Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e36372e302f32342d3234203d3e203631313338.roa
File:                     3231362e3234362e36372e302f32342d3234203d3e203631313338.roa (raw, json)
Hash identifier:          cIDhjSAubJ00HrURTiPKIz5QP71mNJRaPGepTQmj1gc=
Subject key identifier:   CA:42:EE:D1:02:34:B1:A4:4C:76:02:81:1F:9F:95:F7:76:12:AC:DF
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       4CECCD3F47D2BEE38D7798173B4F022B2BA6A49E
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e36372e302f32342d3234203d3e203631313338.roa
Signing time:             Fri 26 May 2023 12:25:29 +0000
ROA not before:           Fri 26 May 2023 12:20:29 +0000
ROA not after:            Fri 24 May 2024 12:25:29 +0000
asID:                     61138
IP address blocks:        216.246.67.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:ec:cd:3f:47:d2:be:e3:8d:77:98:17:3b:4f:02:2b:2b:a6:a4:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: May 26 12:20:29 2023 GMT
            Not After : May 24 12:25:29 2024 GMT
        Subject: CN=CA42EED10234B1A44C7602811F9F95F77612ACDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:df:92:51:b7:b7:2d:81:3e:d1:62:c0:92:69:
                    09:ca:b8:6f:78:b6:0f:9f:b2:f6:97:ab:92:a0:8d:
                    be:49:74:73:7a:a9:68:c2:8e:2b:54:71:68:3e:08:
                    ad:83:79:3f:4e:bf:20:d3:2f:73:67:20:dc:ec:b2:
                    5b:df:6b:86:89:09:65:16:98:87:01:4a:70:e4:8a:
                    59:4d:32:2b:47:fa:2b:c6:bb:a0:8f:64:23:20:b8:
                    4b:43:7d:e0:cd:91:c0:0e:6b:6f:88:65:3b:90:e4:
                    bc:87:02:b4:c5:d9:7d:3a:d6:f5:1e:48:20:a2:b8:
                    e7:5f:b4:b7:20:83:d7:8a:6e:bc:d9:ab:c3:7e:1a:
                    3c:65:d3:e3:99:d2:30:22:66:19:79:8b:a2:ce:26:
                    27:65:bb:6a:2e:75:5d:58:f8:8b:be:5e:e0:ac:71:
                    12:f8:1c:64:4b:4b:39:e2:2b:64:f2:ef:a0:78:27:
                    48:8b:f0:17:44:41:ad:65:df:28:7f:7c:db:e1:16:
                    5f:62:4f:81:da:d7:b8:ec:db:d5:e5:26:66:5c:39:
                    0b:c3:f1:eb:ef:4e:93:4d:0d:5b:d1:c2:13:d0:1c:
                    b0:b9:62:46:63:4c:d6:f1:41:a3:73:ae:ee:86:d1:
                    aa:68:73:57:af:16:a4:45:5b:d9:b6:c8:4a:e5:a9:
                    ab:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:42:EE:D1:02:34:B1:A4:4C:76:02:81:1F:9F:95:F7:76:12:AC:DF
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e36372e302f32342d3234203d3e203631313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.246.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:c0:1d:66:bc:47:e8:ad:26:80:1c:b4:a7:f4:1c:30:2a:f0:
         8e:b4:38:5c:eb:2b:59:33:79:38:2a:36:6a:29:22:3a:64:ad:
         ea:45:3f:42:1a:6c:55:7c:f8:be:c0:fa:36:bf:5a:57:09:74:
         d4:7f:a3:ff:52:fa:ec:29:43:c8:c6:93:56:c1:89:dc:e3:34:
         a1:d4:3a:6f:a3:5a:47:50:d2:e5:6b:47:a7:c1:06:41:1a:f3:
         0e:ee:b3:0c:89:14:06:81:24:c3:f9:6b:59:51:29:85:40:7f:
         7c:e7:42:d4:1b:bd:47:22:0c:a4:4d:3a:a2:9d:c3:3b:8c:6a:
         98:21:e8:35:01:b4:8f:e4:c2:51:e3:ca:d8:0b:79:a6:45:e8:
         fb:6c:0a:7f:56:ea:a3:3c:ff:b8:79:eb:15:e9:89:69:cc:54:
         65:f8:32:ae:79:a2:f2:85:5f:3d:24:a4:5d:ff:c2:62:df:40:
         2e:bf:46:75:36:68:3b:4c:ac:d8:bf:da:da:df:74:8e:7f:bf:
         4d:c5:26:c1:aa:a9:ca:ac:d5:1e:18:e7:b4:19:b3:3b:52:d6:
         6b:19:45:97:c3:6d:67:2b:11:38:e8:02:21:ee:04:ff:a4:0d:
         65:a5:b1:e6:dd:36:f9:eb:40:39:9f:ed:2a:16:1b:52:ef:08:
         35:b0:64:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----