Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/35302e33312e3138312e302f32342d3234203d3e20313335373532.roa
File:                     35302e33312e3138312e302f32342d3234203d3e20313335373532.roa (raw, json)
Hash identifier:          eZKt4Db7RKv0O1Z1fWoLgtxJ7E1wvM+expj+vep9ukk=
Subject key identifier:   47:2C:D4:09:50:ED:12:87:DD:7D:55:14:A5:A0:74:80:F8:F9:D1:EA
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       23D321B4D49041535EFA168AEC4A151C8CB7D7BA
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/35302e33312e3138312e302f32342d3234203d3e20313335373532.roa
Signing time:             Wed 12 Apr 2023 11:55:51 +0000
ROA not before:           Wed 12 Apr 2023 11:50:51 +0000
ROA not after:            Wed 10 Apr 2024 11:55:51 +0000
asID:                     135752
IP address blocks:        50.31.181.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:d3:21:b4:d4:90:41:53:5e:fa:16:8a:ec:4a:15:1c:8c:b7:d7:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Apr 12 11:50:51 2023 GMT
            Not After : Apr 10 11:55:51 2024 GMT
        Subject: CN=472CD40950ED1287DD7D5514A5A07480F8F9D1EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:37:9b:53:ea:e1:f0:92:d7:f5:c0:1a:78:8f:
                    1a:1e:3c:a7:06:62:43:49:9d:f5:e4:99:50:70:11:
                    7d:4c:74:fb:30:89:94:9c:87:d0:1d:0f:c6:97:8b:
                    ee:68:5b:4d:9e:1b:a3:2c:60:2e:c6:42:29:cf:a8:
                    dd:c6:1f:71:82:28:a6:6c:60:d8:6a:23:31:0f:79:
                    48:b6:c1:41:bb:da:fd:de:0b:54:6d:9b:bd:2a:a8:
                    d7:ca:b5:a9:c9:9e:f1:28:3f:bc:bb:b0:bb:04:eb:
                    2b:2c:c4:73:92:92:42:d9:ac:26:b6:f1:cf:47:70:
                    a7:50:de:20:6a:d9:85:51:6b:78:6d:a4:60:b8:0e:
                    3e:ac:d6:bb:e9:1f:b3:be:95:7f:22:57:a5:e7:96:
                    93:2a:47:88:d5:0f:aa:ac:fe:03:fd:81:32:1c:3a:
                    bd:28:e4:78:5a:20:f6:00:fa:cd:7f:f1:e2:bc:b6:
                    d4:27:21:4c:4e:9e:b3:77:18:6e:7b:37:98:7a:88:
                    96:ef:ae:17:e2:1e:4d:e8:a0:0b:3b:87:df:51:d3:
                    13:b8:43:70:16:c1:b9:37:19:19:8a:a0:87:f0:25:
                    36:5d:ea:2d:f8:1f:9e:27:22:42:8d:46:9e:65:32:
                    40:05:55:53:10:42:40:0e:8c:b3:51:c3:36:2e:48:
                    b6:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:2C:D4:09:50:ED:12:87:DD:7D:55:14:A5:A0:74:80:F8:F9:D1:EA
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/35302e33312e3138312e302f32342d3234203d3e20313335373532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.31.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:d7:f8:c4:08:a1:c3:c0:c8:c1:22:c2:a4:05:7a:70:3f:77:
         42:75:49:fc:b6:5a:ed:c8:ef:fc:93:f2:5b:c0:f3:f0:a5:e3:
         56:39:cc:15:77:00:d7:a1:63:8e:42:dd:b5:f0:0f:2c:c9:36:
         1f:28:5e:72:6c:57:91:4a:fd:f4:26:5c:93:8c:64:07:e4:6e:
         f5:3c:a2:39:f2:be:3a:2f:7c:8d:14:78:ac:69:3b:a4:d4:a5:
         9b:83:0d:ba:7b:4f:31:a5:ce:84:50:01:97:21:a4:8f:63:04:
         a2:2f:21:65:b6:ea:24:13:6d:03:13:3f:fa:a9:ae:6b:49:ab:
         c3:3a:db:28:03:ef:48:6b:28:5a:2f:36:ef:20:91:40:a5:0c:
         d0:37:cb:cc:4d:b3:89:40:69:11:f9:9b:f0:b9:b4:f7:f1:8a:
         46:ae:b8:7a:59:d8:95:ac:01:f9:da:80:64:de:79:d6:05:1f:
         92:2a:e5:3e:28:a6:88:ea:91:3b:e7:c7:bd:17:f1:35:d1:b8:
         49:61:75:1a:66:31:c8:8c:f3:ef:2c:42:16:60:a5:bb:e6:a1:
         87:1a:5f:b9:58:b1:06:6e:73:6b:5c:ad:37:c0:04:8b:18:35:
         ae:04:12:45:aa:95:21:67:0e:f7:42:80:38:da:95:54:d2:9f:
         f6:d3:e6:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----