Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/36342e3230322e39392e302f32342d3234203d3e20383334.roa
File:                     36342e3230322e39392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          GM3/Prgopjb3t2AelOaBukdHe33PHV/gyDIhUAfGLKc=
Subject key identifier:   85:5C:78:52:18:53:DE:95:32:67:70:5E:40:66:6D:BA:BC:BD:B3:A2
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       303C89615DB6223CF4D65E8ED6E6E604E675BF32
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/36342e3230322e39392e302f32342d3234203d3e20383334.roa
Signing time:             Thu 11 May 2023 00:00:04 +0000
ROA not before:           Wed 10 May 2023 23:55:04 +0000
ROA not after:            Thu 09 May 2024 00:00:04 +0000
asID:                     834
IP address blocks:        64.202.99.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:3c:89:61:5d:b6:22:3c:f4:d6:5e:8e:d6:e6:e6:04:e6:75:bf:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: May 10 23:55:04 2023 GMT
            Not After : May  9 00:00:04 2024 GMT
        Subject: CN=855C78521853DE953267705E40666DBABCBDB3A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:58:ab:63:63:54:61:d5:f9:a3:a7:9c:42:00:
                    c5:87:c1:60:93:92:5b:5c:bb:d8:ea:de:71:02:0e:
                    56:5c:5b:74:19:89:26:23:df:5c:e3:2b:aa:b5:84:
                    fb:9b:67:9f:cb:a0:cf:fc:5e:0a:44:df:13:0b:01:
                    31:b0:e7:51:e4:a3:4b:b4:88:57:1e:01:49:a9:63:
                    d9:ab:99:a9:f5:52:da:da:27:92:b9:46:54:eb:60:
                    cc:2c:a4:26:0b:4b:07:37:41:89:1c:d2:4a:79:9d:
                    54:eb:f4:72:c1:f5:20:ff:2d:90:95:20:50:6a:24:
                    c8:6c:0f:e5:8e:e1:31:0a:77:22:98:1b:f7:fc:1f:
                    11:db:30:38:97:28:55:78:b3:6a:e4:3f:ee:ea:a4:
                    19:c0:10:c9:a3:19:3b:c5:e3:bc:d7:d3:8d:62:11:
                    fd:fb:63:43:c5:00:56:e7:3f:cf:c6:cd:00:26:be:
                    63:30:08:2c:a4:c0:e1:d9:4d:38:86:72:13:50:b7:
                    4d:32:47:e3:01:91:67:b7:4b:be:c0:c4:3a:ba:91:
                    6d:e4:b4:e6:3e:ea:d8:91:77:67:86:cf:d7:8d:0d:
                    c1:11:58:8e:fa:2b:43:aa:d5:46:ed:a6:2a:6d:88:
                    5c:ce:0a:97:f5:df:b6:19:81:d9:3b:56:cf:65:35:
                    3b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:5C:78:52:18:53:DE:95:32:67:70:5E:40:66:6D:BA:BC:BD:B3:A2
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/36342e3230322e39392e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.202.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:db:af:39:72:7d:f0:d9:30:52:0b:c0:99:54:7f:28:a8:4f:
