Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/32332e38382e3232342e302f31392d3234203d3e2031323339.roa
File:                     32332e38382e3232342e302f31392d3234203d3e2031323339.roa (raw, json)
Hash identifier:          S5HlzxI4fb6ShlAeqdt/y8GTgRFe7fwKHw2/BjzGNYA=
Subject key identifier:   95:11:01:6D:3C:B2:48:86:00:3A:7E:E8:67:68:C2:A6:00:3C:6A:61
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       0D873000E7CB9298BEC66B410564D199EF738DC2
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/32332e38382e3232342e302f31392d3234203d3e2031323339.roa
Signing time:             Mon 28 Nov 2022 11:29:17 +0000
ROA not before:           Mon 28 Nov 2022 11:24:17 +0000
ROA not after:            Mon 27 Nov 2023 11:29:17 +0000
asID:                     1239
IP address blocks:        23.88.224.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:87:30:00:e7:cb:92:98:be:c6:6b:41:05:64:d1:99:ef:73:8d:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Nov 28 11:24:17 2022 GMT
            Not After : Nov 27 11:29:17 2023 GMT
        Subject: CN=9511016D3CB24886003A7EE86768C2A6003C6A61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:cd:0e:fa:6c:3c:e8:9c:c0:81:5e:eb:6a:1a:
                    41:ed:4d:96:de:52:0f:2d:d7:aa:16:99:48:10:98:
                    d9:9d:5d:0c:a3:83:02:31:d3:20:ba:a1:40:5f:36:
                    5c:1e:e1:0a:12:37:f8:85:8e:e6:5b:ff:c5:c0:d0:
                    b4:79:47:64:93:96:c8:ae:bf:c1:1e:d6:b6:ed:55:
                    bd:2d:01:e7:04:b3:d2:46:df:95:c5:89:b1:e3:90:
                    c4:13:0d:c6:08:78:c6:6a:da:dc:35:db:be:7a:8a:
                    11:c0:8f:a7:0f:25:d9:df:3f:6a:b4:0a:c5:f6:e0:
                    b9:0f:68:63:c7:63:b0:60:2a:cc:0c:31:92:fb:09:
                    75:3c:f2:c0:b3:db:52:70:81:ff:f3:fd:97:ef:8b:
                    32:5e:56:c2:5a:4e:ba:a9:af:06:45:45:76:77:97:
                    59:99:67:5b:ef:52:6e:c2:16:8f:95:85:7f:8a:f8:
                    37:b9:5a:4d:46:88:f7:0a:e4:2f:82:34:48:c8:60:
                    9b:f9:4c:55:c6:29:a8:8c:bb:a8:aa:30:38:f1:5c:
                    ac:2e:3f:7d:96:8b:b5:44:d2:cf:44:03:61:3a:a3:
                    94:f0:80:fd:7f:2f:f9:0d:fb:d9:46:96:7b:2c:29:
                    8d:20:13:70:a9:d4:cf:d7:f8:f9:34:02:44:0b:65:
                    e2:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:11:01:6D:3C:B2:48:86:00:3A:7E:E8:67:68:C2:A6:00:3C:6A:61
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/32332e38382e3232342e302f31392d3234203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.88.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         2e:6e:7e:28:7a:7a:e8:31:1a:90:47:e2:5f:24:98:9d:93:56:
