Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/35302e33312e3136312e302f32342d3234203d3e203631313338.roa
File:                     35302e33312e3136312e302f32342d3234203d3e203631313338.roa (raw, json)
Hash identifier:          r/LglJMOSlRP0R4QOjPhZG3vjAPazqLE94G2XCsaulE=
Subject key identifier:   15:14:AA:71:52:FC:AA:AD:CA:40:77:B6:1E:30:83:C8:6B:3B:B7:BB
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       486CCD8928CA3C1909827FC94724A9D8E8BC0F8D
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/35302e33312e3136312e302f32342d3234203d3e203631313338.roa
Signing time:             Thu 13 Apr 2023 13:42:44 +0000
ROA not before:           Thu 13 Apr 2023 13:37:44 +0000
ROA not after:            Thu 11 Apr 2024 13:42:44 +0000
asID:                     61138
IP address blocks:        50.31.161.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:6c:cd:89:28:ca:3c:19:09:82:7f:c9:47:24:a9:d8:e8:bc:0f:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Apr 13 13:37:44 2023 GMT
            Not After : Apr 11 13:42:44 2024 GMT
        Subject: CN=1514AA7152FCAAADCA4077B61E3083C86B3BB7BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3e:f9:2f:41:3b:25:df:3d:b8:93:f0:6f:7d:
                    79:58:e3:11:35:17:84:a3:81:e5:1e:5a:1c:2c:2e:
                    07:1c:e3:9e:8e:77:f8:c9:48:12:d6:9a:83:56:25:
                    0a:01:a4:3e:e7:cf:6c:5a:c0:2c:57:28:4d:53:03:
                    bc:12:51:ce:1c:e1:26:f8:fa:e1:e1:6b:53:ab:ab:
                    69:72:7a:a8:84:a5:2a:26:76:09:7a:71:a3:bb:ee:
                    6a:4c:45:61:f1:74:78:91:b5:92:7e:82:9c:87:64:
                    ce:b0:2d:03:0e:b1:1e:3c:53:88:65:66:91:27:6d:
                    97:16:22:91:ff:ca:f7:e6:64:07:83:ec:c6:29:3d:
                    6d:10:86:8c:fd:2e:d2:23:2e:81:29:1a:b6:4b:9d:
                    6d:c3:14:94:1d:0a:25:93:44:55:87:fc:7c:05:39:
                    02:01:b4:96:6f:fb:fb:3e:07:b4:e2:95:22:9d:39:
                    5a:9f:da:de:38:53:18:2b:1b:45:92:66:2c:01:78:
                    1b:83:13:9b:6b:3c:cc:4c:ac:a2:59:ef:32:a1:3b:
                    6a:5f:dc:83:25:db:2c:14:f8:a1:a5:5e:74:a3:41:
                    ba:76:38:45:f4:3c:f6:23:f1:f9:62:37:66:8c:09:
                    04:87:88:df:11:a6:a3:89:29:0c:f0:5e:07:50:c3:
                    6c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:14:AA:71:52:FC:AA:AD:CA:40:77:B6:1E:30:83:C8:6B:3B:B7:BB
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/35302e33312e3136312e302f32342d3234203d3e203631313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.31.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:7f:f9:9b:c7:e3:3c:6e:45:b3:59:3e:d6:54:d4:e7:24:a6:
         60:29:66:1b:9b:90:e2:cb:0f:ea:41:6f:35:7e:b9:77:0b:cf:
         72:58:a5:cf:75:68:7b:45:fd:1c:55:56:b3:bf:1a:f0:1e:7a:
         da:4d:18:18:4d:d1:0b:4a:91:ab:b2:fe:97:b8:02:96:d3:1f:
         c7:bd:6f:b8:d8:ed:5d:a6:c1:57:87:8c:4d:0a:e0:56:ec:99:
         5d:bb:8b:71:30:06:f0:a6:30:68:97:13:2a:76:12:32:e1:ca:
         a0:ed:1f:67:8a:fd:82:91:b6:a3:bc:e5:b1:d1:d0:2b:e0:34:
         75:c9:cd:b3:b3:ba:2b:09:1f:92:bc:41:1c:de:32:4e:7f:23:
         df:28:5a:d0:c6:98:ea:d6:da:ff:00:04:11:3b:b9:26:53:a6:
         85:c9:a0:53:6c:c1:44:d8:9a:ad:09:f6:f1:91:2e:2c:02:3b:
         ac:7b:16:30:68:45:df:c9:81:ec:40:d5:f2:39:ff:81:6c:b1:
         f0:79:a6:cd:c5:03:ca:98:fd:47:e3:d6:30:61:c6:4a:e3:ac:
         ba:f0:1c:61:2a:b8:b8:0f:36:45:43:fd:67:51:5a:67:aa:dd:
         3e:85:25:10:ac:1e:95:c1:e5:0b:a9:9e:33:78:20:3f:cb:df:
         3f:ac:14:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----