Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230352e3233342e3234322e302f32342d3234203d3e203631313338.roa
File:                     3230352e3233342e3234322e302f32342d3234203d3e203631313338.roa (raw, json)
Hash identifier:          Pjv/hjjFVVrJrHq+fRgoD1y5dj+jjqwkOgM7ezCIblM=
Subject key identifier:   46:79:48:C8:F1:70:8D:D3:A9:E8:67:1E:49:92:AA:DA:54:41:0E:7C
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       03940402DA51A789709953C491846D1878DF45B3
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230352e3233342e3234322e302f32342d3234203d3e203631313338.roa
Signing time:             Fri 28 Apr 2023 12:27:31 +0000
ROA not before:           Fri 28 Apr 2023 12:22:31 +0000
ROA not after:            Fri 26 Apr 2024 12:27:31 +0000
asID:                     61138
IP address blocks:        205.234.242.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:94:04:02:da:51:a7:89:70:99:53:c4:91:84:6d:18:78:df:45:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Apr 28 12:22:31 2023 GMT
            Not After : Apr 26 12:27:31 2024 GMT
        Subject: CN=467948C8F1708DD3A9E8671E4992AADA54410E7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8a:e8:f0:40:e3:42:74:de:4d:c3:c6:49:cc:
                    50:73:84:1e:07:89:36:97:0e:78:6a:6b:d4:3a:f3:
                    b2:0d:fd:24:1e:7c:3f:18:28:e8:12:8e:9f:53:40:
                    98:e3:3b:91:c5:da:53:67:19:b3:58:7d:72:85:62:
                    34:72:02:99:72:70:d5:64:f7:32:43:b3:3e:7d:b7:
                    a3:36:3f:78:cd:a3:f0:e0:83:19:f1:13:0f:61:13:
                    03:c4:59:ca:f3:1a:d1:34:f2:ba:eb:e8:d4:93:ca:
                    bb:60:3c:b6:61:c3:13:d8:8f:91:b5:e5:87:44:06:
                    24:67:70:f4:d2:f6:35:4f:ca:a8:63:4b:83:bb:35:
                    2f:1b:82:d0:8d:5e:d1:2c:40:b0:cd:b1:83:b3:61:
                    ea:32:26:4d:11:b7:f6:0b:9a:0f:c3:0a:c1:94:a3:
                    a1:a5:5b:42:b5:8d:31:f0:36:87:d0:62:75:1e:22:
                    54:24:b9:11:c2:f1:01:d8:84:26:16:ab:92:a4:d3:
                    17:bc:a8:e9:02:73:4c:b0:de:2e:69:a4:9f:98:f8:
                    a1:40:3c:3c:97:38:ed:ce:bf:b6:f5:d4:5a:27:c1:
                    0e:ce:cf:25:80:af:06:21:9c:94:2e:10:ec:aa:81:
                    46:d4:d6:03:97:2d:bf:39:bc:1e:9a:88:95:0e:d8:
                    90:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:79:48:C8:F1:70:8D:D3:A9:E8:67:1E:49:92:AA:DA:54:41:0E:7C
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230352e3233342e3234322e302f32342d3234203d3e203631313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.234.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:ab:56:e8:b4:34:d5:ba:01:45:6c:a9:a1:b1:e0:2d:d2:16:
         d5:6b:13:f1:ca:7a:46:e4:ec:41:90:ab:81:80:41:0c:38:93:
         a7:de:00:51:8c:1b:34:d2:14:75:d5:59:12:06:3a:18:1a:03:
         f8:d0:5a:32:a5:14:2e:07:5b:99:a0:8a:6d:2e:ef:d9:29:b1:
         ff:73:10:46:80:0d:43:30:63:f8:6a:c6:05:ec:1e:88:ec:27:
         05:64:56:da:9c:c9:05:71:03:bd:d8:22:50:2b:96:19:52:69:
         65:f3:ba:a1:06:a8:78:a3:10:5a:70:5d:c4:0b:1b:ac:88:2b:
         e5:93:a3:19:5b:f5:19:b3:9e:3d:e5:f1:ec:a9:08:2a:4e:e3:
         f2:b1:83:57:16:32:61:7b:eb:47:f5:68:50:1e:04:5a:11:2d:
         7c:61:c7:de:64:73:e3:d0:a7:72:8f:c8:4e:18:7a:fa:20:a9:
         b1:4a:23:ad:cc:88:06:0a:3f:a4:83:d4:ba:a1:78:77:1d:f7:
         ed:39:44:6c:e5:6e:5b:09:1e:62:78:65:a9:e5:2f:64:9d:5f:
         cd:f7:5e:a5:70:71:fa:b2:d4:ca:ff:54:a1:65:31:0d:98:3f:
         62:1a:db:3a:43:b4:19:e9:7a:57:91:cb:b9:51:08:19:f5:08:
         8b:22:7b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----