Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e31382e302f32342d3234203d3e203631313338.roa
File:                     3231362e3234362e31382e302f32342d3234203d3e203631313338.roa (raw, json)
Hash identifier:          Vm2gKPJ1bO9Ek5JWylsNn/c7u0o6yc3+Ehq1Fj24RbU=
Subject key identifier:   85:30:7A:C0:58:B9:77:2E:6C:8B:CA:22:99:E9:68:2C:56:36:0F:34
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       2F14C455F4C239CC264C6F7430079ED146A02311
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e31382e302f32342d3234203d3e203631313338.roa
Signing time:             Fri 05 May 2023 13:57:07 +0000
ROA not before:           Fri 05 May 2023 13:52:07 +0000
ROA not after:            Fri 03 May 2024 13:57:07 +0000
asID:                     61138
IP address blocks:        216.246.18.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:14:c4:55:f4:c2:39:cc:26:4c:6f:74:30:07:9e:d1:46:a0:23:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: May  5 13:52:07 2023 GMT
            Not After : May  3 13:57:07 2024 GMT
        Subject: CN=85307AC058B9772E6C8BCA2299E9682C56360F34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:aa:a1:87:e5:f8:2f:2c:ed:d7:31:53:6f:e3:
                    cb:2e:b1:7c:88:e1:af:42:f5:78:7a:62:9b:5f:bb:
                    fe:d0:8e:1f:53:28:75:1e:1d:bf:2e:15:3f:ee:67:
                    a4:1f:85:8e:f6:1d:7c:6d:f4:62:8a:37:49:4a:77:
                    d7:e4:09:58:3d:4f:6d:a1:d8:34:ac:5d:17:5a:66:
                    e8:ca:36:c5:c4:28:8d:5e:84:fc:5c:32:ae:dc:f7:
                    0f:09:2c:c6:80:e8:b6:fa:be:20:f3:6d:cd:b4:bb:
                    9f:f4:26:30:54:f9:9c:c5:38:19:0b:26:78:16:99:
                    f3:11:d1:a7:f8:2e:38:e5:c7:88:cb:fb:dc:db:77:
                    1d:04:cc:68:4e:e7:d0:cf:07:24:8e:02:97:19:4c:
                    df:49:c9:54:67:60:71:fc:49:7c:94:83:7b:35:8e:
                    16:ee:1b:5d:05:24:ca:fc:74:71:f5:e2:d8:43:33:
                    b9:c0:87:53:ba:d3:27:09:2f:62:4b:e5:a7:72:88:
                    5f:70:c3:73:f1:20:5a:ce:e8:79:b8:aa:80:3b:f6:
                    ac:67:85:fe:b6:0f:ba:14:33:67:70:81:4c:71:07:
                    e2:a7:7c:0b:e1:7b:2c:bf:92:8f:ba:f8:ba:02:dd:
                    3b:4c:a1:8e:ba:1a:6a:51:b6:4a:57:d8:bd:76:1b:
                    14:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:30:7A:C0:58:B9:77:2E:6C:8B:CA:22:99:E9:68:2C:56:36:0F:34
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e31382e302f32342d3234203d3e203631313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.246.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:c0:4f:58:2e:17:df:ac:3f:61:b4:4e:21:2a:33:66:ad:eb:
         a1:97:4d:95:30:8e:77:a1:93:7a:8d:90:f9:e8:dd:13:a4:f8:
         c3:94:b3:db:42:65:44:a2:de:4f:9a:61:bf:ab:5f:a2:70:9a:
         31:ad:7d:de:97:89:fd:39:c6:b3:f3:2f:69:c1:2e:e6:e8:c9:
         d3:55:6f:04:ad:5f:67:ab:d2:44:f9:42:e6:21:89:cd:e6:1b:
         6b:34:ae:47:73:c8:9f:ed:05:cc:d8:3a:75:35:21:39:82:0f:
         a8:27:cf:aa:99:98:28:c5:01:9e:6f:c0:19:30:79:be:f9:27:
         0e:60:58:d2:ff:e3:5f:4a:e0:16:c5:16:3e:b0:7e:0c:67:0f:
         e0:cc:c1:7e:a2:c0:f4:75:e9:9c:8d:1e:8f:39:1b:14:c5:18:
         5d:02:55:9f:5d:4d:40:2e:cc:69:69:36:d1:e8:e9:40:0a:3a:
         0a:b7:05:37:08:24:e2:7f:8c:d3:18:19:24:7a:da:a4:e9:9b:
         d8:f1:3d:0a:bc:0a:61:38:6a:85:31:78:68:3a:4f:a4:ec:cd:
         78:0d:d0:16:8d:7c:17:67:38:04:d3:ff:36:6f:0a:4f:75:fe:
         4b:11:b6:64:6b:25:aa:58:6a:09:f9:c8:58:e4:ef:4d:ec:c6:
         60:95:54:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----