:ff:00:ef:42:75:cc:80:d3:b3:ef:0e:cc:b6:
         8a:97:5c:8d:af:db:21:e6:dc:ce:31:9d:08:92:0b:bb:4e:2b:
         72:3a:bc:39:0f:1e:b5:db:ba:4a:fb:43:8a:69:17:eb:46:12:
         93:e0:22:ce:b5:b7:5c:20:0a:93:a4:54:3f:a7:c4:70:18:7b:
         ae:e4:96:fc:11:b1:eb:7c:9a:0f:67:b1:7f:36:12:d5:74:9c:
         22:f3:48:b2:ec:31:75:31:5f:55:28:ae:7f:2f:ef:9e:79:30:
         7f:73:19:ac:19:f0:58:0b:91:c3:3a:53:fa:a2:47:ef:f2:93:
         ce:94:1f:4e:d7:08:b3:36:e4:f2:43:0b:44:fb:ed:98:c3:0f:
         fa:38:d7:38:7d:1f:30:0a:3d:09:f9:df:6c:c7:9a:aa:6d:4f:
         1f:ca:08:55:dd:7e:b6:a5:5a:9b:f1:08:ad:84:60:46:13:cd:
         60:98:ef:11:78:13:a1:ea:e2:41:e3:a8:4e:c4:0b:97:d6:81:
         db:d7:f0:ce:f0:9e:b4:b6:00:fe:0b:16:c8:aa:59:4d:d6:da:
         47:18:b2:d0:df:bf:53:50:16:9a:f9:d1:8c:2b:21:5c:1a:96:
         82:d6:c1:bd:5e:25:33:68:93:e7:b3:ba:f2:70:29:c1:b7:ac:
         69:2c:7c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----