Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e31352e302f32342d3234203d3e203631313338.roa
File:                     3231362e3234362e31352e302f32342d3234203d3e203631313338.roa (raw, json)
Hash identifier:          vB5VGhYwNsdEYeEP/JF/ugZdhIfYMQynPYXdMSblKxA=
Subject key identifier:   0D:4F:45:EF:DC:E1:F4:0A:4D:08:10:98:37:03:04:21:0B:91:B9:6D
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       55D744606ED0FDB4E8913AC6B0A57CA5B0410AD4
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e31352e302f32342d3234203d3e203631313338.roa
Signing time:             Mon 08 May 2023 19:39:59 +0000
ROA not before:           Mon 08 May 2023 19:34:59 +0000
ROA not after:            Mon 06 May 2024 19:39:59 +0000
asID:                     61138
IP address blocks:        216.246.15.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:d7:44:60:6e:d0:fd:b4:e8:91:3a:c6:b0:a5:7c:a5:b0:41:0a:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: May  8 19:34:59 2023 GMT
            Not After : May  6 19:39:59 2024 GMT
        Subject: CN=0D4F45EFDCE1F40A4D081098370304210B91B96D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:44:86:c5:d8:22:51:ae:b6:3e:61:e8:1f:c5:
                    d4:bf:77:37:46:b2:06:1b:1a:53:b4:40:92:9e:f0:
                    de:21:85:07:f9:80:1e:98:9f:67:a3:cd:60:8b:eb:
                    21:d4:62:79:4f:af:45:0a:f9:33:d2:84:ee:6d:56:
                    c2:68:d1:98:95:9d:1f:d9:d2:18:7d:8d:36:eb:7d:
                    04:ff:76:56:27:4b:73:a4:0f:6c:78:e1:43:cb:cc:
                    62:a8:83:9e:26:b5:68:17:41:7c:78:8f:ac:b6:d1:
                    16:83:13:6f:f2:51:79:01:1f:4b:d5:8a:dd:d6:a9:
                    57:08:f9:f4:d6:36:10:cb:02:0d:cd:9c:9a:01:79:
                    b0:f3:73:a2:80:b7:13:cd:1e:81:5f:91:63:2c:bd:
                    62:3f:b0:49:f2:c7:25:03:74:16:4a:1a:ae:d6:91:
                    7a:86:8c:44:95:77:f9:e7:ed:d6:29:1d:02:f4:74:
                    96:ff:3b:6d:80:75:8b:83:dd:cc:05:d1:31:5f:0c:
                    70:1c:9a:90:8d:8e:25:8d:34:39:0c:41:27:da:7e:
                    08:a0:82:57:73:a3:15:5d:a3:a1:22:c7:88:f0:4a:
                    16:eb:55:40:e4:9f:6e:4d:10:07:5b:b1:9f:6e:3e:
                    05:dd:3c:f5:34:4c:b6:ec:e3:0a:61:81:ef:c2:d8:
                    bd:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:4F:45:EF:DC:E1:F4:0A:4D:08:10:98:37:03:04:21:0B:91:B9:6D
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e31352e302f32342d3234203d3e203631313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.246.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d3:27:f6:d6:8d:4e:c2:5d:96:c2:14:18:dd:46:e8:ac:28:e0:
