Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/36342e3230322e3130332e302f32342d3234203d3e203631333137.roa
File:                     36342e3230322e3130332e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          /Lmb2IC7acMzSTl173bs3XMC3PigGtXQVj6fdEm1+g0=
Subject key identifier:   F8:5B:6A:F0:97:F4:39:C0:67:A6:74:BD:97:00:BA:F4:EC:4D:33:14
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       5BC69A415C94BF571648A84597E69958ECDA6978
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/36342e3230322e3130332e302f32342d3234203d3e203631333137.roa
Signing time:             Tue 18 Apr 2023 06:41:15 +0000
ROA not before:           Tue 18 Apr 2023 06:36:15 +0000
ROA not after:            Tue 16 Apr 2024 06:41:15 +0000
asID:                     61317
IP address blocks:        64.202.103.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:c6:9a:41:5c:94:bf:57:16:48:a8:45:97:e6:99:58:ec:da:69:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Apr 18 06:36:15 2023 GMT
            Not After : Apr 16 06:41:15 2024 GMT
        Subject: CN=F85B6AF097F439C067A674BD9700BAF4EC4D3314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4b:36:e9:e5:fc:a2:8b:50:48:87:2e:b5:fd:
                    df:ef:a6:7e:98:ca:67:7f:d8:2f:cf:22:e7:70:37:
                    93:8d:16:a5:45:a5:1a:d5:6a:45:c9:5f:c7:b0:8f:
                    d4:29:4b:00:5e:14:1c:58:c2:d6:6b:18:81:61:09:
                    2e:2b:01:41:58:a2:9c:9f:6a:08:3f:c4:c7:e0:a8:
                    32:b2:8d:98:6e:c6:18:6b:6f:10:3d:be:28:0b:f1:
                    94:e3:20:30:f7:8b:4d:d3:e2:fc:de:c4:f2:55:60:
                    74:0b:5a:40:d8:70:26:a9:65:eb:4c:29:e6:64:12:
                    b8:91:2a:dc:5c:5f:cd:03:24:ce:3e:92:4f:64:bd:
                    d3:44:d2:3b:6d:e2:69:36:99:4e:95:73:13:9e:5d:
                    2e:39:54:39:b2:03:22:77:38:5f:57:8e:a4:57:04:
                    95:d0:ee:c2:a2:4d:3a:1f:b3:7f:87:5b:46:bd:0e:
                    26:59:0e:eb:87:84:fe:1f:05:bf:c3:2e:4c:a0:ed:
                    67:69:5e:b7:5b:a9:63:a5:b7:3b:0c:b6:ff:1a:19:
                    94:7d:85:76:50:cc:e2:36:35:4b:0e:f6:88:13:a7:
                    8e:0e:12:5c:07:48:d8:c7:d5:1b:41:94:52:ea:44:
                    e8:65:c6:45:25:c6:db:ab:68:3f:ab:d9:dd:84:73:
                    a0:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:5B:6A:F0:97:F4:39:C0:67:A6:74:BD:97:00:BA:F4:EC:4D:33:14
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/36342e3230322e3130332e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.202.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:da:c7:fb:ce:b1:a1:f4:8a:f5:75:70:c4:88:53:5f:a8:64:
         8b:86:6b:2f:83:b5:e3:da:f3:ef:40:1f:07:6b:64:b3:d5:14:
         b3:4c:a7:da:2f:f6:00:f9:f9:2c:d1:93:cd:93:40:09:fd:5b:
         33:3a:34:c8:c9:8b:07:fe:e0:d8:24:ad:db:50:7e:09:ef:da:
         95:a6:99:2a:5c:ca:24:ec:dc:6d:62:0f:f6:ca:7d:a5:1c:2a:
         df:a7:93:92:08:e4:92:d5:49:8b:69:9d:50:84:e4:fe:4d:da:
         2b:fd:c8:c2:d7:64:ec:b3:7d:a4:8e:d2:20:65:ee:01:51:67:
         02:93:57:9e:32:75:83:86:69:c3:ec:23:67:0b:c5:78:e4:b4:
         5c:3b:96:a3:1c:93:cf:44:b3:65:0c:15:2a:e1:08:96:5f:60:
         83:8e:f7:ca:7e:b4:c3:56:b7:aa:6a:28:5e:3d:97:5f:18:7a:
         ab:96:88:18:a2:14:bf:dc:92:7b:e9:56:2a:49:de:73:2b:30:
         1a:1e:79:c7:5b:60:bd:72:65:71:12:69:7f:78:f8:2c:46:b1:
         25:a1:b7:6b:5b:4a:96:82:ee:b5:f8:9f:c9:4f:17:dd:ae:11:
         2a:24:18:4b:fe:0e:de:4d:e9:ae:c6:a3:9d:b1:2e:1b:ee:e6:
         76:0a:a4:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----