Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230352e3233342e3233312e302f32342d3234203d3e20383334.roa
File:                     3230352e3233342e3233312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          zHjxPvnPX4dFSM8grfjtKz10nbM0lN82O6U1YZtTcLc=
Subject key identifier:   33:B5:E0:57:66:CC:C0:BD:3F:0B:47:82:3F:C0:E3:FC:09:34:FF:A6
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       442BB2AD5666D2056663706E88DA490A7BBDE64E
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230352e3233342e3233312e302f32342d3234203d3e20383334.roa
Signing time:             Thu 20 Apr 2023 00:00:15 +0000
ROA not before:           Wed 19 Apr 2023 23:55:15 +0000
ROA not after:            Thu 18 Apr 2024 00:00:15 +0000
asID:                     834
IP address blocks:        205.234.231.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:2b:b2:ad:56:66:d2:05:66:63:70:6e:88:da:49:0a:7b:bd:e6:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Apr 19 23:55:15 2023 GMT
            Not After : Apr 18 00:00:15 2024 GMT
        Subject: CN=33B5E05766CCC0BD3F0B47823FC0E3FC0934FFA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ff:94:f9:c0:1d:e9:de:bc:cc:98:f4:b6:4b:
                    a9:72:1b:dc:ab:c6:3b:72:e4:73:ee:eb:96:db:d9:
                    7c:27:1b:3f:ce:5e:42:77:ac:d9:90:93:e3:9a:df:
                    95:b2:1a:f8:8e:db:fc:f0:3c:e9:a3:ba:b8:31:d8:
                    d2:b6:7e:c8:68:32:08:57:83:2e:08:75:3c:ce:01:
                    54:57:37:44:ff:a9:7c:fa:38:8d:25:82:af:b2:1e:
                    30:96:38:30:cf:3c:23:1c:dd:12:4f:b0:41:92:8e:
                    f2:b0:68:08:b1:23:81:1b:e3:0f:2a:34:33:57:89:
                    e0:91:77:22:15:6b:9c:92:cb:1d:25:f2:d8:1a:87:
                    ec:44:d2:b7:9c:02:1a:3f:ba:ca:68:e2:ce:c2:ce:
                    26:b8:24:b7:06:41:ab:f1:eb:ac:5b:f7:b9:67:d3:
                    02:63:28:b4:f2:7e:b8:88:42:43:62:a4:21:a0:10:
                    90:d1:f8:80:8c:ee:50:d1:21:94:e6:82:90:78:69:
                    f9:53:4d:2d:49:7e:74:88:43:b2:7f:e7:a8:c9:ba:
                    4a:9b:3d:99:00:00:cf:c6:16:e4:e1:a1:17:bc:f3:
                    ff:2e:ce:3c:21:9b:9f:29:80:d9:7c:f5:1e:94:6c:
                    97:a6:19:93:88:c9:f8:79:88:ec:f7:8e:ae:2b:c8:
                    de:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:B5:E0:57:66:CC:C0:BD:3F:0B:47:82:3F:C0:E3:FC:09:34:FF:A6
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230352e3233342e3233312e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.234.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:e5:5d:43:00:3d:c9:20:99:e3:37:cf:e7:7a:1d:3c:6d:7c:
         90:48:3a:60:48:8d:ed:32:2d:7f:9f:06:a4:1f:69:72:fa:48:
         ee:ba:bf:d7:bf:12:2a:99:42:72:02:1e:cb:e6:14:f5:21:7f:
         12:21:b8:c9:3d:ce:92:01:d6:d5:71:f7:b6:9a:94:a8:f1:fd:
         a1:1c:f9:1a:4d:18:49:a9:a8:b1:8d:c1:4a:e4:35:37:b5:63:
         f2:d0:14:16:56:b3:99:90:71:b9:3c:32:3d:75:b6:a4:b3:98:
         08:53:13:c5:8b:a5:9a:98:2f:c8:e1:b1:93:25:12:c6:d2:a5:
         cf:7a:5c:bd:24:1b:73:1f:4f:92:70:57:c1:73:bf:9c:c4:50:
         64:e4:33:90:ea:84:54:cc:45:3b:8e:f9:cc:49:ed:44:ab:f7:
         35:16:3f:fe:67:0a:94:d2:85:70:8b:f5:ff:a7:00:62:f9:77:
         06:06:c3:8a:66:6d:00:5d:43:38:67:a6:84:19:ac:f9:2a:bf:
         a3:97:78:b2:50:65:27:9f:15:b2:9d:2a:f2:3f:83:dc:66:6f:
         ac:8d:1c:5c:c9:79:9e:72:ed:45:bd:0a:a0:8a:bd:be:21:71:
         fc:5b:2f:84:28:3c:cf:72:43:40:e9:9e:c2:78:a7:87:95:f3:
         07:ef:45:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----