Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/39312e3233332e3139382e302f32342d3234203d3e203631333137.roa
File:                     39312e3233332e3139382e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          V88jgAJ4t+TfjSatwSQ078cjD6tacha3EYX4szTdnoA=
Subject key identifier:   03:0E:00:F3:6E:44:41:49:53:DC:FB:C3:04:8F:D1:29:CB:0D:6A:9D
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       0FEA71C906DDB16572B902B42FFFBB0FC9E07A55
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/39312e3233332e3139382e302f32342d3234203d3e203631333137.roa
Signing time:             Tue 06 Jun 2023 14:15:42 +0000
ROA not before:           Tue 06 Jun 2023 14:10:42 +0000
ROA not after:            Tue 04 Jun 2024 14:15:42 +0000
asID:                     61317
IP address blocks:        91.233.198.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:ea:71:c9:06:dd:b1:65:72:b9:02:b4:2f:ff:bb:0f:c9:e0:7a:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Jun  6 14:10:42 2023 GMT
            Not After : Jun  4 14:15:42 2024 GMT
        Subject: CN=030E00F36E44414953DCFBC3048FD129CB0D6A9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e1:48:a1:a9:7c:2b:ac:9b:e1:b2:c5:19:22:
                    0e:c7:e3:f8:dc:e0:64:cc:29:8d:d9:bc:0b:d8:26:
                    6e:65:8c:70:5b:d3:21:a4:30:c0:c4:8d:e1:bb:9b:
                    ae:ce:78:1a:60:69:b7:0b:b2:3d:c2:80:79:67:01:
                    4c:19:5a:c0:20:ef:12:d5:ef:ef:7d:e1:7a:2f:1b:
                    d1:d9:7f:da:38:c8:b2:03:b5:cd:ec:3b:e7:79:2e:
                    8f:a0:41:99:f8:c0:52:74:33:85:32:ba:fc:8e:10:
                    44:ad:85:64:4d:44:ef:45:df:5c:d5:c3:b8:a3:1b:
                    80:63:42:9a:79:33:13:16:20:5f:d7:9c:ee:32:12:
                    cb:16:c0:af:a5:40:b4:4e:4d:74:9d:ee:45:4d:87:
                    07:a0:fb:c5:29:d5:78:80:89:77:d7:21:2b:2e:1f:
                    3e:c8:03:45:3d:e0:35:61:87:b6:89:64:2d:00:9e:
                    42:72:95:ea:2a:d5:63:e7:83:df:e6:58:64:21:f6:
                    19:50:77:0e:40:73:b7:d4:2c:8b:68:c4:2b:4c:7e:
                    75:19:b1:90:66:75:ea:44:b3:d9:b8:20:2b:f5:a2:
                    3d:1f:07:32:20:f8:49:af:25:9c:4f:57:77:b1:a1:
                    b8:d2:df:dc:27:b7:ae:7f:18:b6:a3:aa:c5:20:dd:
                    6c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:0E:00:F3:6E:44:41:49:53:DC:FB:C3:04:8F:D1:29:CB:0D:6A:9D
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/39312e3233332e3139382e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.233.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:77:56:f5:45:34:5e:35:8a:f0:50:54:16:40:3e:3b:a4:f6:
