Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS208485.roa
File:                     AS208485.roa (raw, json)
Hash identifier:          Rg/CEXWW/Ug/JcCP2XrjV3sz0qfW5rp2it++hozQq44=
Subject key identifier:   C7:64:76:AA:59:90:BF:99:DC:C3:11:8C:69:30:BB:B1:03:AF:20:90
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       5D85B9EBBE0E5F1D60F33793FFCD425156DA030E
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS208485.roa
Signing time:             Sat 27 May 2023 12:46:20 +0000
ROA not before:           Sat 27 May 2023 12:41:20 +0000
ROA not after:            Sat 25 May 2024 12:46:20 +0000
asID:                     208485
IP address blocks:        205.234.232.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:85:b9:eb:be:0e:5f:1d:60:f3:37:93:ff:cd:42:51:56:da:03:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: May 27 12:41:20 2023 GMT
            Not After : May 25 12:46:20 2024 GMT
        Subject: CN=C76476AA5990BF99DCC3118C6930BBB103AF2090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:84:9f:7a:12:74:24:a3:69:8e:f3:ff:c2:ca:
                    f0:64:c2:06:9f:62:08:68:e0:94:4c:af:c9:3e:b9:
                    a7:d2:eb:c4:37:71:46:f1:c2:87:40:0d:57:42:6c:
                    de:e4:36:d5:13:70:ec:38:9f:87:1d:1e:12:52:d4:
                    f7:31:2d:c5:42:14:9a:8c:03:02:0d:91:96:9e:82:
                    51:92:28:e4:c2:f1:a1:ca:15:06:54:a4:96:b7:cb:
                    85:a9:59:73:f1:b6:d3:58:b8:72:ff:63:10:ba:b5:
                    9e:a1:63:78:a1:eb:f2:d8:74:40:32:b1:6c:b4:76:
                    3a:e9:65:de:25:d1:34:a1:be:66:37:2e:da:96:70:
                    3a:e0:ae:38:d9:35:14:da:05:78:76:45:03:8a:64:
                    a8:c9:cb:3a:41:80:3d:c1:08:7a:cf:7f:49:df:07:
                    57:7f:c4:7c:d8:81:b1:98:2b:b5:53:12:ae:0d:39:
                    7e:fd:27:c4:f2:af:65:94:5b:0e:a2:b0:78:0c:ca:
                    c2:41:e0:7e:1c:91:c3:48:e8:1c:d5:ec:a0:e4:37:
                    9c:eb:52:26:94:83:8c:0a:6d:5a:3d:7e:65:6c:c1:
                    4f:18:79:b1:70:2e:d7:6a:72:59:86:fd:a5:fa:5b:
                    8a:1a:e1:2a:89:cc:f4:e5:c3:f3:a2:57:22:52:fa:
                    09:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:64:76:AA:59:90:BF:99:DC:C3:11:8C:69:30:BB:B1:03:AF:20:90
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS208485.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.234.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:f1:8d:9e:4e:3c:11:6f:52:c6:67:9d:4b:0d:70:ce:72:8b:
         aa:6f:48:b4:8e:f8:70:4c:95:72:9c:b7:43:f8:52:8c:40:b3:
         da:33:92:bc:9b:c0:f7:ad:7f:9e:48:38:24:63:16:6e:4a:03:
         6e:c6:78:18:90:2e:5a:a2:a4:4e:4f:06:38:d2:e0:f4:fc:44:
         59:7e:1b:7b:a7:42:c9:7e:78:8d:c0:38:30:c9:2c:be:22:7c:
         2c:f8:ed:a9:1f:77:35:d8:81:e0:41:df:21:51:6d:32:97:e6:
         9f:34:79:10:6d:f9:1e:98:9b:f4:85:a0:54:68:4d:0f:ab:6d:
         f6:c2:3c:6a:36:de:06:c5:cc:d6:9c:4f:4d:2f:1f:a9:35:3c:
         52:dd:b0:01:a1:fc:bb:12:d2:cb:e5:4a:cb:f2:4a:26:92:9a:
         e2:0e:a4:84:55:67:88:3c:74:06:13:4a:6e:b9:f0:43:a2:1a:
         c1:13:05:51:24:9f:c7:11:c8:73:43:36:d3:bd:2d:59:1f:19:
         c2:64:a8:42:ff:74:4e:ee:63:32:fc:df:73:4a:45:05:94:66:
         4b:4e:b9:72:1f:8b:c0:de:7e:32:e3:b1:fe:15:d0:ad:28:fb:
         de:49:ba:76:83:3e:e6:c3:b8:a3:d0:1c:cc:1a:d3:a5:95:0e:
         43:ea:de:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----