Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e39392e302f32342d3234203d3e203630313137.roa
File:                     3231362e3234362e39392e302f32342d3234203d3e203630313137.roa (raw, json)
Hash identifier:          FUOkt2dBSVzrwzfvYzzYPEGyrFxD+66CkolmKLc9+Wo=
Subject key identifier:   6D:81:7B:E4:DB:52:42:45:BB:14:0A:17:E4:E4:15:68:FF:8C:15:22
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       341A5FB8480E6870420EF87EC3840BAEBD13C687
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e39392e302f32342d3234203d3e203630313137.roa
Signing time:             Thu 06 Apr 2023 10:45:57 +0000
ROA not before:           Thu 06 Apr 2023 10:40:57 +0000
ROA not after:            Thu 04 Apr 2024 10:45:57 +0000
asID:                     60117
IP address blocks:        216.246.99.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:1a:5f:b8:48:0e:68:70:42:0e:f8:7e:c3:84:0b:ae:bd:13:c6:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Apr  6 10:40:57 2023 GMT
            Not After : Apr  4 10:45:57 2024 GMT
        Subject: CN=6D817BE4DB524245BB140A17E4E41568FF8C1522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ce:35:1f:66:fc:b8:df:27:ae:be:b7:2f:32:
                    4e:d2:fc:de:a6:7a:1c:35:36:54:2c:f0:04:4b:67:
                    a4:25:23:cd:fa:19:03:9b:dc:a2:34:99:6b:1b:44:
                    cc:8f:a1:0d:d6:c7:70:c2:dc:46:cc:90:7a:66:6c:
                    59:6e:1e:17:02:03:9f:4e:71:d5:c5:10:88:2c:ba:
                    7e:ac:1c:52:3f:34:93:ef:e9:af:d5:09:e8:a2:0a:
                    c1:35:8c:fd:2c:24:32:45:57:f5:e1:ab:ad:9d:23:
                    6e:f2:1b:84:f9:90:5f:d9:48:5e:85:62:d5:b8:61:
                    34:89:38:2c:6f:1b:92:0a:5d:ff:5d:9b:26:e4:88:
                    34:00:30:cb:41:fc:6f:81:d7:dd:7c:8c:ce:7c:d8:
                    ac:70:d8:4a:4e:92:c6:1d:44:9b:ed:a9:8b:97:43:
                    0f:cc:eb:58:a1:b0:f9:b0:31:8c:26:12:37:48:26:
                    a5:ae:4f:98:f2:a8:78:b3:30:e9:f3:3c:fc:c2:d2:
                    d5:bc:25:4c:03:98:db:9f:fa:96:a1:59:06:28:d9:
                    68:6e:c6:97:46:ae:80:c5:14:9b:99:34:4f:3b:be:
                    43:19:30:52:89:ea:a2:36:9a:36:e6:c0:78:dd:ec:
                    4d:e4:1a:9a:03:b6:e9:32:6e:82:8c:6b:59:73:21:
                    2b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:81:7B:E4:DB:52:42:45:BB:14:0A:17:E4:E4:15:68:FF:8C:15:22
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e39392e302f32342d3234203d3e203630313137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.246.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:88:87:1b:7a:84:d2:86:1e:da:3c:b3:14:63:d6:17:58:05:
         cb:12:20:f6:5e:af:c3:17:8e:a2:4b:fd:2b:f6:c2:5d:9b:22:
         95:cf:b6:81:76:11:13:d7:6d:53:08:01:57:38:f8:a2:a6:94:
         a7:fd:ef:41:1e:03:4d:97:86:36:2f:f5:26:0b:d7:1b:d0:5f:
         d1:6e:0b:e3:37:4a:49:a2:d4:38:c3:c5:f5:19:11:e7:45:62:
         9f:f7:33:88:79:ee:6c:d4:f2:82:2b:22:fe:8b:61:11:80:85:
         00:04:fa:55:29:2f:4c:7e:8b:64:ac:a6:5e:14:33:a9:9a:04:
         ac:85:f0:75:08:00:e1:56:59:27:e5:04:17:a7:b4:76:c7:f7:
         96:c7:24:f9:b1:9d:f7:ff:f8:d7:a7:79:01:b3:04:39:ea:a4:
         94:85:5f:1a:85:3e:17:33:2e:3f:23:dc:f1:3e:b3:da:2c:3c:
         69:7a:49:9d:36:46:3c:3f:72:63:fd:29:ce:ce:e2:f7:a1:63:
         ad:1f:03:c7:9b:46:89:e0:35:80:96:c8:f4:62:c6:d9:e0:55:
         43:00:15:06:e1:d2:bc:22:70:f8:75:24:1c:e9:6f:d4:03:eb:
         c9:6b:2e:3e:7a:0b:54:8e:b3:90:fc:75:00:30:48:55:ef:88:
         14:b1:09:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----