         3f:7e:d7:f4:52:2a:f7:d9:31:6b:7c:60:36:e0:64:d7:71:fc:
         b3:85:c0:ee:26:ce:de:8f:c7:75:93:05:74:8a:bd:11:3c:a0:
         2c:74:5f:0d:c1:90:9f:ee:b4:17:72:0a:07:e0:cc:f1:d6:47:
         61:02:d8:dc:09:2c:32:9f:38:a8:82:df:e4:1f:cd:38:f6:88:
         5f:f0:2c:d0:dc:4b:48:96:2f:bc:84:54:e3:32:91:42:e9:bc:
         91:fe:38:b4:f9:f6:0c:f1:f0:fa:8c:06:91:2d:0e:f9:c4:1c:
         b0:7f:dc:8d:44:3a:82:eb:da:0c:0a:80:87:c5:64:aa:52:89:
         87:9f:69:7e:06:2d:d2:10:f5:11:b1:74:58:dc:e2:71:19:e9:
         3b:df:2c:82:9e:3d:1b:6f:12:25:38:74:77:8e:00:39:0f:b9:
         bb:fc:9e:a8:1f:98:b0:24:ec:bc:c4:cd:77:d2:6a:e0:fc:de:
         d7:2d:01:f5:94:86:20:c9:27:62:6e:1d:85:40:f1:3a:fd:7a:
         41:a5:1e:a2:d2:f8:60:5d:ba:82:fe:fe:8e:26:2a:96:db:c3:
         1b:10:2f:1d:c7:6a:53:af:e2:3d:e7:d0:ef:a8:cb:ac:48:ee:
         e3:f0:8c:ef
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUD+pxyQbdsWVyuQK0L/+7D8ngelUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMWYyMmNmMDc1NzFlY2JhYjZkNDYwYTFmM2I2YzVkNjE5
N2QwOTgzNjQzYTU0ZDJlZDQwHhcNMjMwNjA2MTQxMDQyWhcNMjQwNjA0MTQxNTQy
WjAzMTEwLwYDVQQDEygwMzBFMDBGMzZFNDQ0MTQ5NTNEQ0ZCQzMwNDhGRDEyOUNC
MEQ2QTlEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+FIoal8K6yb
4bLFGSIOx+P43OBkzCmN2bwL2CZuZYxwW9MhpDDAxI3hu5uuzngaYGm3C7I9woB5
ZwFMGVrAIO8S1e/vfeF6LxvR2X/aOMiyA7XN7DvneS6PoEGZ+MBSdDOFMrr8jhBE
rYVkTUTvRd9c1cO4oxuAY0KaeTMTFiBf15zuMhLLFsCvpUC0Tk10ne5FTYcHoPvF
KdV4gIl31yErLh8+yANFPeA1YYe2iWQtAJ5CcpXqKtVj54Pf5lhkIfYZUHcOQHO3
1CyLaMQrTH51GbGQZnXqRLPZuCAr9aI9HwcyIPhJryWcT1d3saG40t/cJ7eufxi2
o6rFIN1szQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFAMOAPNuREFJU9z7wwSP0SnL
DWqdMB8GA1UdIwQYMBaAFGK0t02IaU0zyBBuijO8FJ6zkE/rMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgxZWNkMzdkYWM3MmYxLzEv
NjJCNEI3NEQ4ODY5NEQzM0M4MTA2RThBMzNCQzE0OUVCMzkwNEZFQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2UyMDM4NjlkLTZiOTUtNDY1Zi1iNGRjLTA4OGE1YTIxMDNmYy8xZjIy
Y2YwNzU3MWVjYmFiNmQ0NjBhMWYzYjZjNWQ2MTk3ZDA5ODM2NDNhNTRkMmVkNC5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MWVj
ZDM3ZGFjNzJmMS8xLzM5MzEyZTMyMzMzMzJlMzEzOTM4MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzYzMTMzMzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFvpxjANBgkqhkiG9w0BAQsF
AAOCAQEAKXdW9UU0XjWK8FBUFkA+O6T2P37X9FIq99kxa3xgNuBk13H8s4XA7ibO
3o/HdZMFdIq9ETygLHRfDcGQn+60F3IKB+DM8dZHYQLY3AksMp84qILf5B/NOPaI
X/As0NxLSJYvvIRU4zKRQum8kf44tPn2DPHw+owGkS0O+cQcsH/cjUQ6guvaDAqA
h8VkqlKJh59pfgYt0hD1EbF0WNzicRnpO98sgp49G28SJTh0d44AOQ+5u/yeqB+Y
sCTsvMTNd9Jq4Pze1y0B9ZSGIMknYm4dhUDxOv16QaUeotL4YF26gv7+jiYqltvD
GxAvHcdqU6/iPefQ76jLrEju4/CM7w==
-----END CERTIFICATE-----