Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/36342e3230322e3130302e302f32342d3234203d3e20383334.roa
File:                     36342e3230322e3130302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          jrpZprWd2vPFYWtQV4blu6W/JHi43CdCL0I6DYmKBBs=
Subject key identifier:   9D:EC:56:BA:0C:38:64:18:CB:99:98:A2:8A:7A:33:6B:D1:15:64:C7
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       331BDB6CBFF08DBD6F8C5419698310BD0D0C4053
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/36342e3230322e3130302e302f32342d3234203d3e20383334.roa
Signing time:             Fri 12 May 2023 11:00:04 +0000
ROA not before:           Fri 12 May 2023 10:55:04 +0000
ROA not after:            Fri 10 May 2024 11:00:04 +0000
asID:                     834
IP address blocks:        64.202.100.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:1b:db:6c:bf:f0:8d:bd:6f:8c:54:19:69:83:10:bd:0d:0c:40:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: May 12 10:55:04 2023 GMT
            Not After : May 10 11:00:04 2024 GMT
        Subject: CN=9DEC56BA0C386418CB9998A28A7A336BD11564C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ed:96:47:9e:33:6b:bc:16:1d:e6:23:3e:f7:
                    7e:67:23:33:7a:ed:f1:6b:7a:fa:31:c2:2a:16:03:
                    a4:63:dc:01:04:ef:01:56:0e:c5:9a:d2:38:ee:8e:
                    44:34:24:5c:79:43:34:b3:50:2c:95:a4:39:25:94:
                    90:9e:c8:39:aa:eb:e8:c7:67:a9:df:c6:b8:ef:66:
                    bf:02:af:f6:4c:18:14:90:dc:59:d8:3e:d5:3f:3e:
                    9d:3f:2e:38:98:84:b3:c8:2e:6e:54:17:2d:36:61:
                    5e:05:7a:b2:3a:2b:12:9a:a0:41:da:42:e5:e6:68:
                    45:80:ea:07:13:f3:07:f2:6c:55:0d:91:dd:a5:1e:
                    dc:ee:1b:65:94:ed:c1:a2:7c:3e:32:c1:5d:3a:41:
                    a1:bd:90:72:ac:59:d4:04:8b:65:3e:67:94:73:16:
                    1e:54:2c:f9:6a:8f:ea:8a:36:6a:db:a3:9b:d0:6a:
                    78:c5:91:5c:c5:fe:b6:50:c8:91:c7:0c:42:7d:aa:
                    ae:8b:04:22:10:93:e0:d9:08:c2:a4:77:47:83:f5:
                    ae:36:a2:8c:77:ed:53:fb:93:69:ae:96:d4:2e:da:
                    77:58:72:59:da:e1:96:c9:d9:8c:c0:3f:53:99:8e:
                    49:00:d8:34:bd:be:28:46:a9:d9:64:ca:4b:cd:7c:
                    bb:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:EC:56:BA:0C:38:64:18:CB:99:98:A2:8A:7A:33:6B:D1:15:64:C7
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/36342e3230322e3130302e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.202.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:ba:c8:66:8a:4e:20:5f:bc:ea:60:01:a2:0f:d4:18:62:36:
