Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/35302e33312e3138372e302f32342d3234203d3e20313338363837.roa
File:                     35302e33312e3138372e302f32342d3234203d3e20313338363837.roa (raw, json)
Hash identifier:          Ia3pRMQjKAKrW8O696twOh8kgxhl1mgnXjNTqwWz7qA=
Subject key identifier:   F7:3B:1C:52:18:F8:C6:B1:BE:2E:00:B5:F0:41:0F:51:77:05:0B:E7
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       05F454A6411844C4E15FEE269BD919DDF0CCB0D6
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/35302e33312e3138372e302f32342d3234203d3e20313338363837.roa
Signing time:             Wed 12 Apr 2023 07:59:24 +0000
ROA not before:           Wed 12 Apr 2023 07:54:24 +0000
ROA not after:            Wed 10 Apr 2024 07:59:24 +0000
asID:                     138687
IP address blocks:        50.31.187.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:f4:54:a6:41:18:44:c4:e1:5f:ee:26:9b:d9:19:dd:f0:cc:b0:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Apr 12 07:54:24 2023 GMT
            Not After : Apr 10 07:59:24 2024 GMT
        Subject: CN=F73B1C5218F8C6B1BE2E00B5F0410F5177050BE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:37:3d:c1:55:18:4a:b1:74:5d:87:bc:e3:dd:
                    69:42:7a:52:4c:78:a6:60:0d:89:19:51:95:0b:20:
                    37:81:4b:5c:b0:1b:a5:de:b1:dd:f1:01:46:8b:18:
                    95:71:59:21:d7:7b:f5:cc:19:3a:eb:52:ac:50:70:
                    4a:54:cd:1a:83:28:f6:c9:99:a7:84:01:79:80:fa:
                    6d:cc:f1:de:cb:ee:25:73:ad:96:b1:87:a7:9a:96:
                    50:b6:6e:5d:9b:dd:8f:ec:0e:35:21:a0:47:78:66:
                    9c:ef:88:f4:e8:df:ed:b1:c7:c1:1e:2c:1d:05:51:
                    52:52:cb:07:91:0a:11:46:26:9a:23:55:71:f8:21:
                    d0:f0:30:61:b8:d9:06:5f:47:27:31:8c:b4:88:39:
                    82:76:78:7c:40:56:38:9c:07:92:0f:d7:c8:a7:57:
                    eb:3c:52:4c:d9:6b:5c:eb:a3:ee:9f:26:8d:fe:04:
                    9b:c6:c3:43:7f:86:fb:35:28:0b:81:9b:d2:e5:51:
                    76:3a:b6:6a:6f:b8:32:71:a5:d2:ba:a6:a3:d8:40:
                    df:ac:58:95:bd:80:4d:df:16:c7:a3:7e:77:ab:14:
                    72:28:aa:aa:f0:9d:56:34:f8:c8:cf:17:24:1b:4e:
                    a9:17:6e:ca:87:66:96:fc:81:5a:30:e2:9d:94:40:
                    b6:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:3B:1C:52:18:F8:C6:B1:BE:2E:00:B5:F0:41:0F:51:77:05:0B:E7
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/35302e33312e3138372e302f32342d3234203d3e20313338363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.31.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:77:b9:e4:b4:f1:19:c0:94:21:a5:fa:59:0a:2e:63:db:fa:
         13:d1:fc:4f:5c:20:f9:d5:cd:d8:69:53:82:10:bb:39:cf:5b:
         5c:a1:b3:59:e8:69:af:3c:ed:ba:df:00:a3:2a:fd:2d:e5:0c:
         8e:fd:e4:64:6c:2d:3f:d4:2f:9a:04:67:c5:b4:68:2e:a0:88:
         20:dc:f7:a1:9f:4a:2a:07:c6:a7:b7:8b:4f:47:ef:4e:d0:b7:
         f3:ea:19:7a:83:7e:9c:40:c9:61:17:c8:4e:0a:30:70:a0:6d:
         5b:a8:fc:39:c5:88:3d:d0:46:f6:18:57:11:2c:8b:15:0a:bb:
         44:d5:51:1e:ae:d0:27:4f:58:24:40:64:97:91:58:fa:ca:30:
         1e:eb:93:93:fc:0a:4b:95:86:6b:86:b8:ae:5d:7b:e6:b3:b0:
         8a:07:0d:f4:8c:8e:c1:f2:4c:e2:34:2e:14:67:30:fc:0b:06:
         08:9c:58:9c:d4:85:ee:08:ea:ad:5e:39:eb:97:d9:da:b3:e0:
         77:38:5a:b7:10:94:67:73:56:0c:f1:6d:c7:d2:d6:b5:e8:53:
         21:07:7c:b6:26:4e:42:d2:c3:14:91:7c:f9:ba:03:e3:08:54:
         78:eb:af:22:13:a1:66:fd:fe:05:c0:0f:34:4b:8d:e2:4a:cb:
         da:66:75:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----