Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/36342e3230322e3130302e302f32342d3234203d3e20323034383433.roa
File:                     36342e3230322e3130302e302f32342d3234203d3e20323034383433.roa (raw, json)
Hash identifier:          T7Ki01NDRTSdND1Vb3uPGLjPjfIZurkeuJyD6zyfU48=
Subject key identifier:   8F:1D:DA:6B:B5:F4:36:A6:81:2D:2C:3F:B2:A1:A8:A3:23:E1:EC:55
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       377E7D7CC30E363DCDB44B45EE66723D1DBEABBD
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/36342e3230322e3130302e302f32342d3234203d3e20323034383433.roa
Signing time:             Fri 26 May 2023 16:56:43 +0000
ROA not before:           Fri 26 May 2023 16:51:43 +0000
ROA not after:            Fri 24 May 2024 16:56:43 +0000
asID:                     204843
IP address blocks:        64.202.100.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:7e:7d:7c:c3:0e:36:3d:cd:b4:4b:45:ee:66:72:3d:1d:be:ab:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: May 26 16:51:43 2023 GMT
            Not After : May 24 16:56:43 2024 GMT
        Subject: CN=8F1DDA6BB5F436A6812D2C3FB2A1A8A323E1EC55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b9:ad:8b:d4:d9:d1:43:2e:ee:a4:28:e9:b6:
                    57:d9:ff:f6:e2:35:ec:29:55:76:51:ad:6c:f3:dc:
                    26:86:48:a1:ea:62:a6:74:6c:f4:d5:7e:8c:ff:75:
                    c5:7a:30:52:9d:85:41:86:d1:3d:1a:19:f9:15:4e:
                    9a:fd:a1:cb:d1:3e:56:d0:03:87:a5:ff:f6:ab:fb:
                    96:13:e7:0b:35:08:5d:f8:2b:d2:8b:ae:72:a2:3d:
                    33:80:78:cc:30:fb:f9:da:26:97:0e:8b:44:97:ef:
                    23:bf:42:15:fb:da:54:c8:6b:33:35:9b:55:94:b5:
                    79:7d:5d:0e:d7:5b:16:a8:f7:af:73:b9:85:e5:9f:
                    f6:16:61:af:8d:50:c0:19:f3:7e:e0:99:47:2f:9e:
                    3d:56:20:0e:15:f9:9e:d5:5a:41:5a:bf:d4:82:28:
                    0b:51:99:fa:eb:1c:ec:47:94:a6:a8:bb:8c:07:bf:
                    81:a3:57:08:18:94:4c:e8:5e:a4:fc:7d:80:69:33:
                    cd:74:32:18:e9:77:8c:75:4d:fa:4e:b3:b8:a0:1b:
                    bd:e1:77:51:21:c4:88:f5:df:81:0c:07:a3:1e:58:
                    b1:52:38:6e:bf:75:66:77:59:6d:af:94:0c:23:9d:
                    fe:df:e3:2e:3a:08:54:cc:97:15:0f:58:70:eb:cf:
                    58:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:1D:DA:6B:B5:F4:36:A6:81:2D:2C:3F:B2:A1:A8:A3:23:E1:EC:55
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/36342e3230322e3130302e302f32342d3234203d3e20323034383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.202.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:ac:42:66:59:a7:87:71:d1:09:04:91:71:dc:83:39:6b:c9:
         2b:42:7e:5e:47:e2:80:83:0e:96:04:99:69:d5:94:fe:ef:80:
         06:eb:e1:83:c3:31:53:b3:2d:27:42:e2:04:ff:c5:8c:1b:33:
         9b:d3:2c:10:f3:87:44:c6:bb:f6:c6:ad:d4:ef:0b:08:15:79:
         48:dd:b9:1d:ee:b4:35:a9:9c:ae:c6:80:49:35:4f:18:e8:75:
         af:ca:7e:f4:c9:25:0c:ec:b4:a4:51:22:ee:8c:8f:42:fb:77:
         5f:68:5c:5f:0f:37:07:e7:71:1c:72:e9:0e:ce:70:9e:fa:bb:
         cc:f9:50:7f:b9:87:dd:cc:06:de:c3:b6:ea:29:d1:1e:90:51:
         98:8d:96:dc:0f:c2:d4:2f:8f:bd:34:34:87:ca:48:b4:f9:61:
         77:b7:32:98:90:05:84:38:ab:00:f8:a0:e6:14:e5:3f:6b:2c:
         37:7e:e2:8a:7d:73:98:ef:a8:2a:9e:0b:29:24:ba:a0:12:85:
         4c:c3:fc:a8:f5:e5:fa:c5:52:2a:d3:0f:54:47:bd:88:76:f2:
         77:95:1c:a6:3c:33:a7:9d:ce:0e:5a:33:11:45:87:60:70:90:
         ab:f9:c6:87:ad:e8:3e:88:2c:d6:12:88:03:9c:ea:49:e4:0b:
         11:b2:6b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----