Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/3230392e3230302e3232362e302f32342d3234203d3e20323131303631.roa
File:                     3230392e3230302e3232362e302f32342d3234203d3e20323131303631.roa (raw, json)
Hash identifier:          6rzgPt/vI0nLGvaLsO0m94pQD3CClS0G7M6FJ5THjzg=
Subject key identifier:   46:63:F8:2A:70:CF:D1:78:48:20:A5:F6:06:6F:E5:34:93:C7:9B:46
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       0E6C23C52E17956C829206F177BE725A29E82DB9
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/3230392e3230302e3232362e302f32342d3234203d3e20323131303631.roa
Signing time:             Mon 28 Nov 2022 11:22:00 +0000
ROA not before:           Mon 28 Nov 2022 11:17:00 +0000
ROA not after:            Mon 27 Nov 2023 11:22:00 +0000
asID:                     211061
IP address blocks:        209.200.226.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:6c:23:c5:2e:17:95:6c:82:92:06:f1:77:be:72:5a:29:e8:2d:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Nov 28 11:17:00 2022 GMT
            Not After : Nov 27 11:22:00 2023 GMT
        Subject: CN=4663F82A70CFD1784820A5F6066FE53493C79B46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:50:34:bb:b5:4c:35:00:a5:09:45:3e:93:31:
                    b8:4c:de:af:37:82:97:02:59:f3:b2:74:79:fa:85:
                    b3:35:9f:5a:18:78:e2:37:8b:57:f8:52:6e:ba:ee:
                    60:ed:28:db:86:81:75:a6:e7:d9:08:fb:8b:35:fd:
                    72:c5:e2:55:18:b3:29:59:7e:eb:5e:fc:b1:35:55:
                    79:4f:3c:27:a1:79:12:4f:30:75:0d:b8:62:fa:44:
                    6b:d1:bc:e3:2d:7c:17:2c:2f:84:93:50:33:fb:a8:
                    8f:c1:6e:8b:33:c2:1a:64:2a:12:07:a1:6c:be:e7:
                    7a:ac:39:4c:66:7b:06:51:ae:5b:a8:40:21:ad:92:
                    08:73:de:71:c9:bf:17:c5:4c:98:d8:b9:ed:75:8f:
                    a4:5c:ba:09:cf:4a:1f:a0:91:e4:2c:15:14:2b:8b:
                    94:1d:e9:e8:37:d1:6f:7b:b2:bf:8a:0d:de:27:af:
                    66:6c:39:6b:76:cd:e3:99:db:6d:90:30:51:89:68:
                    5a:d3:cf:46:d0:8f:a1:0b:94:d5:b7:98:57:43:00:
                    dc:89:d9:5a:d0:6a:92:dd:d6:d6:8f:6a:db:df:a6:
                    a6:bc:6a:95:e5:69:2d:9b:9a:ad:f7:ed:e0:d8:29:
                    cf:2b:7e:5d:c0:a7:59:85:d1:22:16:88:8a:17:6c:
                    0b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:63:F8:2A:70:CF:D1:78:48:20:A5:F6:06:6F:E5:34:93:C7:9B:46
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/3230392e3230302e3232362e302f32342d3234203d3e20323131303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:89:91:a5:c1:a6:41:0e:63:c4:f6:c5:00:27:d7:ae:9d:14:
         9e:bd:e7:8c:2b:3d:f9:76:91:09:da:a2:ab:a9:85:99:7b:a6:
         e5:3e:eb:69:4c:86:83:02:28:43:cd:b1:8f:23:de:7c:1a:89:
         11:4f:f7:73:66:c2:35:80:a9:9d:68:6b:a1:5e:82:7d:0f:55:
         8d:7a:11:e5:fd:82:36:50:77:a5:e7:4d:f5:8e:0f:12:d5:b7:
         02:9f:68:6f:cf:ae:f3:a3:a9:67:a5:34:8f:af:49:68:cd:f9:
         59:f0:55:31:91:86:a3:e3:e0:20:7f:08:27:63:89:5e:3e:42:
         29:3c:ef:65:c4:6e:3b:f1:76:eb:ca:a9:ef:54:b8:dd:6c:9a:
         8f:f5:14:86:61:bc:61:cb:16:cb:35:13:d6:f9:24:42:1e:66:
         f0:75:90:69:65:8d:23:a0:18:46:e5:8c:1c:d3:c7:d7:7e:08:
         12:9a:b1:55:85:50:a6:44:a9:7d:06:9c:d3:bb:06:ea:e2:e8:
         14:b1:49:a4:3f:be:8b:c4:b4:18:14:95:37:74:95:3b:89:a1:
         c8:46:57:66:4c:f1:10:f0:e3:60:0c:2c:cc:ee:9e:a9:13:2d:
         7f:82:55:14:7f:3a:54:b2:12:93:f1:46:23:f4:e6:92:52:be:
         11:9e:f6:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----