Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e382e302f32342d3234203d3e203433323630.roa
File:                     3231362e3234362e382e302f32342d3234203d3e203433323630.roa (raw, json)
Hash identifier:          ztSp2LFL/AbsODCUO9bkNNtrRuQE31+jb7fEkT1NDYM=
Subject key identifier:   33:E2:92:04:69:89:1B:D9:4F:7B:D5:19:45:7A:B4:BD:89:44:BA:20
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       09E680FE590AAE82D0CF7A3FF9856A83F14CC4B7
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e382e302f32342d3234203d3e203433323630.roa
Signing time:             Wed 12 Apr 2023 14:54:33 +0000
ROA not before:           Wed 12 Apr 2023 14:49:33 +0000
ROA not after:            Wed 10 Apr 2024 14:54:33 +0000
asID:                     43260
IP address blocks:        216.246.8.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:e6:80:fe:59:0a:ae:82:d0:cf:7a:3f:f9:85:6a:83:f1:4c:c4:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Apr 12 14:49:33 2023 GMT
            Not After : Apr 10 14:54:33 2024 GMT
        Subject: CN=33E2920469891BD94F7BD519457AB4BD8944BA20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e2:54:3f:06:80:80:52:7b:61:93:00:a2:9b:
                    f8:6a:18:24:ce:40:3d:b6:9f:fb:2e:32:74:b0:e3:
                    71:f9:6d:90:85:dc:13:77:39:2b:07:7b:d1:02:25:
                    d0:6b:7e:fb:67:4d:a8:b0:25:55:ec:13:e3:77:ec:
                    8d:a2:4b:7d:65:45:28:4b:1a:46:59:8e:63:08:ed:
                    04:28:cc:66:9a:d6:7c:31:e3:69:ef:d8:22:6b:37:
                    44:9b:5b:82:1a:04:59:b1:f8:52:39:43:0c:d6:ec:
                    e5:89:cb:a5:db:bc:ae:88:cf:50:47:c6:bc:d0:5b:
                    d3:38:9a:0f:e1:10:ec:ef:20:80:6a:34:24:8e:9b:
                    4a:e9:78:a1:9c:a4:30:8e:f6:d1:62:76:6d:94:77:
                    f5:ef:2b:0d:76:f2:fb:89:fb:b5:88:cc:43:db:ab:
                    29:4f:1f:84:cf:40:0f:bb:f8:78:dc:90:22:b7:f6:
                    e4:48:c7:d3:ed:95:25:cd:02:9a:55:90:85:b9:38:
                    13:47:6f:1b:b6:7c:d5:8e:0b:8a:df:e2:88:01:c6:
                    87:82:f1:e5:dd:7e:6a:fd:bd:b7:2f:ab:8f:5f:82:
                    5c:5c:c0:a1:d2:54:ea:2b:dd:c8:25:6d:9b:ae:94:
                    a4:80:52:09:bf:33:bb:74:14:4b:d1:b5:a9:3a:da:
                    43:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:E2:92:04:69:89:1B:D9:4F:7B:D5:19:45:7A:B4:BD:89:44:BA:20
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e382e302f32342d3234203d3e203433323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.246.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:02:b2:4b:9d:66:47:18:01:55:7c:d4:66:da:aa:52:49:8d:
         07:d3:a7:10:87:90:0a:d1:a4:7b:67:4b:3a:a1:ef:e7:da:33:
         62:58:24:ac:3c:ec:f6:50:d2:77:bc:c1:b8:42:aa:a3:93:3b:
         4b:60:99:ab:8c:05:00:8a:ce:2b:e4:a3:90:5d:9f:4b:fc:de:
         4b:2c:3a:79:e6:45:e0:ea:39:6a:7d:c0:fb:f5:f3:df:34:86:
         a6:99:68:53:aa:d7:5a:d3:e1:a1:a6:23:f8:85:b1:c0:fe:af:
         1b:19:d1:ed:6e:aa:ab:90:bd:79:63:0f:da:af:59:bf:73:87:
         75:b5:99:5d:21:35:af:0e:db:ad:cf:a8:e3:25:06:68:2e:c6:
         79:73:71:fb:58:82:82:a1:1c:8e:8a:19:33:1c:12:bc:af:2d:
         d9:35:e6:6a:e6:9a:ab:e4:cb:b2:87:01:78:90:0c:59:53:e0:
         90:d0:c2:64:50:2a:98:c3:4d:96:8b:75:97:4f:81:32:9d:f1:
         99:1e:a0:cf:86:73:32:ed:39:13:19:e6:19:22:63:e2:5d:09:
         6a:23:f7:25:4d:75:e8:cf:d7:4f:a4:f7:f6:b1:a2:e6:fc:0f:
         90:b0:b8:61:05:3c:25:25:7d:e2:ca:24:6d:9a:a9:38:31:23:
         f4:fe:38:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----