Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/36362e3232352e3139362e302f32342d3234203d3e20323034383433.roa
File:                     36362e3232352e3139362e302f32342d3234203d3e20323034383433.roa (raw, json)
Hash identifier:          rnWaPcyB9GcYPVvHhLutPTUbbMTGiKlaKHmIQZm2jw0=
Subject key identifier:   43:F1:2C:C0:60:54:42:F3:96:C8:FD:5D:EF:85:75:4C:54:B8:0A:F9
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       1AC2FE1183E868257AB458CE0A786551961B445F
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/36362e3232352e3139362e302f32342d3234203d3e20323034383433.roa
Signing time:             Fri 26 May 2023 16:56:55 +0000
ROA not before:           Fri 26 May 2023 16:51:55 +0000
ROA not after:            Fri 24 May 2024 16:56:55 +0000
asID:                     204843
IP address blocks:        66.225.196.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:c2:fe:11:83:e8:68:25:7a:b4:58:ce:0a:78:65:51:96:1b:44:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: May 26 16:51:55 2023 GMT
            Not After : May 24 16:56:55 2024 GMT
        Subject: CN=43F12CC0605442F396C8FD5DEF85754C54B80AF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d2:f2:6c:cf:8c:ae:85:ac:22:d5:d5:13:18:
                    8f:ba:7c:39:c3:90:9d:8c:80:d0:c8:c5:71:9a:61:
                    98:a4:4b:c2:47:36:66:83:84:40:21:74:9a:1e:0d:
                    41:a6:17:4a:7b:1c:ee:47:ad:11:b3:6f:c2:30:7c:
                    8c:ba:b2:3c:e4:93:74:67:f8:af:67:42:bc:0b:e4:
                    1c:b6:d1:bb:70:47:6c:3f:d6:4a:a1:43:23:ac:d2:
                    79:60:b9:af:1c:a9:40:04:8d:1e:ed:12:99:65:02:
                    18:c2:ed:05:86:56:53:e9:e0:c0:3c:4e:ee:81:c8:
                    72:84:ce:21:4c:6e:1d:bc:a7:78:90:24:50:69:47:
                    21:84:89:01:a6:37:82:b6:1e:28:48:4b:bb:f0:ba:
                    33:51:57:c6:81:04:15:0a:64:13:a6:da:73:33:65:
                    2a:65:fb:1c:8a:0c:1b:f7:a7:e2:06:a3:2c:fd:38:
                    33:82:a3:09:33:3a:0f:8f:b3:d1:79:bb:58:ad:13:
                    3a:cf:23:af:ce:21:fc:10:49:af:39:09:b3:44:0b:
                    08:eb:24:e7:06:6e:09:f6:18:93:c1:0f:c1:2f:f8:
                    be:5c:64:ce:c2:2d:b3:49:76:3d:04:82:98:bb:b4:
                    51:0c:2e:1c:de:2c:bf:05:1a:cd:55:ff:aa:56:3f:
                    ab:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:F1:2C:C0:60:54:42:F3:96:C8:FD:5D:EF:85:75:4C:54:B8:0A:F9
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/36362e3232352e3139362e302f32342d3234203d3e20323034383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.225.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:eb:05:a9:8b:bc:c6:7f:f4:34:8c:27:53:c7:1f:c7:4c:3a:
         5e:07:c9:e5:da:a3:df:bc:64:13:77:a5:38:44:14:2e:92:9f:
         e0:de:06:1b:f4:23:17:7e:ac:03:e9:36:6c:4b:4e:e2:13:a0:
         b1:a6:d0:cc:e9:4d:12:af:e4:22:cd:99:c0:eb:66:03:4f:94:
         32:9d:4b:5d:d6:99:be:ce:7a:fb:05:44:33:39:e9:19:fd:f3:
         2c:f9:ba:58:f6:cd:6d:ec:bc:d6:fe:c9:23:c3:ad:16:a9:6a:
         0f:ee:df:29:90:9d:09:08:aa:44:a1:4c:15:f6:cf:f9:66:49:
         ab:f6:c5:92:50:37:ad:91:64:81:dd:76:5d:bc:44:1c:db:69:
         21:0f:38:8a:d4:d9:18:a0:a6:2b:5e:5c:d1:c9:89:80:f7:4c:
         f6:98:f5:a0:9c:0c:64:fa:30:56:26:46:db:09:4d:36:5a:03:
         67:a8:c0:c2:8b:bb:2d:95:eb:dc:d0:74:ce:40:56:55:45:4c:
         4b:b5:a2:b6:e6:ef:f0:03:e6:bb:24:36:d2:d9:e1:b9:03:db:
         2a:e1:66:06:ff:86:7d:8a:ed:70:c4:c9:c6:7e:f9:9b:bb:b6:
         64:3a:ac:bb:67:85:ab:62:8d:f1:6c:3d:8b:53:7d:fd:34:3a:
         8a:6e:fe:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----