         d3:bd:40:90:81:2c:4e:c0:ba:e0:cc:9a:89:d0:fa:21:22:68:
         b5:ff:89:f2:34:39:70:66:9a:65:e1:40:60:3a:c9:27:30:a3:
         13:4b:9a:10:77:8f:c8:68:45:3a:25:82:ae:2e:61:1c:60:ea:
         46:73:5e:ab:54:91:83:62:71:cf:9c:05:c1:06:a4:5b:38:03:
         09:b2:cb:63:41:0c:1c:0d:ee:a7:51:ec:18:93:43:ce:2e:f2:
         a7:07:8f:5a:c4:d5:58:ba:ee:6b:38:e3:62:c3:3a:e8:f7:ff:
         71:73:40:ae:77:b4:95:ed:51:a3:da:79:51:4e:ce:cd:b3:a3:
         59:8e:38:d1:77:56:b6:13:13:35:94:fd:5b:f2:af:03:7b:ee:
         04:33:ef:b1:f7:e9:d4:4a:26:d5:f9:c7:be:95:78:ca:81:8f:
         15:20:95:47:f3:5e:c2:d9:db:dc:fd:e3:23:d4:a1:0c:e9:70:
         43:a9:ec:77:f7:4e:26:7d:22:7d:e6:e9:1d:97:ee:8f:75:09:
         97:62:19:cb:a9:5a:13:42:2b:b5:ff:ff:1d:35:1f:3a:66:4a:
         14:0e:35:47:5f:bf:48:cd:39:94:ee:64:63:15:94:ac:f2:c8:
         72:58:08:83
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIUDYcwAOfLkpi+xmtBBWTRme9zjcIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMWYyMmNmMDc1NzFlY2JhYjZkNDYwYTFmM2I2YzVkNjE5
N2QwOTgzNjQzYTU0ZDJlZDQwHhcNMjIxMTI4MTEyNDE3WhcNMjMxMTI3MTEyOTE3
WjAzMTEwLwYDVQQDEyg5NTExMDE2RDNDQjI0ODg2MDAzQTdFRTg2NzY4QzJBNjAw
M0M2QTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2c0O+mw86JzA
gV7rahpB7U2W3lIPLdeqFplIEJjZnV0Mo4MCMdMguqFAXzZcHuEKEjf4hY7mW//F
wNC0eUdkk5bIrr/BHta27VW9LQHnBLPSRt+VxYmx45DEEw3GCHjGatrcNdu+eooR
wI+nDyXZ3z9qtArF9uC5D2hjx2OwYCrMDDGS+wl1PPLAs9tScIH/8/2X74syXlbC
Wk66qa8GRUV2d5dZmWdb71JuwhaPlYV/ivg3uVpNRoj3CuQvgjRIyGCb+UxVximo
jLuoqjA48VysLj99lou1RNLPRANhOqOU8ID9fy/5DfvZRpZ7LCmNIBNwqdTP1/j5
NAJEC2XiJwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFJURAW08skiGADp+6GdowqYA
PGphMB8GA1UdIwQYMBaAFGK0t02IaU0zyBBuijO8FJ6zkE/rMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgxZWNkMzdkYWM3MmYxLzEv
NjJCNEI3NEQ4ODY5NEQzM0M4MTA2RThBMzNCQzE0OUVCMzkwNEZFQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2UyMDM4NjlkLTZiOTUtNDY1Zi1iNGRjLTA4OGE1YTIxMDNmYy8xZjIy
Y2YwNzU3MWVjYmFiNmQ0NjBhMWYzYjZjNWQ2MTk3ZDA5ODM2NDNhNTRkMmVkNC5j
ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgxZWNk
MzdkYWM3MmYxLzEvMzIzMzJlMzgzODJlMzIzMjM0MmUzMDJmMzEzOTJkMzIzNDIw
M2QzZTIwMzEzMjMzMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAUXWOAwDQYJKoZIhvcNAQELBQADggEB
AC5ufih6eugxGpBH4l8kmJ2TVtO9QJCBLE7AuuDMmonQ+iEiaLX/ifI0OXBmmmXh
QGA6yScwoxNLmhB3j8hoRTolgq4uYRxg6kZzXqtUkYNicc+cBcEGpFs4Awmyy2NB
DBwN7qdR7BiTQ84u8qcHj1rE1Vi67ms442LDOuj3/3FzQK53tJXtUaPaeVFOzs2z
o1mOONF3VrYTEzWU/VvyrwN77gQz77H36dRKJtX5x76VeMqBjxUglUfzXsLZ29z9
4yPUoQzpcEOp7Hf3TiZ9In3m6R2X7o91CZdiGcupWhNCK7X//x01HzpmShQONUdf
v0jNOZTuZGMVlKzyyHJYCIM=
-----END CERTIFICATE-----