         6a:30:f7:82:41:05:53:c2:0a:f8:8c:55:e7:27:4c:0c:45:b4:
         ef:93:4a:97:3a:bc:ea:a2:1f:39:98:99:64:15:3e:18:1e:81:
         ba:bc:67:32:30:6c:5d:8c:aa:1c:00:dd:f5:ef:cc:e9:9e:28:
         38:ce:1c:55:1f:10:80:44:12:a9:46:6f:8b:d1:64:0a:27:2b:
         25:2f:54:a9:0c:ff:c2:1e:a2:98:a3:68:1e:c3:3d:15:92:e7:
         9d:8d:0c:4a:a2:27:b3:10:b5:cf:40:76:4c:ef:5a:ae:42:c5:
         2a:c8:8b:de:19:36:8d:36:03:16:b5:b2:7a:5a:19:8f:0f:eb:
         6d:61:84:0a:d6:4b:57:35:07:0d:51:f8:cf:91:50:f9:57:81:
         8e:bf:f7:4d:20:0c:ba:0c:f4:8d:5b:ad:7c:f4:fe:c3:fb:fb:
         55:bd:9d:2f:8c:ad:03:b7:56:09:60:b9:0f:dc:06:f0:61:e2:
         8f:47:53:95:2e:cf:94:8b:02:34:ea:b0:86:3a:a1:d5:97:1d:
         70:d4:a3:39:57:26:b9:3a:86:d6:cb:7b:d7:3e:42:91:50:3f:
         af:29:a2:f7:7c:e7:98:be:23:eb:20:90:42:91:90:85:d9:da:
         65:df:86:99
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUVddEYG7Q/bTokTrGsKV8pbBBCtQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjk2MjZjMmUwYjk2NGVkNWU4YmE2YTZmM2VkMGZkNjM2
Y2YzNjQ1ZDZjY2I2MTIzYjkwHhcNMjMwNTA4MTkzNDU5WhcNMjQwNTA2MTkzOTU5
WjAzMTEwLwYDVQQDEygwRDRGNDVFRkRDRTFGNDBBNEQwODEwOTgzNzAzMDQyMTBC
OTFCOTZEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxESGxdgiUa62
PmHoH8XUv3c3RrIGGxpTtECSnvDeIYUH+YAemJ9no81gi+sh1GJ5T69FCvkz0oTu
bVbCaNGYlZ0f2dIYfY02630E/3ZWJ0tzpA9seOFDy8xiqIOeJrVoF0F8eI+sttEW
gxNv8lF5AR9L1Yrd1qlXCPn01jYQywINzZyaAXmw83OigLcTzR6BX5FjLL1iP7BJ
8sclA3QWShqu1pF6hoxElXf55+3WKR0C9HSW/zttgHWLg93MBdExXwxwHJqQjY4l
jTQ5DEEn2n4IoIJXc6MVXaOhIseI8EoW61VA5J9uTRAHW7Gfbj4F3Tz1NEy27OMK
YYHvwti9IwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFA1PRe/c4fQKTQgQmDcDBCEL
kbltMB8GA1UdIwQYMBaAFE8GHzq5hjgo92M+vEYwD5t+h3q8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODY5M2YwNjAwMTg2YzZlN2ZkOGQzNjYwLzAv
NEYwNjFGM0FCOTg2MzgyOEY3NjMzRUJDNDYzMDBGOUI3RTg3N0FCQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2FkOWIzMDEwLTMxMTYtNDY0ZS04YzU4LTk1ODY1MDBmMTcwMS82OTYy
NmMyZTBiOTY0ZWQ1ZThiYTZhNmYzZWQwZmQ2MzZjZjM2NDVkNmNjYjYxMjNiOS5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg2OTNmMDYwMDE4NmM2
ZTdmZDhkMzY2MC8wLzMyMzEzNjJlMzIzNDM2MmUzMTM1MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzYzMTMxMzMzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANj2DzANBgkqhkiG9w0BAQsF
AAOCAQEA0yf21o1Owl2WwhQY3UborCjgajD3gkEFU8IK+IxV5ydMDEW075NKlzq8
6qIfOZiZZBU+GB6BurxnMjBsXYyqHADd9e/M6Z4oOM4cVR8QgEQSqUZvi9FkCicr
JS9UqQz/wh6imKNoHsM9FZLnnY0MSqInsxC1z0B2TO9arkLFKsiL3hk2jTYDFrWy
eloZjw/rbWGECtZLVzUHDVH4z5FQ+VeBjr/3TSAMugz0jVutfPT+w/v7Vb2dL4yt
A7dWCWC5D9wG8GHij0dTlS7PlIsCNOqwhjqh1ZcdcNSjOVcmuTqG1st71z5CkVA/
rymi93znmL4j6yCQQpGQhdnaZd+GmQ==
-----END CERTIFICATE-----