Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e33352e302f32342d3234203d3e203433323630.roa
File:                     3231362e3234362e33352e302f32342d3234203d3e203433323630.roa (raw, json)
Hash identifier:          NdUpO01y0fUeV65am0oIwRD9y+Mir9L+Xjn9aFOwUj4=
Subject key identifier:   C8:36:21:9E:BB:24:25:93:73:42:5C:D2:29:D2:26:83:BF:35:09:18
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       6D9252AE2E8FE44779F93F21304C3F9A13895D60
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e33352e302f32342d3234203d3e203433323630.roa
Signing time:             Wed 12 Apr 2023 14:54:33 +0000
ROA not before:           Wed 12 Apr 2023 14:49:33 +0000
ROA not after:            Wed 10 Apr 2024 14:54:33 +0000
asID:                     43260
IP address blocks:        216.246.35.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:92:52:ae:2e:8f:e4:47:79:f9:3f:21:30:4c:3f:9a:13:89:5d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Apr 12 14:49:33 2023 GMT
            Not After : Apr 10 14:54:33 2024 GMT
        Subject: CN=C836219EBB24259373425CD229D22683BF350918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:93:aa:5d:2e:1a:8e:0c:0d:b3:c5:e3:ed:62:
                    be:37:6f:52:08:f2:63:de:55:22:98:f0:df:fa:71:
                    c5:cd:08:d5:03:22:d2:14:04:5b:cf:b7:97:45:a0:
                    97:7d:3c:d3:5b:6c:16:2a:c5:bd:75:fc:6f:2d:b3:
                    f8:42:b9:0c:26:af:f6:14:2a:5d:ad:f7:80:53:3c:
                    e4:21:9d:f6:b9:85:dd:0b:b3:8a:eb:9e:0c:ea:1d:
                    37:c7:6d:73:c0:00:4e:ad:fe:cb:6d:97:0c:dc:fd:
                    dc:24:64:c6:34:ed:36:0b:2d:6a:26:29:45:3e:09:
                    4c:8f:a8:c0:c9:14:8c:b9:ae:06:cd:4f:34:8c:a0:
                    b1:5d:97:45:e4:75:8c:92:57:b9:23:fd:e3:25:f3:
                    12:24:6e:89:94:a0:20:4b:6d:7f:dc:e9:13:18:63:
                    15:cc:70:ea:49:07:85:13:59:a8:96:b0:19:71:b9:
                    31:dd:93:03:6c:ba:f6:dc:d2:2b:f8:65:e0:a2:22:
                    c3:ee:1d:59:7b:90:0a:60:37:21:8e:98:fa:67:5e:
                    89:0a:c8:74:d4:4b:0b:37:a1:34:d4:0c:d8:3c:fe:
                    7a:30:04:73:2c:bd:cd:58:96:85:f3:b3:e5:c1:9b:
                    e0:7c:f8:66:67:23:7e:43:49:f8:b9:08:81:99:1e:
                    ab:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:36:21:9E:BB:24:25:93:73:42:5C:D2:29:D2:26:83:BF:35:09:18
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e33352e302f32342d3234203d3e203433323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.246.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:91:ca:d2:b5:81:e4:cc:eb:39:e0:37:23:f7:93:c1:c7:bb:
