Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e32372e302f32342d3234203d3e20383334.roa
File:                     3231362e3234362e32372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          Ijj/dYkmdrEhzwaLey1IbzHtmSiNiJK1lF160l1r/EE=
Subject key identifier:   19:13:7E:2E:65:C1:93:E5:EA:C1:F5:15:7D:32:90:32:AE:AA:A4:F8
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       3635589F272ECDD5EECA9DC55779D24382C55DBB
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e32372e302f32342d3234203d3e20383334.roa
Signing time:             Mon 15 May 2023 11:30:06 +0000
ROA not before:           Mon 15 May 2023 11:25:06 +0000
ROA not after:            Mon 13 May 2024 11:30:06 +0000
asID:                     834
IP address blocks:        216.246.27.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:35:58:9f:27:2e:cd:d5:ee:ca:9d:c5:57:79:d2:43:82:c5:5d:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: May 15 11:25:06 2023 GMT
            Not After : May 13 11:30:06 2024 GMT
        Subject: CN=19137E2E65C193E5EAC1F5157D329032AEAAA4F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:22:af:7a:83:ed:63:6c:46:5d:82:97:e2:cd:
                    6e:80:06:b7:77:69:65:05:4d:7d:d0:cf:ba:63:ee:
                    8e:48:ab:1a:15:0a:a3:8b:9a:dd:04:5f:ef:76:6c:
                    96:81:cc:0f:a0:7f:c3:e3:b9:e8:2d:95:15:fa:24:
                    0c:bf:7c:1f:21:2b:49:55:8f:7a:f8:32:f0:72:40:
                    60:8b:1b:c9:eb:51:ba:69:86:9d:87:38:5b:ef:93:
                    8a:57:b2:89:ff:62:ae:aa:d8:36:29:60:cf:c6:2c:
                    9d:1b:e0:4f:a8:2f:f7:6b:a3:c3:70:c6:1f:b3:64:
                    4e:ef:4e:a0:5b:ad:18:3a:ba:00:2c:dd:55:ca:c6:
                    f8:50:f4:e8:b3:7a:c5:51:f3:ad:6a:73:96:0e:74:
                    07:1e:33:ad:54:ae:a0:72:5e:ce:d0:1c:f0:d9:f8:
                    71:e5:9d:0b:e6:6c:dc:56:c6:07:eb:a3:f1:99:92:
                    dd:02:2b:e6:8f:54:9a:62:43:2a:1d:ca:e9:16:17:
                    b3:70:0f:4c:1d:3b:a4:45:d1:ae:bd:1f:82:f7:01:
                    d6:8e:77:ac:a9:0b:7d:fb:c3:85:ac:29:2a:c5:a9:
                    a7:9a:88:45:32:20:0d:28:1b:a5:f1:e2:38:75:b7:
                    24:b9:65:a5:bf:d7:65:90:23:63:30:0b:ed:9c:83:
                    48:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:13:7E:2E:65:C1:93:E5:EA:C1:F5:15:7D:32:90:32:AE:AA:A4:F8
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e32372e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.246.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:02:5f:b7:9d:57:d0:eb:8f:de:6e:b3:34:e2:16:d1:15:3d:
         55:89:7d:ac:9a:c2:9f:5c:17:a0:db:e9:27:f3:b4:80:9c:a8:
         11:b6:cc:3f:e0:ac:07:36:9b:05:be:2d:46:6c:8f:8e:84:63:
         83:12:2f:11:cc:e2:b3:00:c8:a8:a0:fd:32:23:e0:37:4c:a7:
         a1:df:d2:60:1e:85:c9:44:5f:03:7d:90:11:9d:f5:4c:63:93:
         a2:cb:8f:08:60:59:b8:a9:08:28:47:c7:6b:56:b0:bc:ef:82:
         25:7b:4d:92:6e:aa:fa:ed:a7:3d:86:51:d2:ec:64:97:bf:48:
         d4:60:34:c7:52:9a:1d:da:c5:6a:44:34:3d:b5:19:31:c4:d9:
         48:e7:2f:46:33:90:85:c5:69:6a:b8:90:30:e8:f9:f7:ab:88:
         3b:8b:be:3a:f9:02:2f:d3:fb:5d:6c:50:40:ac:cb:2e:45:29:
         6c:74:82:41:bd:31:6b:83:b6:66:66:50:e9:2a:f5:17:ce:36:
         7f:66:ab:b8:75:55:86:1e:2e:92:1d:60:b6:01:bd:d3:48:97:
         67:e9:f0:0d:2a:54:6d:e7:be:98:e4:2b:b5:88:c1:1a:bb:8a:
         7f:de:70:f9:90:43:c5:8f:1f:45:ba:16:bf:6a:0d:d3:ab:36:
         21:db:10:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----