Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3138372e312e302f32342d3234203d3e20383334.roa
File:                     3139332e3138372e312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          4zAVDH5FaPVlgR4LQ/8/2YyjSi4ldf5VGRRUHzECano=
Subject key identifier:   2F:F9:2B:F3:F2:8C:3C:76:D2:D5:74:6D:40:A6:D4:D5:1B:7D:DA:97
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       4FD2E98B075F50302AE07B501CF463BD9520A65F
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3138372e312e302f32342d3234203d3e20383334.roa
Signing time:             Wed 12 Apr 2023 19:30:03 +0000
ROA not before:           Wed 12 Apr 2023 19:25:03 +0000
ROA not after:            Wed 10 Apr 2024 19:30:03 +0000
asID:                     834
IP address blocks:        193.187.1.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:d2:e9:8b:07:5f:50:30:2a:e0:7b:50:1c:f4:63:bd:95:20:a6:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Apr 12 19:25:03 2023 GMT
            Not After : Apr 10 19:30:03 2024 GMT
        Subject: CN=2FF92BF3F28C3C76D2D5746D40A6D4D51B7DDA97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:98:64:27:80:1c:71:71:74:75:8a:03:32:68:
                    26:cf:9d:a5:15:e0:56:15:c9:08:9a:0a:7d:89:1a:
                    4c:f2:26:dd:48:9b:0c:07:d9:03:fe:4d:89:12:29:
                    91:f9:d0:37:07:62:11:26:d2:56:49:15:72:4f:41:
                    98:27:d9:ac:45:4e:60:40:fb:e7:44:88:15:ad:67:
                    e5:af:d8:b7:9e:e9:72:5d:3d:af:98:29:ca:4e:bd:
                    36:16:ed:c1:b7:eb:9a:b6:75:07:9c:ea:82:fb:87:
                    ae:12:ba:05:b0:53:3b:43:96:f6:dc:bd:f3:f2:03:
                    a0:9b:93:e3:89:10:85:f2:d5:c8:62:60:49:a5:a4:
                    df:a9:b3:2c:75:ff:97:a5:1d:10:30:59:9f:b0:ae:
                    8e:59:d3:13:a8:99:96:c3:0b:c8:b0:be:19:6f:46:
                    d0:e2:7d:4a:80:ef:03:6b:25:d1:6d:e6:91:8c:01:
                    33:c2:20:7d:e4:64:7f:34:51:c3:7c:e8:93:8f:be:
                    0b:7e:39:d3:62:7c:32:49:4e:cb:f3:91:77:b3:15:
                    57:8d:0f:03:74:42:1b:2d:47:05:f5:72:17:42:0b:
                    81:8b:ed:d6:d5:c0:db:dd:73:4b:c2:21:14:b4:52:
                    98:8b:f6:c3:b4:5a:f5:56:c8:18:c5:d4:75:87:e3:
                    35:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:F9:2B:F3:F2:8C:3C:76:D2:D5:74:6D:40:A6:D4:D5:1B:7D:DA:97
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3138372e312e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.187.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:4f:a8:c5:43:a7:81:4e:0d:97:c9:08:0f:6e:79:ac:fa:ab:
         aa:96:4f:96:d5:ce:5b:e5:03:1d:ba:84:77:7d:61:db:67:d8:
         53:b9:9e:fa:1f:37:04:b6:e2:e2:d4:57:4c:0d:43:88:13:b6:
         26:b8:79:aa:b9:3e:e6:5a:16:c0:b4:f6:5f:3b:fd:4a:7c:e0:
         11:a0:15:97:7b:91:d3:90:df:7f:98:58:d3:03:a4:61:ab:5c:
         39:c2:59:6a:c6:04:a6:ff:3c:e5:c8:0b:44:f9:84:c7:7d:42:
         57:f0:35:8c:5b:67:5a:62:82:fb:15:80:65:1d:a5:88:1d:4f:
         23:0d:a3:f9:db:f0:91:52:17:b6:be:13:3f:15:ff:a6:ea:e0:
         96:59:1e:5d:fb:0a:e0:ce:19:26:2a:0b:b0:1b:e9:86:e0:0d:
         d1:9c:4c:51:aa:21:50:5f:0d:70:64:8e:1a:3b:ff:aa:af:6e:
         fd:10:d4:90:38:5a:71:51:99:a3:cd:06:2b:c3:9a:8b:a0:2b:
         92:86:30:68:27:30:c6:14:c3:ba:db:eb:fd:90:25:7a:93:e8:
         98:9e:40:e3:f7:b0:a4:e6:9b:ba:6a:4a:19:a9:dd:21:5d:27:
         cf:e9:65:b8:37:de:fd:76:f5:5e:ca:67:78:da:96:32:8c:a0:
         70:1a:f9:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----