Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e3130362e302f32342d3234203d3e20333937353633.roa
File:                     3231362e3234362e3130362e302f32342d3234203d3e20333937353633.roa (raw, json)
Hash identifier:          kw8iaVTIjjnTFyBRa2sWBspdlHEVIXM48p2uTdAj1y8=
Subject key identifier:   9C:B3:D6:86:87:82:95:A6:20:CD:8E:EE:71:FF:D6:8F:D1:02:86:AA
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       66DBF02A248D85CB3E6FF1886C033FE1FF42A768
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e3130362e302f32342d3234203d3e20333937353633.roa
Signing time:             Fri 26 May 2023 16:18:13 +0000
ROA not before:           Fri 26 May 2023 16:13:13 +0000
ROA not after:            Fri 24 May 2024 16:18:13 +0000
asID:                     397563
IP address blocks:        216.246.106.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:db:f0:2a:24:8d:85:cb:3e:6f:f1:88:6c:03:3f:e1:ff:42:a7:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: May 26 16:13:13 2023 GMT
            Not After : May 24 16:18:13 2024 GMT
        Subject: CN=9CB3D686878295A620CD8EEE71FFD68FD10286AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:e9:4d:7b:4f:27:24:4e:99:20:23:09:a0:54:
                    6c:07:ee:05:38:3f:b8:ce:48:60:0a:f4:98:79:a1:
                    b3:e3:cc:77:bd:59:db:82:66:19:cd:08:a1:f9:9b:
                    04:7a:c0:87:09:6b:33:91:72:37:b5:c8:7e:a9:99:
                    a4:d0:14:cf:fe:6d:e8:ed:4e:31:46:d4:98:43:cf:
                    93:24:05:0d:29:74:6b:10:9e:ca:d1:da:0e:f0:67:
                    da:f9:0a:4c:4f:5a:ed:7f:ab:1f:d8:2d:71:fe:63:
                    f3:95:24:7e:e5:52:10:35:2d:7f:c0:5b:b0:0b:07:
                    41:6e:b6:f3:0a:2b:f9:bc:81:62:55:a1:2b:0e:12:
                    82:52:7a:06:cf:fe:06:86:71:50:26:db:4c:4e:6f:
                    a8:76:6f:b1:9f:b9:b3:ed:48:78:f5:b2:5f:80:18:
                    8c:7f:67:e9:95:4c:0e:04:c3:af:d8:64:d2:08:11:
                    12:fd:40:2d:dc:44:05:f0:3a:62:57:21:01:6f:c8:
                    b8:3f:93:f9:79:e6:f1:dd:25:a0:f7:c5:ac:15:86:
                    79:3b:3c:cf:a2:68:d6:e1:a6:ff:3e:08:7b:d0:ef:
                    7b:96:97:9c:e3:29:4b:10:05:e5:30:f2:57:bf:f8:
                    b1:b3:15:d8:0e:2a:94:f9:59:5d:50:23:d9:e2:5d:
                    34:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:B3:D6:86:87:82:95:A6:20:CD:8E:EE:71:FF:D6:8F:D1:02:86:AA
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e3130362e302f32342d3234203d3e20333937353633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.246.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:d0:3a:b3:3f:3f:28:19:a2:a0:c1:43:89:61:53:f5:0c:28:
         e4:c9:56:b3:3b:d7:2f:ae:9a:8b:f9:c4:15:30:a6:d1:38:42:
         5c:bd:f2:31:86:7e:e5:ee:4d:4c:44:68:fb:cf:e2:12:c1:79:
         28:73:a9:4b:7c:af:1f:f6:f0:a5:c5:59:82:5c:02:05:56:0a:
         a3:47:3d:a0:14:df:35:f6:0b:1d:b6:fd:cb:e4:55:d1:ae:28:
         b5:91:c4:77:1f:cb:82:04:b8:f9:0b:af:61:9f:fc:03:5f:ae:
         3e:b4:9a:16:d4:03:37:74:70:d8:f6:92:5a:a4:4d:4c:31:e4:
         f5:eb:86:24:a8:03:a5:01:a1:9b:d3:62:9d:2f:43:1e:63:67:
         28:80:11:67:e1:68:88:8c:68:91:bf:68:eb:32:46:41:ce:fa:
         3a:a0:bd:a9:06:d6:bd:44:f8:c1:31:87:ea:66:03:5d:a8:57:
         5e:19:f9:29:ca:33:16:67:cf:95:98:9d:85:01:10:23:8e:03:
         75:8e:95:13:bf:42:36:50:56:74:4e:91:52:8a:4d:0d:bb:2f:
         f5:92:40:db:fd:ce:06:5b:00:14:95:1b:83:a8:bc:bd:97:29:
         b8:ef:e1:7e:f7:f5:86:d1:8a:79:63:ae:e9:20:7f:a6:ab:0f:
         a0:43:2c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----