Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e34332e302f32342d3234203d3e203631313338.roa
File:                     3231362e3234362e34332e302f32342d3234203d3e203631313338.roa (raw, json)
Hash identifier:          ecrj8Le8XR2H/nFpdaVZtHVLnTlWE+vUR9D2pLJaiTg=
Subject key identifier:   BC:74:7E:7A:D9:4E:9B:77:88:3B:43:41:35:15:86:85:B0:27:78:F1
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       3FADAA3C485113406DF318B3D2FA2AD63566055E
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e34332e302f32342d3234203d3e203631313338.roa
Signing time:             Thu 25 May 2023 12:18:21 +0000
ROA not before:           Thu 25 May 2023 12:13:21 +0000
ROA not after:            Thu 23 May 2024 12:18:21 +0000
asID:                     61138
IP address blocks:        216.246.43.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:ad:aa:3c:48:51:13:40:6d:f3:18:b3:d2:fa:2a:d6:35:66:05:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: May 25 12:13:21 2023 GMT
            Not After : May 23 12:18:21 2024 GMT
        Subject: CN=BC747E7AD94E9B77883B434135158685B02778F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e3:42:5f:43:e3:57:b4:f4:22:e9:2d:a9:07:
                    e5:b0:bb:71:2d:eb:95:27:9f:6c:e9:83:96:c5:8d:
                    73:45:08:30:10:eb:fd:e3:73:f2:c1:23:b0:60:18:
                    c9:9d:d5:d4:18:51:42:2d:13:b3:a9:2a:5b:bc:03:
                    8e:37:d6:de:4b:49:a0:80:ed:c1:18:82:a9:3f:e1:
                    b0:41:9c:0a:d6:a1:10:6a:9b:e5:90:7e:ef:b8:78:
                    8e:63:54:c3:b3:d6:53:7f:6f:0b:d0:e2:bc:dd:b4:
                    d7:6f:46:86:6f:c8:35:a1:5b:e0:3d:eb:32:9d:96:
                    d1:cf:16:f1:28:16:6f:6a:51:77:d9:94:99:ea:cc:
                    ea:de:5f:c1:22:6f:aa:ec:fc:25:51:9f:eb:89:bb:
                    28:62:e8:e0:54:1c:e9:ee:86:a8:57:fd:63:bf:f5:
                    94:e8:3e:25:0c:5c:b5:54:77:b8:03:d4:d2:c2:db:
                    c6:69:36:ee:ce:8e:c8:d8:f4:84:96:01:3c:c1:02:
                    b6:3e:d3:0d:7a:fe:88:23:67:4a:9c:fd:0e:8c:68:
                    04:c7:8e:1c:54:b8:0b:53:10:b4:c9:59:41:cd:bc:
                    7f:ce:17:9d:92:91:40:bc:05:3b:6b:d6:b9:83:d1:
                    20:b7:fa:5b:d4:20:12:80:ed:9f:df:e7:22:71:79:
                    77:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:74:7E:7A:D9:4E:9B:77:88:3B:43:41:35:15:86:85:B0:27:78:F1
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e34332e302f32342d3234203d3e203631313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.246.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:4b:0b:63:a9:ae:26:d8:6d:d5:a4:45:16:7c:46:06:a2:f6:
         05:68:56:a1:69:f9:2b:86:8b:2f:27:93:95:d6:fa:09:66:c6:
         b0:45:e0:11:61:dd:a3:3e:96:e9:2d:9c:db:c1:42:af:1f:07:
         77:48:44:9c:4a:bd:80:22:d6:d5:ef:58:5f:a9:f9:d0:1b:b2:
         14:7a:8f:de:a5:8f:6e:97:e5:bf:71:ef:fb:0c:c9:37:7f:06:
         27:4d:97:4a:e5:72:0d:7b:28:fe:e3:85:6f:af:21:d7:76:80:
         81:2e:77:29:21:68:7b:7d:b4:7c:10:16:94:49:b4:63:c1:8e:
         ba:40:22:77:66:8f:c7:11:df:e2:17:0c:ef:45:9b:0d:91:42:
         8e:63:4b:87:c1:c6:42:2a:76:3a:03:65:a0:f4:b6:89:db:fa:
         d9:d8:90:3b:97:26:c1:c0:84:fb:09:50:10:4e:b4:65:95:0c:
         ed:c1:4b:b1:5f:7c:f4:de:ff:3f:47:ae:3e:ec:81:79:98:62:
         54:38:ae:7f:6e:71:98:40:9b:0f:76:d0:26:44:3b:5e:f8:ab:
         31:28:40:55:0d:10:fc:68:ff:38:5f:1b:a0:ff:35:60:62:fd:
         89:c7:34:f8:05:52:c0:17:c9:d3:c3:ed:e6:0a:35:76:fc:e7:
         d3:5e:22:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----