Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230352e3233342e3234342e302f32342d3234203d3e203439393939.roa
File:                     3230352e3233342e3234342e302f32342d3234203d3e203439393939.roa (raw, json)
Hash identifier:          Mlv+QGieBczTfZbD34Gng9IAZYTEIAduO3AGqySW+40=
Subject key identifier:   60:81:EB:94:0A:E1:DE:81:B9:61:97:CA:10:9D:00:3E:63:92:2E:5E
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       1443393D52D946CE9E8CFFB8D839BBF909ED2753
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230352e3233342e3234342e302f32342d3234203d3e203439393939.roa
Signing time:             Thu 11 May 2023 23:07:04 +0000
ROA not before:           Thu 11 May 2023 23:02:04 +0000
ROA not after:            Thu 09 May 2024 23:07:04 +0000
asID:                     49999
IP address blocks:        205.234.244.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:43:39:3d:52:d9:46:ce:9e:8c:ff:b8:d8:39:bb:f9:09:ed:27:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: May 11 23:02:04 2023 GMT
            Not After : May  9 23:07:04 2024 GMT
        Subject: CN=6081EB940AE1DE81B96197CA109D003E63922E5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4a:ca:12:2e:cb:99:c3:38:ac:bc:11:57:dd:
                    d7:37:0d:e5:79:32:94:f5:f0:b1:72:0b:a6:98:a3:
                    2b:c8:dd:7c:49:ed:ca:00:3b:29:c4:f6:e6:eb:1e:
                    3b:1b:78:80:90:7c:c1:db:31:12:e5:f6:f6:ab:03:
                    a9:61:b5:f4:c1:bd:d4:53:72:31:3d:e4:3b:60:87:
                    f8:aa:97:a9:55:82:a5:c8:fa:a4:28:54:18:ae:37:
                    15:f8:60:a3:7d:cb:15:c2:00:04:70:1d:5f:ea:5c:
                    4f:d7:fb:04:f7:fe:72:e4:33:e6:db:16:22:5a:a8:
                    c7:dd:11:b2:dd:77:b0:1b:25:4d:c6:7a:a8:76:9b:
                    da:3d:82:3f:09:00:3f:ae:15:a4:c5:b7:b9:4e:dd:
                    40:f6:71:eb:c5:89:17:26:f8:45:cd:cb:f0:39:5c:
                    44:01:eb:d4:6b:73:67:0e:ec:77:83:ed:1f:0c:e5:
                    6d:5f:47:f6:50:a0:cd:37:94:dd:19:17:f9:83:fd:
                    98:b0:b3:52:de:3c:c0:ad:eb:a0:b1:98:65:e2:bf:
                    35:87:c0:da:b8:79:ab:6e:6f:ca:1d:eb:05:03:5a:
                    46:25:84:14:cd:34:15:2f:10:85:57:94:00:93:29:
                    b3:83:c7:e6:74:1e:df:d2:ba:f4:16:8f:13:01:df:
                    fb:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:81:EB:94:0A:E1:DE:81:B9:61:97:CA:10:9D:00:3E:63:92:2E:5E
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230352e3233342e3234342e302f32342d3234203d3e203439393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.234.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:0e:b5:eb:31:5b:1a:02:66:24:d4:98:91:ca:1a:30:a8:1c:
         7c:be:73:b9:58:7a:7b:b4:31:8b:d5:bd:c1:f3:11:56:d1:20:
         13:41:d2:a8:5c:e0:c6:d3:e7:7b:48:dc:1f:81:46:3f:bf:9d:
         57:0c:cf:8b:5c:e0:d8:9e:93:f7:78:4b:31:73:81:77:59:ad:
         e8:82:88:0e:16:7a:4f:bb:6d:6b:0f:0a:73:1c:00:ac:3f:87:
         f3:4d:8e:63:f1:18:ce:b7:c2:53:fc:90:70:d4:6b:4e:21:5b:
         c1:ee:b6:9d:f2:5f:1c:25:16:94:dc:a6:f8:9f:50:6a:5a:9a:
         1d:97:5a:ad:e2:89:77:c5:cb:c6:44:3f:19:70:eb:cd:4f:6b:
         74:e5:99:d4:65:22:f6:19:50:43:72:c0:6a:72:05:92:c1:f5:
         29:63:41:28:61:a3:25:1b:4d:96:0d:0b:82:ae:36:58:39:18:
         fd:2e:f6:f3:15:1a:6e:b2:05:9a:07:07:9c:63:30:1c:c1:b2:
         f2:ed:7d:a1:6f:21:93:23:17:50:5b:96:b3:cd:a7:fd:61:36:
         d9:b1:71:d3:13:fc:9a:42:ea:92:6b:9b:9c:56:38:e5:5f:ae:
         0f:5d:9c:2b:8d:df:c5:25:1b:26:7e:48:a0:4d:dd:81:4c:88:
         e8:ed:b4:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----