Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/35302e33312e3133392e302f32342d3234203d3e20383334.roa
File:                     35302e33312e3133392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          d1Uy6nSerFmwXGA0zSlmi13s5A6XKSXcgJAIUczOOIw=
Subject key identifier:   29:48:F9:D8:CD:19:2F:81:6E:BD:CC:27:D6:AF:B8:54:BB:D9:B2:B1
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       405E1D3595A22AD5CC98E18059008784E3121108
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/35302e33312e3133392e302f32342d3234203d3e20383334.roa
Signing time:             Fri 12 May 2023 00:00:08 +0000
ROA not before:           Thu 11 May 2023 23:55:08 +0000
ROA not after:            Fri 10 May 2024 00:00:08 +0000
asID:                     834
IP address blocks:        50.31.139.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:5e:1d:35:95:a2:2a:d5:cc:98:e1:80:59:00:87:84:e3:12:11:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: May 11 23:55:08 2023 GMT
            Not After : May 10 00:00:08 2024 GMT
        Subject: CN=2948F9D8CD192F816EBDCC27D6AFB854BBD9B2B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a2:5b:1a:2d:4f:eb:e6:1b:53:70:61:e0:4a:
                    09:3f:2e:7d:59:f2:97:0f:d1:3c:4b:87:f3:81:93:
                    a5:24:0a:a2:08:3d:82:71:4e:13:67:8a:ac:be:85:
                    87:ab:7a:ec:8f:06:06:c2:1b:6d:90:ab:aa:82:26:
                    f5:1b:b8:70:92:21:0b:ea:5a:c7:32:4b:f2:8f:95:
                    98:25:ee:fd:81:4b:f7:68:4a:56:51:d8:42:ab:7e:
                    d8:95:65:89:24:d0:00:46:34:e9:4e:21:45:10:5e:
                    d5:4b:d7:73:90:3c:0a:0b:e6:d7:cc:dc:59:9e:af:
                    0d:1d:f5:bc:a0:ee:8f:10:1f:bd:f3:9e:32:12:96:
                    cd:26:10:c6:fa:ec:d7:98:66:e9:88:6d:c5:40:5b:
                    89:c8:39:1e:09:0b:a9:37:7c:c7:c8:1c:0e:8c:d7:
                    30:3d:8f:d1:c2:9f:53:7a:f3:bd:86:24:93:0c:87:
                    11:06:ba:17:35:00:c4:fd:c0:88:e2:5f:8e:fd:6b:
                    2c:83:8f:f3:ef:b6:5c:e0:b3:d1:6d:19:00:38:f9:
                    90:a3:9b:b6:c5:8b:ee:74:15:31:e7:90:6a:06:30:
                    69:82:71:b9:c3:44:47:71:ad:e9:b3:c5:d4:7b:c4:
                    c9:2b:53:87:72:b1:2e:d6:50:30:df:ce:5b:4b:dc:
                    c6:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:48:F9:D8:CD:19:2F:81:6E:BD:CC:27:D6:AF:B8:54:BB:D9:B2:B1
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/35302e33312e3133392e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.31.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:28:ba:ec:2f:07:73:61:e1:51:80:f3:01:1d:a3:93:80:f6:
         80:e9:d5:a5:0a:24:1a:dd:7e:35:35:bb:f6:b0:d9:86:d0:c9:
         21:16:19:6d:a2:6f:07:26:4f:99:85:d9:ac:f1:66:8b:8c:b6:
         19:40:b8:5e:1d:6a:80:9c:dc:6d:c6:4c:61:47:d1:59:de:77:
         d4:b2:46:65:8d:1a:a2:6d:49:09:55:ee:5f:95:37:f9:57:ff:
         20:e6:06:7a:dd:50:f3:77:f2:f1:f4:b8:87:e7:72:49:f4:1f:
         a1:dd:eb:56:20:3e:9a:2a:49:fe:0a:2f:07:d2:7d:f1:e2:47:
         a0:55:d9:74:0a:65:3f:b2:06:66:83:62:24:c2:bc:93:b6:be:
         0c:c8:1f:79:75:b2:27:34:d2:07:59:25:68:8f:60:c5:d3:f9:
         5c:31:71:06:a7:37:58:3e:2b:31:b6:ef:06:53:1c:48:97:3c:
         2b:7d:e0:a6:8c:3d:04:45:b7:57:fe:3e:4a:1e:00:c6:3c:f6:
         4c:66:ea:1a:d0:55:52:5b:15:d0:e6:bf:59:5a:fa:7d:7a:f7:
         71:9d:9e:cf:50:b8:3b:de:57:eb:70:39:d8:38:aa:3f:d4:4b:
         89:f1:b1:ca:a4:63:09:bc:36:f4:e2:ed:ff:ce:8f:ab:2c:97:
         7c:a2:bb:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----