Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230352e3233342e3233392e302f32342d3234203d3e2033353037.roa
File:                     3230352e3233342e3233392e302f32342d3234203d3e2033353037.roa (raw, json)
Hash identifier:          pFEGJcS+wfjlNgdLw+eUSlGPSPRGO1bmK0GnBA4NBEI=
Subject key identifier:   F9:93:23:E6:17:C4:33:08:A5:3E:B1:AC:AB:C1:B8:90:6D:2F:EE:23
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       61134BE0703BF5376739DD7E90735D63CE32641D
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230352e3233342e3233392e302f32342d3234203d3e2033353037.roa
Signing time:             Tue 25 Apr 2023 11:34:03 +0000
ROA not before:           Tue 25 Apr 2023 11:29:03 +0000
ROA not after:            Tue 23 Apr 2024 11:34:03 +0000
asID:                     3507
IP address blocks:        205.234.239.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:13:4b:e0:70:3b:f5:37:67:39:dd:7e:90:73:5d:63:ce:32:64:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Apr 25 11:29:03 2023 GMT
            Not After : Apr 23 11:34:03 2024 GMT
        Subject: CN=F99323E617C43308A53EB1ACABC1B8906D2FEE23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:65:d1:71:87:77:0a:26:57:ee:ec:05:45:b5:
                    f4:73:37:e8:78:fc:8e:27:0e:07:a0:e5:54:5b:ce:
                    64:67:9d:d8:85:07:de:e9:29:e6:5f:d7:8b:96:59:
                    a2:c1:a2:b7:67:8d:91:b3:0f:65:cd:97:b4:b7:7d:
                    a6:99:6f:af:96:98:54:85:72:50:24:ba:61:6a:fb:
                    f1:87:c7:d2:3d:ab:1a:1e:f3:c0:08:08:24:16:82:
                    22:21:f8:65:54:93:c7:1a:bd:8b:f2:3d:a1:23:42:
                    77:76:70:35:46:89:e0:c5:fd:19:db:97:9c:e9:60:
                    b3:8b:85:61:07:0f:05:1a:46:b8:43:66:6e:1d:e7:
                    72:77:b5:85:2f:c8:19:72:4c:76:98:e5:8a:34:ab:
                    e3:db:48:df:8f:01:91:ba:d6:6a:fb:c4:d9:b1:e0:
                    ca:eb:91:23:00:03:78:33:ab:e6:d3:5f:b9:ea:d1:
                    9a:21:17:eb:c1:72:16:2e:5a:ad:94:b7:f5:34:e6:
                    e3:d6:25:43:72:aa:e8:d4:61:e2:ce:01:74:64:80:
                    e2:5d:0c:f4:50:c4:19:2a:81:5d:4d:92:e1:77:38:
                    9a:09:e7:65:bf:82:1a:d7:4d:9f:e7:1f:00:31:d4:
                    c0:f6:4c:db:88:72:71:91:d1:15:e6:70:9d:8a:94:
                    92:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:93:23:E6:17:C4:33:08:A5:3E:B1:AC:AB:C1:B8:90:6D:2F:EE:23
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230352e3233342e3233392e302f32342d3234203d3e2033353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.234.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:73:c3:47:7c:dd:06:a7:04:be:f7:11:35:28:44:e2:7c:07:
         f1:51:12:cb:4e:72:53:a4:80:21:72:e8:86:3c:47:bd:a0:e8:
         41:3a:a1:59:9f:83:1d:d4:1b:8c:56:88:4a:f0:91:79:42:15:
         34:a3:e8:31:14:24:b9:9f:f0:5c:7b:23:18:b2:8d:23:f2:26:
         70:62:2f:70:86:39:39:ef:31:63:ac:a3:78:d7:ed:67:1e:b6:
         0b:7d:ec:9f:62:0e:a5:aa:bc:0c:83:75:7f:b8:5c:82:9b:5c:
         5e:ea:2f:72:70:12:36:b4:3d:e0:8a:c2:c7:27:70:d0:81:c3:
         dd:f9:16:0c:00:6c:43:b4:ba:89:55:b0:67:e9:f0:38:fa:16:
         60:5a:6d:fb:c6:e3:8b:80:8f:fb:b6:66:fd:32:15:44:13:1a:
         d1:93:dc:35:c4:10:24:e1:82:fe:4c:36:1a:de:39:83:77:4d:
         09:c1:c9:f9:b2:8a:a3:35:90:5d:2c:73:c2:ae:1a:0a:92:f6:
         84:ef:64:53:f0:54:f6:fe:27:42:09:e1:ea:d0:d6:83:9a:46:
         b8:e0:e7:e9:2a:b4:23:6b:95:7c:ad:07:a9:8a:43:9e:e8:22:
         49:c6:fe:ec:37:51:b5:14:90:c3:dd:8c:c4:38:4c:92:b7:f0:
         10:8e:e9:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----