Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/35302e33312e3133392e302f32342d3234203d3e20313338363837.roa
File:                     35302e33312e3133392e302f32342d3234203d3e20313338363837.roa (raw, json)
Hash identifier:          26Gogj3T6dvoX+5+sDV21fqPzYT1zIQro3115bd4h2k=
Subject key identifier:   7A:C4:AC:15:E7:CD:28:6C:CB:82:38:54:29:79:C4:A6:13:A8:98:C5
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       0A4B122E53760AFDD3212C69FE02B92C7249A426
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/35302e33312e3133392e302f32342d3234203d3e20313338363837.roa
Signing time:             Wed 12 Apr 2023 07:59:24 +0000
ROA not before:           Wed 12 Apr 2023 07:54:24 +0000
ROA not after:            Wed 10 Apr 2024 07:59:24 +0000
asID:                     138687
IP address blocks:        50.31.139.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:4b:12:2e:53:76:0a:fd:d3:21:2c:69:fe:02:b9:2c:72:49:a4:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Apr 12 07:54:24 2023 GMT
            Not After : Apr 10 07:59:24 2024 GMT
        Subject: CN=7AC4AC15E7CD286CCB8238542979C4A613A898C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6c:1e:4b:1c:8a:aa:32:3b:f7:43:ab:84:27:
                    8f:c1:1d:49:a5:6a:2d:cc:f6:d8:0b:b5:ec:90:af:
                    6d:39:df:a0:f3:0c:ce:91:44:1b:8f:d9:9a:67:ef:
                    98:c7:bb:02:f2:64:ff:23:32:10:53:df:e7:fc:54:
                    1c:29:14:7a:d1:ec:32:0f:a3:02:64:e4:2b:78:70:
                    35:b0:e5:3e:fb:77:cb:4a:f8:8f:08:e4:7d:f1:f4:
                    d9:a1:db:49:cb:90:41:6a:a7:68:6c:44:69:6a:3f:
                    a8:77:06:78:4c:bd:89:38:bb:73:7b:aa:7c:1b:c6:
                    e8:2b:ed:24:17:19:b4:14:eb:1c:6f:a3:ac:42:4a:
                    2c:89:ed:66:4d:b8:4e:8c:20:e5:1d:d2:b7:f6:28:
                    89:95:05:50:0b:24:c6:e4:25:e0:89:ce:7d:76:b8:
                    86:89:09:92:88:67:e2:d4:19:5f:58:74:5b:48:ca:
                    35:ab:7b:4b:f8:1f:e0:71:d0:8f:78:0b:6f:6b:90:
                    96:ad:34:b1:66:2f:e6:5c:c6:4e:b2:9e:c0:4d:ba:
                    77:a8:78:93:c4:87:a1:40:ff:44:10:cc:ee:2d:30:
                    dc:e2:82:29:77:a0:54:ab:07:62:f6:60:a7:a9:a8:
                    fa:52:73:aa:76:77:1e:90:dc:bc:a3:8a:1a:bd:1d:
                    00:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:C4:AC:15:E7:CD:28:6C:CB:82:38:54:29:79:C4:A6:13:A8:98:C5
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/35302e33312e3133392e302f32342d3234203d3e20313338363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.31.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:f6:b5:c2:c0:39:fb:e6:3a:2f:1a:b2:05:30:f1:cf:ae:f1:
         d4:c8:3c:da:3f:50:3a:1c:ba:0b:0f:e9:92:14:2a:b3:15:48:
         65:dd:8c:76:08:9b:84:96:92:1f:94:4e:d5:37:0c:0e:19:9f:
         b5:22:89:1d:90:32:f2:85:e9:d8:20:7f:4c:e3:08:d8:c5:2d:
         7e:6f:66:b5:e3:48:11:33:a2:43:01:13:7c:46:75:a7:70:da:
         d8:23:f3:c8:87:ef:e6:22:c7:64:ae:5c:ce:30:4a:ab:4d:59:
         bf:a7:53:ae:9a:ba:42:50:da:67:f0:66:11:47:d4:4f:94:41:
         7a:1f:15:3d:26:19:be:38:2c:c1:9d:b2:ed:33:be:85:bc:1d:
         5e:80:c4:48:10:d5:59:b8:8f:24:76:aa:15:f2:b6:eb:89:2d:
         7a:4e:0f:44:81:e0:3c:fb:10:ea:80:c6:75:7c:d9:09:00:6d:
         61:f6:5e:bd:52:0a:17:73:06:78:c8:b4:0d:da:cd:80:17:b2:
         52:31:de:55:ac:0a:6e:a8:d8:0e:c4:87:30:33:b5:cf:ac:79:
         e5:74:65:99:58:d7:d8:25:f9:83:80:b2:61:fe:82:4b:92:db:
         9a:b4:de:a3:9a:42:0f:88:14:33:f4:1a:04:fe:6a:91:21:d2:
         5e:7b:6f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----