Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/36342e3230322e3130352e302f32342d3234203d3e203330303831.roa
File:                     36342e3230322e3130352e302f32342d3234203d3e203330303831.roa (raw, json)
Hash identifier:          fFUaMbw7uWxZn5+rhOLiVHhxLy74jxr+NggiAw+Y5ws=
Subject key identifier:   40:71:2A:50:C0:92:59:52:45:0F:CE:03:68:FD:24:1B:EE:CF:67:1B
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       115847B35876E8877296AB83201F86A15E9641BC
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/36342e3230322e3130352e302f32342d3234203d3e203330303831.roa
Signing time:             Sat 22 Apr 2023 11:09:00 +0000
ROA not before:           Sat 22 Apr 2023 11:04:00 +0000
ROA not after:            Sat 20 Apr 2024 11:09:00 +0000
asID:                     30081
IP address blocks:        64.202.105.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:58:47:b3:58:76:e8:87:72:96:ab:83:20:1f:86:a1:5e:96:41:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Apr 22 11:04:00 2023 GMT
            Not After : Apr 20 11:09:00 2024 GMT
        Subject: CN=40712A50C0925952450FCE0368FD241BEECF671B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:04:5d:be:dd:3a:8a:5a:b2:dd:7f:95:a8:c7:
                    93:d2:8b:8a:72:fb:98:14:a9:51:c0:97:76:05:46:
                    db:d7:b4:1d:94:ab:19:29:eb:70:d9:ee:cb:8a:32:
                    67:d0:a8:c9:1c:35:99:5b:ce:a8:ee:79:4d:25:93:
                    24:fe:dd:1d:e1:df:36:35:bc:e8:9f:3b:4f:dd:de:
                    06:5b:45:19:bc:a1:ec:fc:84:46:9c:3d:b2:fd:97:
                    c1:3f:dd:4d:09:0a:d4:95:c7:ca:02:f2:be:46:0b:
                    f5:6e:1a:32:25:d0:b7:1a:1f:01:3c:b4:4e:41:62:
                    7e:62:a7:6f:bd:03:8c:01:b4:07:e2:86:cf:00:a9:
                    0f:af:83:7b:b7:fe:ef:6f:90:9e:77:82:d8:6e:42:
                    4a:74:a2:67:8c:4a:a7:8a:d2:c0:28:40:c8:62:0b:
                    e1:12:6b:cc:ed:74:48:4f:96:03:95:76:73:86:88:
                    5d:12:98:70:24:67:27:49:5a:7a:f2:dd:09:15:0d:
                    f3:ed:19:d2:37:fb:f7:e7:ed:7e:6d:8c:56:fe:af:
                    8d:b9:e6:cd:16:2f:4a:1d:89:92:19:d0:1c:62:32:
                    a8:f1:dc:be:f6:9c:aa:99:6d:bc:c3:f7:66:be:01:
                    11:3b:56:12:4a:25:32:98:7b:76:e5:94:a2:2f:6b:
                    73:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:71:2A:50:C0:92:59:52:45:0F:CE:03:68:FD:24:1B:EE:CF:67:1B
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/36342e3230322e3130352e302f32342d3234203d3e203330303831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.202.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:db:c1:8c:b2:81:e0:f1:08:e7:4a:71:7b:e8:22:95:87:34:
         21:81:64:34:7e:1d:22:ac:ad:57:7a:2d:ef:a3:eb:20:f4:75:
         9e:7c:2c:bf:3e:e3:4e:6b:53:a9:eb:f7:e4:1d:66:ec:7c:dd:
         bd:b4:a8:b9:87:da:61:22:1f:2e:a6:bc:48:bf:9a:8f:0a:99:
         da:1a:84:ff:57:87:7b:49:b7:76:3a:fa:9b:e0:e8:1d:1d:a8:
         5f:23:1d:9a:72:84:11:01:d1:ea:89:29:4f:fc:c0:3b:9e:2c:
         9c:a8:71:a1:9e:c9:6c:5c:46:e7:38:0b:33:3e:49:4c:1a:38:
         1f:69:40:0d:c8:0a:e8:e5:6a:26:d5:7c:d7:a9:7d:3f:77:a4:
         ba:06:92:66:fb:7c:f4:8b:86:3a:17:51:ac:58:71:c6:61:34:
         17:58:53:d7:42:fa:fc:d9:52:ed:ef:a0:72:a8:9f:62:f3:a7:
         3c:e1:02:c0:49:7d:78:a1:d1:63:cd:af:06:94:75:a1:70:09:
         3f:14:d5:d3:3b:8b:b0:a1:22:b7:27:51:81:bf:55:cb:9b:1a:
         ae:d3:91:dc:4d:4b:58:21:6b:71:c3:17:a6:45:ee:60:83:74:
         ba:4f:58:f3:b6:77:7c:2e:2f:a8:10:ef:e4:e1:41:f2:92:4f:
         ef:4c:ce:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----