         99:0b:7d:29:cb:ee:2c:2d:93:69:7a:54:ab:b5:fc:02:a6:fb:
         bd:cb:0e:b3:64:1e:3b:f2:f3:85:9c:be:dd:bd:e3:76:92:88:
         da:98:ef:f2:7f:ca:e9:2b:6b:6b:4e:9f:f2:a2:40:88:c5:06:
         86:90:51:4a:8f:00:99:7e:30:b1:2d:d8:6e:84:91:a8:7e:e6:
         03:67:8f:e5:3a:a4:e7:53:9c:c0:c3:34:9f:b9:18:b0:d3:fe:
         81:e3:22:73:e9:2f:a3:65:80:84:a4:1e:b5:8c:90:ff:c2:eb:
         d4:64:88:ac:05:89:30:28:1b:15:85:1b:fe:de:a4:b3:e7:f7:
         f5:69:40:8a:51:df:1c:74:b8:0c:ce:47:40:34:2a:9d:ce:bf:
         ad:a7:1f:eb:cd:75:a8:69:9b:7a:b5:b9:71:8b:8f:99:f6:44:
         f1:ae:34:51:be:32:06:12:9d:9a:71:d7:98:9f:53:42:e8:e8:
         24:48:96:ce:d7:8a:51:01:fd:a6:4a:97:62:b7:6a:7c:a8:4c:
         35:7e:a5:06:d9:1d:ee:21:40:a6:e6:50:38:e6:de:fc:13:2c:
         d3:9d:e2:4e:26:78:af:d0:61:c7:b3:ed:eb:4a:64:a3:da:11:
         f4:6b:d9:2f
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIUMxvbbL/wjb1vjFQZaYMQvQ0MQFMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjk2MjZjMmUwYjk2NGVkNWU4YmE2YTZmM2VkMGZkNjM2
Y2YzNjQ1ZDZjY2I2MTIzYjkwHhcNMjMwNTEyMTA1NTA0WhcNMjQwNTEwMTEwMDA0
WjAzMTEwLwYDVQQDEyg5REVDNTZCQTBDMzg2NDE4Q0I5OTk4QTI4QTdBMzM2QkQx
MTU2NEM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyO2WR54za7wW
HeYjPvd+ZyMzeu3xa3r6McIqFgOkY9wBBO8BVg7FmtI47o5ENCRceUM0s1AslaQ5
JZSQnsg5quvox2ep38a472a/Aq/2TBgUkNxZ2D7VPz6dPy44mISzyC5uVBctNmFe
BXqyOisSmqBB2kLl5mhFgOoHE/MH8mxVDZHdpR7c7htllO3Bonw+MsFdOkGhvZBy
rFnUBItlPmeUcxYeVCz5ao/qijZq26Ob0Gp4xZFcxf62UMiRxwxCfaquiwQiEJPg
2QjCpHdHg/WuNqKMd+1T+5NprpbULtp3WHJZ2uGWydmMwD9TmY5JANg0vb4oRqnZ
ZMpLzXy7CQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFJ3sVroMOGQYy5mYoop6M2vR
FWTHMB8GA1UdIwQYMBaAFE8GHzq5hjgo92M+vEYwD5t+h3q8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODY5M2YwNjAwMTg2YzZlN2ZkOGQzNjYwLzAv
NEYwNjFGM0FCOTg2MzgyOEY3NjMzRUJDNDYzMDBGOUI3RTg3N0FCQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2FkOWIzMDEwLTMxMTYtNDY0ZS04YzU4LTk1ODY1MDBmMTcwMS82OTYy
NmMyZTBiOTY0ZWQ1ZThiYTZhNmYzZWQwZmQ2MzZjZjM2NDVkNmNjYjYxMjNiOS5j
ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRlODY5M2YwNjAwMTg2YzZl
N2ZkOGQzNjYwLzAvMzYzNDJlMzIzMDMyMmUzMTMwMzAyZTMwMmYzMjM0MmQzMjM0
MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABAymQwDQYJKoZIhvcNAQELBQADggEB
AAO6yGaKTiBfvOpgAaIP1BhiNpkLfSnL7iwtk2l6VKu1/AKm+73LDrNkHjvy84Wc
vt2943aSiNqY7/J/yukra2tOn/KiQIjFBoaQUUqPAJl+MLEt2G6Ekah+5gNnj+U6
pOdTnMDDNJ+5GLDT/oHjInPpL6NlgISkHrWMkP/C69RkiKwFiTAoGxWFG/7epLPn
9/VpQIpR3xx0uAzOR0A0Kp3Ov62nH+vNdahpm3q1uXGLj5n2RPGuNFG+MgYSnZpx
15ifU0Lo6CRIls7XilEB/aZKl2K3anyoTDV+pQbZHe4hQKbmUDjm3vwTLNOd4k4m
eK/QYcez7etKZKPaEfRr2S8=
-----END CERTIFICATE-----