Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3138372e312e302f32342d3234203d3e20323130373033.roa
File:                     3139332e3138372e312e302f32342d3234203d3e20323130373033.roa (raw, json)
Hash identifier:          4qJAJ4H55O+0DnqaVCoyY8y+bvX1txHcEqtCZjSDFUU=
Subject key identifier:   4F:94:C6:09:97:4D:A0:6E:C5:9E:D3:B1:6F:13:6B:68:50:CE:AE:7E
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       6E83B24F3F6A4021163BC8E65F6FC513ACD738D2
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3138372e312e302f32342d3234203d3e20323130373033.roa
Signing time:             Tue 14 Mar 2023 19:18:18 +0000
ROA not before:           Tue 14 Mar 2023 19:13:18 +0000
ROA not after:            Tue 12 Mar 2024 19:18:18 +0000
asID:                     210703
IP address blocks:        193.187.1.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:83:b2:4f:3f:6a:40:21:16:3b:c8:e6:5f:6f:c5:13:ac:d7:38:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Mar 14 19:13:18 2023 GMT
            Not After : Mar 12 19:18:18 2024 GMT
        Subject: CN=4F94C609974DA06EC59ED3B16F136B6850CEAE7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:32:9d:d9:c4:42:18:49:da:60:99:8e:11:78:
                    11:e3:16:39:03:3e:2d:fe:44:c4:66:ac:57:57:9b:
                    3e:64:e4:a3:32:7e:7b:c3:59:fd:c7:f1:4c:cf:dd:
                    ac:94:45:37:a7:51:72:8d:ca:81:3a:af:81:1d:ed:
                    a7:ff:10:ef:d8:ad:d8:55:9c:4c:e6:30:69:77:fc:
                    14:b0:bd:f4:6b:4b:89:61:f4:a4:3f:b8:d5:15:87:
                    d9:48:1b:b1:ae:22:7d:ad:66:5f:0f:6a:74:8d:3c:
                    2f:1c:18:6d:9e:1c:17:80:d7:96:09:bf:54:7f:1a:
                    a6:db:b0:01:e4:11:f0:d3:1f:8b:86:c4:f0:64:e6:
                    be:d1:ff:ca:c2:45:02:df:68:0a:bf:46:78:ca:46:
                    4d:b2:d7:36:6e:ee:a8:9f:0a:b2:ce:61:46:27:97:
                    e1:42:b8:a5:88:91:44:3c:02:a7:fe:31:9a:66:5d:
                    58:fd:93:a3:35:68:30:67:26:09:59:b1:b7:df:49:
                    4a:42:00:63:5d:82:94:ed:6d:82:31:d7:bb:ee:d1:
                    c6:50:10:77:07:8b:1e:ca:1b:9b:67:57:33:e2:b4:
                    93:d0:76:9f:b0:41:f6:47:28:65:8d:cb:f7:b9:c2:
                    d5:86:a6:d1:37:60:c6:eb:f7:25:e5:64:44:ae:81:
                    bf:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:94:C6:09:97:4D:A0:6E:C5:9E:D3:B1:6F:13:6B:68:50:CE:AE:7E
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3138372e312e302f32342d3234203d3e20323130373033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.187.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:ae:d5:3b:df:1d:ed:2f:ce:f4:db:ba:af:47:7f:6d:9a:36:
         24:a8:11:99:d4:ca:16:59:22:bc:72:ef:8c:fd:b7:37:63:b8:
         52:ef:76:3b:e5:a6:80:0a:a7:cc:af:ca:f4:0d:29:de:bd:99:
         ed:97:03:a4:d8:c9:8d:d7:95:e2:a3:ae:52:f8:93:24:e2:c9:
         dd:06:6b:dc:d8:a0:5b:13:09:22:17:d7:0b:da:e3:db:c4:0f:
         3f:db:d9:fb:4f:d7:d3:e9:5a:05:1f:6b:5b:59:a8:76:d9:7e:
         27:8a:60:46:cc:24:fe:c9:74:5f:af:36:9f:c6:1a:84:32:ff:
         cd:30:5b:f5:a0:94:f0:53:75:c7:f1:fd:6b:55:7e:ad:8b:c0:
         2a:5b:ad:0a:d6:87:ce:fb:3d:eb:b7:2c:81:8f:6b:fc:7f:7d:
         1f:f2:c3:ac:da:ec:29:a5:8a:16:1d:e0:a5:24:4d:7c:13:f1:
         d4:03:96:82:8c:87:70:af:d9:f1:ca:dd:38:1c:4b:c9:20:4a:
         48:c8:05:b4:0c:92:61:36:fd:87:af:ae:34:5e:b2:b3:00:68:
         c9:9a:80:d2:c9:9a:ce:be:0d:d2:0c:dd:bd:09:23:32:ab:5e:
         b6:a7:98:ed:a8:a0:ac:b4:1c:a5:f8:29:dc:a9:cb:07:2f:73:
         da:f6:44:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----