Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/36342e3230322e39392e302f32342d3234203d3e203330303831.roa
File:                     36342e3230322e39392e302f32342d3234203d3e203330303831.roa (raw, json)
Hash identifier:          GXaqwS/KCq7NqCzQ6hMECazky1TzRXNE50sFJDRP1n0=
Subject key identifier:   EA:A8:B8:B9:FE:A2:98:BD:0D:57:E2:61:C0:D2:12:08:02:FB:CD:FA
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       77357C3668CA2B068B96D8059E35BB5BF4571056
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/36342e3230322e39392e302f32342d3234203d3e203330303831.roa
Signing time:             Tue 11 Apr 2023 13:29:27 +0000
ROA not before:           Tue 11 Apr 2023 13:24:27 +0000
ROA not after:            Tue 09 Apr 2024 13:29:27 +0000
asID:                     30081
IP address blocks:        64.202.99.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:35:7c:36:68:ca:2b:06:8b:96:d8:05:9e:35:bb:5b:f4:57:10:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Apr 11 13:24:27 2023 GMT
            Not After : Apr  9 13:29:27 2024 GMT
        Subject: CN=EAA8B8B9FEA298BD0D57E261C0D2120802FBCDFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:2e:f3:ff:16:78:5d:3f:69:0d:01:f1:dc:b5:
                    bd:c8:6c:b7:5c:0e:19:5f:71:fa:d0:06:8b:24:c1:
                    06:22:71:7a:a3:26:c4:04:fe:73:cc:cc:78:0c:84:
                    37:20:3e:a3:de:eb:e2:cb:29:fb:e1:6c:b1:f5:a5:
                    0c:65:63:c1:93:4a:e9:12:a3:39:63:da:13:48:5a:
                    04:86:86:08:2f:27:87:7e:0f:f5:4d:5f:f2:20:d9:
                    68:69:b3:83:de:a7:8c:82:de:a0:ab:1c:b2:25:bb:
                    05:b0:b8:c4:af:ba:f8:e3:c6:25:f9:cd:0c:f0:6c:
                    c5:ba:9d:d1:10:ec:47:38:a2:f1:7a:1e:89:29:4b:
                    c5:23:29:5f:cf:23:bb:1c:93:1f:28:78:98:31:31:
                    16:ab:62:9d:4e:7f:06:d2:90:44:a5:31:2f:02:f3:
                    fa:54:4a:b8:8d:86:81:ad:5b:f4:86:f3:d8:cd:69:
                    ae:74:b4:cd:d6:7b:13:ae:43:d4:79:14:09:5c:a8:
                    47:0c:91:47:af:bf:ef:c7:ab:b7:e9:77:93:09:df:
                    47:92:79:35:35:da:4a:73:bf:64:c5:8f:0c:be:47:
                    57:46:6b:c9:2c:13:8b:94:48:5c:09:05:f9:23:05:
                    8b:42:d9:91:12:08:81:1c:9b:6e:5f:5f:ac:3a:75:
                    f5:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:A8:B8:B9:FE:A2:98:BD:0D:57:E2:61:C0:D2:12:08:02:FB:CD:FA
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/36342e3230322e39392e302f32342d3234203d3e203330303831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.202.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:b7:6e:fb:e3:b0:18:d6:d4:c2:d0:ce:2e:f7:1d:42:95:28:
         86:26:2d:21:98:0f:dd:65:d7:d1:a3:db:c1:fb:7b:15:73:6a:
         f5:5f:0f:3e:da:00:4f:71:9a:82:6b:34:39:68:8a:16:0b:16:
         a7:a4:5d:24:cb:29:bc:80:f6:3e:0e:c7:b5:a4:86:9a:05:6f:
         f5:27:23:54:20:85:7d:c0:62:a2:8e:f5:98:7c:d0:e9:37:7b:
         30:8f:3c:e4:73:63:7b:6c:ff:3c:3b:2d:37:96:fe:12:58:34:
         1e:12:25:36:44:ba:9c:48:5c:5d:9b:ad:5c:5e:53:fe:f7:8a:
         4c:23:27:a6:f5:4e:73:6f:e1:14:47:5a:5a:bb:26:99:a3:1e:
         6a:23:d8:18:d4:f7:1f:86:1a:fd:5e:31:3d:c7:04:3a:57:37:
         d9:8d:f0:01:af:df:f5:52:c9:70:ef:b8:ce:95:66:68:61:1a:
         f0:49:48:5f:05:87:9d:36:77:0d:01:a7:69:5e:1d:f5:83:fe:
         a4:27:8f:2b:ef:ba:f2:c9:c9:dc:d0:bc:77:ce:83:0b:94:fb:
         58:04:b3:20:ef:b8:19:77:49:00:d2:48:a4:dc:6f:82:77:5c:
         18:b7:f1:24:5b:d1:d4:d2:d9:49:2b:09:96:7a:54:cf:70:92:
         51:c8:26:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----