Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e31362e302f32342d3234203d3e2031323339.roa
File:                     3231362e3234362e31362e302f32342d3234203d3e2031323339.roa (raw, json)
Hash identifier:          old1sFE5r82dk63xr/PuZ1iD8MgRFNnwAcbttThy0+o=
Subject key identifier:   1F:E1:E0:73:A8:D1:35:62:5E:9B:68:07:DC:CF:74:88:A9:5C:EC:B2
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       0619393848891C5F868CCA132AC53A01D283AB01
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e31362e302f32342d3234203d3e2031323339.roa
Signing time:             Mon 20 Mar 2023 15:50:47 +0000
ROA not before:           Mon 20 Mar 2023 15:45:47 +0000
ROA not after:            Mon 18 Mar 2024 15:50:47 +0000
asID:                     1239
IP address blocks:        216.246.16.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:19:39:38:48:89:1c:5f:86:8c:ca:13:2a:c5:3a:01:d2:83:ab:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Mar 20 15:45:47 2023 GMT
            Not After : Mar 18 15:50:47 2024 GMT
        Subject: CN=1FE1E073A8D135625E9B6807DCCF7488A95CECB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ab:85:e6:50:4d:3a:77:a9:fd:3d:fb:ca:34:
                    6e:36:02:74:e6:36:89:c0:47:51:0a:b5:d5:b7:5e:
                    61:a3:b3:6c:fd:e5:a8:90:68:ea:04:ec:61:5f:8f:
                    bd:6c:31:0a:75:76:57:69:3b:49:0c:c3:a5:c3:a0:
                    8f:30:a6:d6:8a:16:7e:f8:8a:20:28:98:91:f5:47:
                    26:9b:5c:6a:9a:97:6b:6b:f3:28:f4:a9:7e:c8:bd:
                    87:01:f7:2c:ce:c0:32:cf:ba:cf:32:1a:59:d1:d1:
                    22:83:a9:99:1d:e6:74:5c:f9:e6:89:84:d0:cf:ab:
                    af:b6:0b:bf:9b:71:81:4e:66:c7:05:a6:e6:ea:dd:
                    44:33:bf:d1:85:ff:1b:1d:02:dc:f4:0f:d2:fd:1c:
                    d5:27:0c:0a:81:28:d9:72:5f:27:b1:70:ae:26:64:
                    08:00:c2:b9:e8:60:db:c0:73:c7:41:70:10:3c:72:
                    a3:33:60:61:8d:00:75:c7:81:47:4c:8f:57:fe:06:
                    10:5b:13:b7:dd:a0:b9:02:61:3d:26:12:df:d2:b6:
                    c9:c6:da:a5:47:20:e5:4b:f9:c5:c4:b6:08:1a:29:
                    33:66:fd:e1:cc:85:3d:fb:4b:a5:63:85:5d:93:15:
                    a9:b0:86:85:fa:d1:59:1e:b6:c6:30:a5:36:72:95:
                    64:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:E1:E0:73:A8:D1:35:62:5E:9B:68:07:DC:CF:74:88:A9:5C:EC:B2
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e31362e302f32342d3234203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.246.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:7c:94:b3:88:48:79:76:9b:ba:30:87:74:0c:ef:df:4b:10:
         fa:c9:51:e3:94:3d:01:51:db:3a:29:5e:5a:b0:1c:b4:5d:df:
         04:eb:52:7c:01:9d:7c:82:9a:90:d0:eb:c3:af:dd:da:f2:6d:
         33:fd:86:58:3a:5c:3a:67:53:3c:01:e3:75:b0:4c:73:02:f6:
         a6:b7:b3:28:2b:2e:82:c0:a3:f2:f9:fe:bc:3f:4a:76:61:79:
         9a:be:7b:35:9a:cf:5e:c6:d4:5a:43:4b:8c:d2:12:f3:65:ac:
         c8:e8:48:15:b9:6e:d2:62:73:4a:46:0e:85:29:fc:c0:c0:40:
         2d:47:b2:e9:03:f5:a4:65:ae:2e:a8:62:72:4a:dd:1c:01:fc:
         37:b5:0a:10:78:df:80:e5:5b:d0:4a:f0:5b:5e:49:3b:fb:5a:
         93:38:07:74:f8:9b:80:4c:a0:35:a4:a7:f7:9d:4e:55:34:f9:
         54:00:ae:b7:d4:25:ca:54:6a:3d:d9:94:98:2b:60:72:09:15:
         9b:a2:99:21:6d:bd:37:b6:c5:ae:03:54:e9:9a:e7:0a:b2:09:
         5b:ae:ae:bd:31:8e:62:7a:d0:d3:9c:b4:c8:c8:52:2f:ce:f3:
         ae:f1:3a:ce:e6:4c:4b:66:80:e8:31:5a:60:39:8d:91:8e:51:
         17:77:a4:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----