Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e32372e302f32342d3234203d3e2033353037.roa
File:                     3231362e3234362e32372e302f32342d3234203d3e2033353037.roa (raw, json)
Hash identifier:          Cz9Raizn02X1tk0e2xFoNebYKx2uNaU9j6BxZH0Xxvg=
Subject key identifier:   A9:7E:75:6E:77:A0:A7:DC:C1:C1:20:13:FD:8F:EF:EF:50:FD:AD:9B
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       2F345062BF51965EA288032E7744D9B5277F9903
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e32372e302f32342d3234203d3e2033353037.roa
Signing time:             Tue 25 Apr 2023 11:34:02 +0000
ROA not before:           Tue 25 Apr 2023 11:29:02 +0000
ROA not after:            Tue 23 Apr 2024 11:34:02 +0000
asID:                     3507
IP address blocks:        216.246.27.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:34:50:62:bf:51:96:5e:a2:88:03:2e:77:44:d9:b5:27:7f:99:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Apr 25 11:29:02 2023 GMT
            Not After : Apr 23 11:34:02 2024 GMT
        Subject: CN=A97E756E77A0A7DCC1C12013FD8FEFEF50FDAD9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4b:22:51:b6:e5:1a:fa:0b:52:ae:cc:35:4f:
                    4a:f9:f5:cb:8a:b5:6b:7c:70:85:f2:0c:5c:2b:6d:
                    f7:49:5b:01:b7:88:ca:11:d6:12:c9:df:e5:96:9b:
                    57:5a:7d:38:c0:d3:1a:d0:e8:3a:88:12:f0:fb:9a:
                    61:c7:c6:be:e1:5d:93:e6:4e:18:90:50:9c:77:92:
                    23:55:db:83:8c:b8:dd:8d:2f:6d:af:33:a9:1c:a9:
                    7f:2a:99:b8:ed:51:8e:a4:65:74:2b:51:13:ed:77:
                    5f:9b:41:69:f4:0a:68:75:0c:7b:ab:07:60:f1:6c:
                    4c:f7:2f:bb:2b:8b:8e:d2:00:c1:e0:7f:cd:6b:2a:
                    0e:ee:4b:8a:bc:df:c8:2f:0f:ca:9c:74:ca:b1:89:
                    fc:f8:d5:e9:df:ad:49:31:dd:82:89:bd:16:ac:ef:
                    98:a6:ce:68:d7:29:d4:29:c6:e2:cf:96:c7:af:f8:
                    d7:86:47:04:15:89:a1:67:29:71:52:80:73:9e:bd:
                    16:c8:bb:3b:2f:da:f9:3d:63:35:ed:98:55:b7:53:
                    6c:5c:a6:70:39:de:dc:0c:23:92:90:1d:ec:47:47:
                    69:17:cd:8d:61:4e:80:c5:40:4e:e7:e2:60:c4:ff:
                    cc:76:17:00:7e:f9:bb:57:f3:a5:d0:65:74:de:5f:
                    1e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:7E:75:6E:77:A0:A7:DC:C1:C1:20:13:FD:8F:EF:EF:50:FD:AD:9B
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e32372e302f32342d3234203d3e2033353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.246.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:6c:14:fe:9f:21:f3:74:64:b2:1c:62:a9:86:53:ce:de:9c:
         2c:8b:9e:1b:a3:27:89:ee:6a:26:80:3e:d9:4b:c5:82:f1:90:
         ac:9c:4b:83:e6:a0:16:43:47:97:a0:5d:62:09:b1:e1:86:35:
         14:44:ea:45:b9:fd:1d:66:dd:d7:4e:5e:1d:c5:97:c5:b1:cf:
         6c:09:06:1f:b2:6f:d0:0c:74:57:7f:dd:5e:9f:a1:97:34:5f:
         94:8e:5e:93:44:c9:c6:15:8d:5f:7b:92:23:3a:94:49:28:e4:
         48:28:2a:c3:49:66:e5:0a:a9:33:90:79:5c:9b:65:97:43:64:
         71:95:bf:b0:5c:88:4e:fe:9e:d7:ba:af:09:fb:25:5d:29:84:
         88:42:90:ba:d7:59:e5:cf:0b:2d:6e:5d:20:5b:e2:20:70:1c:
         2b:3b:eb:06:17:42:1a:00:e3:b3:cd:ed:19:af:1b:02:e1:e9:
         4d:67:79:f3:ff:e2:9b:9f:dd:69:62:8c:c9:4c:69:3e:f9:95:
         5e:47:c1:fc:4b:0b:69:91:38:8b:48:22:f7:4d:d5:6b:02:32:
         66:6b:5b:c2:88:67:13:ed:19:6e:3f:cb:a7:8e:0b:26:c6:78:
         b1:02:02:01:54:47:13:f6:30:06:a9:15:72:dd:0b:02:0a:7d:
         37:b9:93:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----