Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230352e3233342e3233312e302f32342d3234203d3e2031323339.roa
File:                     3230352e3233342e3233312e302f32342d3234203d3e2031323339.roa (raw, json)
Hash identifier:          jO/Dyirgj5XmctHHPD7xuG9c647YxeFgTXOh9xRV194=
Subject key identifier:   FD:71:B4:A5:8A:E2:3D:97:EA:0F:61:81:B8:D0:74:78:15:A2:25:7D
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       32BCC02AB84128478E02BBC504160E90D7D0ED71
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230352e3233342e3233312e302f32342d3234203d3e2031323339.roa
Signing time:             Mon 20 Mar 2023 15:50:48 +0000
ROA not before:           Mon 20 Mar 2023 15:45:48 +0000
ROA not after:            Mon 18 Mar 2024 15:50:48 +0000
asID:                     1239
IP address blocks:        205.234.231.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:bc:c0:2a:b8:41:28:47:8e:02:bb:c5:04:16:0e:90:d7:d0:ed:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Mar 20 15:45:48 2023 GMT
            Not After : Mar 18 15:50:48 2024 GMT
        Subject: CN=FD71B4A58AE23D97EA0F6181B8D0747815A2257D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2c:ac:2f:6f:ab:5d:7b:0f:9e:bd:c3:ed:47:
                    e4:9b:7e:c2:d2:41:8a:3e:c2:ed:e7:2e:47:58:46:
                    01:34:6f:83:85:6e:78:62:72:0d:6e:6e:9a:f5:ab:
                    f8:f8:03:38:ad:1b:0a:0a:38:46:a3:b0:1e:92:d1:
                    d2:08:3e:1f:86:df:e5:be:48:7f:86:0e:d5:78:31:
                    04:2d:f1:10:88:38:98:71:14:56:67:1f:5a:fc:f1:
                    e8:ba:38:5e:17:25:e4:cf:b8:fa:04:fa:ef:a3:d5:
                    41:97:2a:d9:31:c4:93:fd:de:ec:12:ec:cc:2b:3f:
                    ac:1e:2d:ee:f6:00:d8:5a:f2:1f:6e:71:b6:49:1a:
                    52:85:ab:68:3f:c6:2f:4c:40:c8:e5:9d:f0:6f:fc:
                    4a:6a:cf:97:b0:16:47:90:95:cb:9a:b6:f4:a9:8b:
                    32:bc:80:65:ef:51:50:42:83:c1:56:04:a8:68:38:
                    a1:d0:b0:1d:68:de:57:58:87:ce:ef:62:94:e3:b8:
                    c4:1b:97:f7:1a:d8:28:4b:18:89:a3:a7:68:c8:20:
                    60:ae:13:38:df:60:70:55:c3:c7:55:1d:a9:a7:bc:
                    9e:a7:a3:fb:fe:8b:e4:ba:de:b5:cd:59:f1:a4:d5:
                    2e:7b:7e:bc:80:fd:73:0a:b6:28:8e:2c:27:4e:5b:
                    f0:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:71:B4:A5:8A:E2:3D:97:EA:0F:61:81:B8:D0:74:78:15:A2:25:7D
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230352e3233342e3233312e302f32342d3234203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.234.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:2e:90:dc:02:08:a4:f1:94:60:34:94:72:ec:2b:82:b4:fa:
         76:9a:f3:92:13:53:c3:d9:95:aa:b5:44:b7:14:6d:f7:bb:d6:
         53:53:68:1c:0f:27:da:e4:22:7d:55:72:fb:26:5a:99:c5:22:
         3c:3a:dc:b7:fb:28:1f:a3:54:5a:4d:88:57:0e:da:fc:15:ac:
         a9:ec:f2:fb:a1:fc:b3:42:68:04:d0:5c:50:10:8e:19:81:7e:
         5d:c9:d4:32:df:3d:ea:c1:ed:58:dc:7d:d3:1a:af:29:4d:e3:
         31:4c:bf:94:32:0a:ec:70:b8:49:9e:69:84:af:ed:4d:88:fe:
         7a:00:d8:75:e6:92:eb:26:25:a6:15:f4:fb:7c:8b:7f:29:2d:
         9f:42:86:5f:6d:4d:7a:73:ee:5e:82:e8:b5:1e:e9:2f:7c:f6:
         59:59:42:5b:37:1f:2a:20:fd:8f:12:89:86:23:a9:71:4d:aa:
         f9:21:9c:08:23:2c:b1:76:ff:ce:21:66:38:62:0e:37:ff:e2:
         00:71:09:44:60:e1:15:0f:7a:f1:42:5a:12:85:be:b8:49:6e:
         48:36:b9:56:f6:bd:bd:70:3f:c7:45:e3:ec:c1:c0:5a:2e:b7:
         7a:cd:f4:4b:b0:c7:7e:f9:93:38:06:f5:f7:44:d7:ca:70:4b:
         5f:c5:7f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----