         54:23:8a:23:b8:07:14:9c:c8:44:98:98:b6:ca:04:22:aa:eb:
         b1:99:89:25:fe:08:d1:51:8e:15:67:19:40:9d:e1:b2:95:17:
         84:39:97:bb:d1:67:86:7d:04:17:98:2d:46:ef:03:66:6f:1b:
         d8:3a:6d:92:03:81:47:be:74:93:32:f4:ec:63:e0:99:fe:81:
         70:f0:c9:cd:96:93:54:7a:34:d8:fb:2c:ba:56:50:19:0c:af:
         d2:31:9c:b8:93:77:4b:9c:f5:54:c0:8a:a5:1a:ac:0a:a3:e9:
         bf:01:66:17:fd:c3:1f:d2:7e:61:fe:97:59:d4:73:42:7a:67:
         bb:d2:66:78:f0:b8:a1:5e:71:af:f1:1a:76:a5:12:22:5f:55:
         d7:3e:25:b0:3c:78:80:48:5e:eb:1c:ef:e7:2a:d9:0b:fc:ba:
         56:a5:28:64:68:8d:a2:76:4c:c9:5c:86:3a:7b:8b:ae:1b:cf:
         2a:f7:76:19:87:d7:c4:2c:f9:21:25:c4:81:b5:3d:4b:c1:53:
         79:7a:47:e5:7e:0a:6b:4f:d7:20:cd:f3:7c:13:af:89:1d:72:
         f1:cd:9f:22:89:b5:4e:33:0a:05:aa:68:90:5d:ec:93:b3:6b:
         ec:19:03:3e
-----BEGIN CERTIFICATE-----
MIIFqzCCBJOgAwIBAgIUMDyJYV22Ijz01l6O1ubmBOZ1vzIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjk2MjZjMmUwYjk2NGVkNWU4YmE2YTZmM2VkMGZkNjM2
Y2YzNjQ1ZDZjY2I2MTIzYjkwHhcNMjMwNTEwMjM1NTA0WhcNMjQwNTA5MDAwMDA0
WjAzMTEwLwYDVQQDEyg4NTVDNzg1MjE4NTNERTk1MzI2NzcwNUU0MDY2NkRCQUJD
QkRCM0EyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lirY2NUYdX5
o6ecQgDFh8Fgk5JbXLvY6t5xAg5WXFt0GYkmI99c4yuqtYT7m2efy6DP/F4KRN8T
CwExsOdR5KNLtIhXHgFJqWPZq5mp9VLa2ieSuUZU62DMLKQmC0sHN0GJHNJKeZ1U
6/RywfUg/y2QlSBQaiTIbA/ljuExCncimBv3/B8R2zA4lyhVeLNq5D/u6qQZwBDJ
oxk7xeO819ONYhH9+2NDxQBW5z/Pxs0AJr5jMAgspMDh2U04hnITULdNMkfjAZFn
t0u+wMQ6upFt5LTmPurYkXdnhs/XjQ3BEViO+itDqtVG7aYqbYhczgqX9d+2GYHZ
O1bPZTU7GwIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFIVceFIYU96VMmdwXkBmbbq8
vbOiMB8GA1UdIwQYMBaAFE8GHzq5hjgo92M+vEYwD5t+h3q8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODY5M2YwNjAwMTg2YzZlN2ZkOGQzNjYwLzAv
NEYwNjFGM0FCOTg2MzgyOEY3NjMzRUJDNDYzMDBGOUI3RTg3N0FCQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2FkOWIzMDEwLTMxMTYtNDY0ZS04YzU4LTk1ODY1MDBmMTcwMS82OTYy
NmMyZTBiOTY0ZWQ1ZThiYTZhNmYzZWQwZmQ2MzZjZjM2NDVkNmNjYjYxMjNiOS5j
ZXIwgZsGCCsGAQUFBwELBIGOMIGLMIGIBggrBgEFBQcwC4Z8cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRlODY5M2YwNjAwMTg2YzZl
N2ZkOGQzNjYwLzAvMzYzNDJlMzIzMDMyMmUzOTM5MmUzMDJmMzIzNDJkMzIzNDIw
M2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMpjMA0GCSqGSIb3DQEBCwUAA4IBAQAM
2685cn3w2TBSC8CZVH8oqE9UI4ojuAcUnMhEmJi2ygQiquuxmYkl/gjRUY4VZxlA
neGylReEOZe70WeGfQQXmC1G7wNmbxvYOm2SA4FHvnSTMvTsY+CZ/oFw8MnNlpNU
ejTY+yy6VlAZDK/SMZy4k3dLnPVUwIqlGqwKo+m/AWYX/cMf0n5h/pdZ1HNCeme7
0mZ48LihXnGv8Rp2pRIiX1XXPiWwPHiASF7rHO/nKtkL/LpWpShkaI2idkzJXIY6
e4uuG88q93YZh9fELPkhJcSBtT1LwVN5ekflfgprT9cgzfN8E6+JHXLxzZ8iibVO
MwoFqmiQXeyTs2vsGQM+
-----END CERTIFICATE-----