         4c:28:8a:6f:76:64:b7:8e:fd:78:77:cf:23:c4:09:bb:08:1a:
         e4:3c:87:c8:bd:16:4d:35:ba:23:0c:43:d9:7c:1d:12:fd:d8:
         69:cf:d6:86:be:7f:89:5c:bb:2e:3c:51:28:74:1c:1f:0b:f6:
         27:c3:4d:7b:23:fc:64:fc:eb:18:da:5d:a5:c1:a4:13:39:46:
         ef:3c:dd:74:bc:d7:f6:46:e1:57:85:4a:ec:ce:2e:1a:2e:b0:
         44:e5:e2:78:d6:d3:be:e8:4f:89:c0:be:eb:9f:f4:5b:c9:76:
         34:85:28:1e:22:4a:ac:31:29:fc:23:9c:4a:ef:16:79:c6:95:
         e5:61:b9:de:9e:f5:df:ed:03:8b:61:ab:96:6f:39:75:c0:8f:
         0c:cb:28:05:b8:53:e9:8e:a7:e7:77:a0:81:e2:84:84:ff:73:
         d6:07:ff:ef:d8:cf:c6:dd:ba:4f:7f:4a:fa:ae:34:13:2f:e2:
         e1:df:91:65:32:cb:3f:07:a2:e6:6c:79:68:4f:39:a0:29:bf:
         b9:0a:ff:74:ae:52:6a:a9:f7:f2:a6:62:1b:f9:a0:2f:b4:53:
         65:fd:c0:8c:f8:59:1a:38:7a:c1:5c:72:6a:28:1d:47:ed:58:
         ab:e3:8a:6c
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUbZJSri6P5Ed5+T8hMEw/mhOJXWAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjk2MjZjMmUwYjk2NGVkNWU4YmE2YTZmM2VkMGZkNjM2
Y2YzNjQ1ZDZjY2I2MTIzYjkwHhcNMjMwNDEyMTQ0OTMzWhcNMjQwNDEwMTQ1NDMz
WjAzMTEwLwYDVQQDEyhDODM2MjE5RUJCMjQyNTkzNzM0MjVDRDIyOUQyMjY4M0JG
MzUwOTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZOqXS4ajgwN
s8Xj7WK+N29SCPJj3lUimPDf+nHFzQjVAyLSFARbz7eXRaCXfTzTW2wWKsW9dfxv
LbP4QrkMJq/2FCpdrfeAUzzkIZ32uYXdC7OK654M6h03x21zwABOrf7LbZcM3P3c
JGTGNO02Cy1qJilFPglMj6jAyRSMua4GzU80jKCxXZdF5HWMkle5I/3jJfMSJG6J
lKAgS21/3OkTGGMVzHDqSQeFE1molrAZcbkx3ZMDbLr23NIr+GXgoiLD7h1Ze5AK
YDchjpj6Z16JCsh01EsLN6E01AzYPP56MARzLL3NWJaF87PlwZvgfPhmZyN+Q0n4
uQiBmR6rSwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFMg2IZ67JCWTc0Jc0inSJoO/
NQkYMB8GA1UdIwQYMBaAFE8GHzq5hjgo92M+vEYwD5t+h3q8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODY5M2YwNjAwMTg2YzZlN2ZkOGQzNjYwLzAv
NEYwNjFGM0FCOTg2MzgyOEY3NjMzRUJDNDYzMDBGOUI3RTg3N0FCQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2FkOWIzMDEwLTMxMTYtNDY0ZS04YzU4LTk1ODY1MDBmMTcwMS82OTYy
NmMyZTBiOTY0ZWQ1ZThiYTZhNmYzZWQwZmQ2MzZjZjM2NDVkNmNjYjYxMjNiOS5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg2OTNmMDYwMDE4NmM2
ZTdmZDhkMzY2MC8wLzMyMzEzNjJlMzIzNDM2MmUzMzM1MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzQzMzMyMzYzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANj2IzANBgkqhkiG9w0BAQsF
AAOCAQEAppHK0rWB5MzrOeA3I/eTwce7TCiKb3Zkt479eHfPI8QJuwga5DyHyL0W
TTW6IwxD2XwdEv3Yac/Whr5/iVy7LjxRKHQcHwv2J8NNeyP8ZPzrGNpdpcGkEzlG
7zzddLzX9kbhV4VK7M4uGi6wROXieNbTvuhPicC+65/0W8l2NIUoHiJKrDEp/COc
Su8WecaV5WG53p713+0Di2Grlm85dcCPDMsoBbhT6Y6n53eggeKEhP9z1gf/79jP
xt26T39K+q40Ey/i4d+RZTLLPwei5mx5aE85oCm/uQr/dK5Saqn38qZiG/mgL7RT
Zf3AjPhZGjh6wVxyaigdR+1Yq+OKbA==
-----END CERTIFICATE-----