Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/3230392e3230302e3233322e302f32342d3234203d3e203631313338.roa
File:                     3230392e3230302e3233322e302f32342d3234203d3e203631313338.roa (raw, json)
Hash identifier:          vvmXrBsmzLJq3mFaWGWLbZqnUGTEOG9c+BFv1mdI4RI=
Subject key identifier:   1B:82:D5:5F:68:CE:B3:B3:E2:B1:33:29:E5:C4:4D:06:EC:AF:22:E8
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       4C06D8C5386DFD4D99488D90C11245F33C4844D4
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/3230392e3230302e3233322e302f32342d3234203d3e203631313338.roa
Signing time:             Mon 28 Nov 2022 11:21:59 +0000
ROA not before:           Mon 28 Nov 2022 11:16:59 +0000
ROA not after:            Mon 27 Nov 2023 11:21:59 +0000
asID:                     61138
IP address blocks:        209.200.232.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:06:d8:c5:38:6d:fd:4d:99:48:8d:90:c1:12:45:f3:3c:48:44:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Nov 28 11:16:59 2022 GMT
            Not After : Nov 27 11:21:59 2023 GMT
        Subject: CN=1B82D55F68CEB3B3E2B13329E5C44D06ECAF22E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:53:41:0a:a0:ed:de:df:76:5a:fe:45:7d:9f:
                    46:6d:43:d1:3f:12:6c:49:6f:3a:09:68:ba:93:e8:
                    1a:5b:9c:7b:eb:27:c1:23:75:00:40:55:26:4f:8c:
                    57:5e:81:15:ea:11:58:61:98:8f:d7:4f:fd:70:cd:
                    2b:5d:c4:32:1b:6e:bb:c9:5a:a0:42:97:3e:ef:eb:
                    10:74:6a:19:39:a1:1a:cd:b9:e0:37:0c:ad:ca:b2:
                    1d:0f:80:c1:18:7e:fa:06:54:43:98:3d:d0:4e:56:
                    05:9f:a8:04:6b:75:6a:0a:4f:9c:0a:5e:d3:d0:67:
                    76:7a:ff:21:df:57:82:a0:b0:cd:bf:f2:03:76:56:
                    ae:fa:46:d3:ff:ff:1c:65:bd:5b:7d:f8:92:6c:46:
                    61:83:21:a7:91:48:0d:4f:0b:63:18:26:c1:13:ec:
                    07:26:18:eb:dd:5f:8c:bb:82:30:30:39:89:9c:d5:
                    79:4f:db:9c:a4:44:a5:f3:66:ca:33:51:85:fa:08:
                    20:3c:9a:18:dd:e4:0e:a3:c5:cd:ef:aa:15:bd:3b:
                    6c:ba:87:e9:fd:1d:1a:43:4d:8b:2c:82:31:12:30:
                    49:a4:f9:88:ef:72:a7:a8:f7:5d:13:21:89:50:15:
                    b2:d5:f5:fa:64:92:ee:ee:8f:69:19:01:e4:af:02:
                    60:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:82:D5:5F:68:CE:B3:B3:E2:B1:33:29:E5:C4:4D:06:EC:AF:22:E8
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/3230392e3230302e3233322e302f32342d3234203d3e203631313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:9f:ed:eb:90:8b:0f:77:f5:f5:02:d0:8c:08:48:2f:e4:d8:
         9c:a6:8a:51:f8:9f:2a:af:00:e6:f5:cd:ac:0e:f9:e8:23:29:
         06:5a:df:e4:8a:d7:87:e4:b6:9c:19:7e:41:bf:7a:4b:2d:be:
         24:e1:05:90:ba:5f:55:3e:30:e4:7b:55:25:67:70:0f:51:7c:
         80:21:fc:38:ac:b6:61:23:9d:f3:91:df:a4:0d:29:24:db:44:
         1b:69:03:d4:a5:16:0b:f5:02:3a:ad:ef:47:9a:a0:72:81:2c:
         a2:19:40:7d:29:85:5c:80:10:4e:81:0e:d4:13:bc:fb:76:00:
         f8:a8:ec:9f:f0:45:21:4b:a6:53:21:d2:d0:fc:df:54:fe:b1:
         e7:73:de:91:26:c5:9e:44:0d:e2:9b:26:1f:42:dc:c3:76:06:
         3c:db:25:52:ba:c1:46:e0:9d:8e:3b:6e:43:11:c9:4e:82:1f:
         36:eb:b6:9a:49:ee:be:c9:7c:18:12:c5:a5:aa:db:5f:e1:5a:
         a0:f7:9e:13:0f:15:3e:f9:cc:8e:f5:ae:6b:08:35:67:65:ad:
         09:60:4a:15:dc:5b:4e:58:65:64:4e:01:f9:98:12:ee:30:f4:
         41:f9:22:4d:c8:42:6e:d2:5a:15:00:91:e5:88:26:05:8f:58:
         f6:e7:6e:33
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUTAbYxTht/U2ZSI2QwRJF8zxIRNQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy
YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjIxMTI4MTExNjU5WhcNMjMxMTI3MTEyMTU5
WjAzMTEwLwYDVQQDEygxQjgyRDU1RjY4Q0VCM0IzRTJCMTMzMjlFNUM0NEQwNkVD
QUYyMkU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVNBCqDt3t92
Wv5FfZ9GbUPRPxJsSW86CWi6k+gaW5x76yfBI3UAQFUmT4xXXoEV6hFYYZiP10/9
cM0rXcQyG267yVqgQpc+7+sQdGoZOaEazbngNwytyrIdD4DBGH76BlRDmD3QTlYF
n6gEa3VqCk+cCl7T0Gd2ev8h31eCoLDNv/IDdlau+kbT//8cZb1bffiSbEZhgyGn
kUgNTwtjGCbBE+wHJhjr3V+Mu4IwMDmJnNV5T9ucpESl82bKM1GF+gggPJoY3eQO
o8XN76oVvTtsuofp/R0aQ02LLIIxEjBJpPmI73KnqPddEyGJUBWy1fX6ZJLu7o9p
GQHkrwJg8wIDAQABo4ICtDCCArAwHQYDVR0OBBYEFBuC1V9ozrOz4rEzKeXETQbs
ryLoMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv
NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MjEx
M2VlYTQ5MGQzMy8xLzMyMzAzOTJlMzIzMDMwMmUzMjMzMzIyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzNjMxMzEzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0cjoMA0GCSqGSIb3DQEB
CwUAA4IBAQBun+3rkIsPd/X1AtCMCEgv5NicpopR+J8qrwDm9c2sDvnoIykGWt/k
iteH5LacGX5Bv3pLLb4k4QWQul9VPjDke1UlZ3APUXyAIfw4rLZhI53zkd+kDSkk
20QbaQPUpRYL9QI6re9HmqBygSyiGUB9KYVcgBBOgQ7UE7z7dgD4qOyf8EUhS6ZT
IdLQ/N9U/rHnc96RJsWeRA3imyYfQtzDdgY82yVSusFG4J2OO25DEclOgh8267aa
Se6+yXwYEsWlqttf4Vqg954TDxU++cyO9a5rCDVnZa0JYEoV3FtOWGVkTgH5mBLu
MPRB+SJNyEJu0loVAJHliCYFj1j2524z
-----END CERTIFICATE-----