Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230352e3233342e3235342e302f32342d3234203d3e20323034383433.roa
File:                     3230352e3233342e3235342e302f32342d3234203d3e20323034383433.roa (raw, json)
Hash identifier:          Fm1M79pDEcq9Tn5nL7+VNNqYrSvkc5rEtxdlCYuaHq8=
Subject key identifier:   FC:4F:3E:AF:13:F4:26:ED:E3:80:90:CA:E5:06:0E:6E:87:3A:89:B2
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       325682A343EE7E54359EF2D8E4FD46E24B8974C6
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230352e3233342e3235342e302f32342d3234203d3e20323034383433.roa
Signing time:             Fri 26 May 2023 18:16:29 +0000
ROA not before:           Fri 26 May 2023 18:11:29 +0000
ROA not after:            Fri 24 May 2024 18:16:29 +0000
asID:                     204843
IP address blocks:        205.234.254.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:56:82:a3:43:ee:7e:54:35:9e:f2:d8:e4:fd:46:e2:4b:89:74:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: May 26 18:11:29 2023 GMT
            Not After : May 24 18:16:29 2024 GMT
        Subject: CN=FC4F3EAF13F426EDE38090CAE5060E6E873A89B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:6b:2c:df:62:f2:12:e7:31:da:8c:a1:08:6a:
                    50:b8:65:56:fc:10:84:d5:85:35:a8:a1:15:db:05:
                    9e:84:18:96:46:9e:fc:1d:61:53:3d:c4:68:08:72:
                    e8:d7:a7:31:2c:8f:2e:0c:00:74:50:58:76:4a:9b:
                    56:d8:8b:b7:37:0d:86:bb:15:0c:9e:49:8f:df:3c:
                    19:a5:ce:90:1e:db:d8:56:bb:30:6b:51:17:5d:80:
                    30:a7:f3:5b:fc:74:0d:ae:ad:e7:36:df:d0:e7:c6:
                    a2:b1:86:48:d6:f6:fe:48:f8:f7:9a:a8:e3:34:a6:
                    b9:61:0c:6d:30:46:13:e0:b5:dc:91:79:26:4e:88:
                    bf:9e:c2:f2:a4:96:1d:49:ba:94:62:42:34:b3:bd:
                    ad:94:9a:f6:13:c3:d1:73:56:87:46:8f:0a:79:f2:
                    51:af:5f:14:3f:e3:51:56:8c:de:0e:a5:49:f9:8a:
                    63:98:95:48:e6:17:1b:87:22:7a:70:66:e6:a0:bf:
                    fe:f7:e5:e5:12:53:1e:4d:b6:ad:8a:0c:63:a1:00:
                    b0:a8:28:d3:72:6c:3c:e6:cb:53:fc:85:e6:f5:2d:
                    87:2f:62:84:ba:05:30:61:0f:af:1e:66:19:17:4a:
                    0d:49:46:a5:8b:7b:9c:5d:0c:53:b3:97:15:51:ee:
                    f8:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:4F:3E:AF:13:F4:26:ED:E3:80:90:CA:E5:06:0E:6E:87:3A:89:B2
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230352e3233342e3235342e302f32342d3234203d3e20323034383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.234.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d3:0c:85:3d:60:f1:e4:d6:1d:c6:6f:86:e4:b4:34:b2:9c:55:
         4c:6a:f6:dd:f6:7d:20:e9:fa:2e:59:a7:4d:b5:11:dc:e4:a3:
         f8:81:41:76:d7:42:84:80:12:66:62:7e:3a:fc:98:2b:94:00:
         70:13:53:54:b5:c2:ef:4d:3f:ca:d9:b6:7d:5b:b0:18:0a:6e:
         ad:20:5f:47:f3:a9:45:02:64:b4:00:31:3f:ae:d4:6b:df:93:
         c5:ab:66:8a:d1:15:02:bb:1d:ac:3d:02:6f:b2:6b:cb:37:5a:
         bb:ed:e7:f5:d8:49:06:6f:b3:3e:dc:de:2c:eb:42:b3:e4:8f:
         12:1c:f1:d2:7d:53:c8:db:a0:46:04:b9:be:4c:c7:58:c5:9d:
         23:80:e5:85:4a:44:01:cb:31:9e:13:bd:d4:b9:82:2b:64:82:
         71:e1:2f:8f:3c:af:63:77:fd:1a:c2:eb:d1:7e:6f:16:5b:de:
         e0:7e:da:ca:ea:f0:e4:cb:da:de:f5:7e:1e:c4:cf:5f:63:e4:
         5d:2b:b9:e1:bc:7d:0b:ae:05:22:2a:74:c0:58:72:ba:10:c6:
         82:38:b8:0c:52:b5:8d:7a:59:de:2b:e0:76:9e:31:f4:6f:2c:
         c2:6d:d2:e5:85:96:e5:ef:05:14:ea:5f:31:48:6c:fc:77:6e:
         fa:65:35:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----