Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/3230392e3230302e3233342e302f32342d3234203d3e2031323339.roa
File:                     3230392e3230302e3233342e302f32342d3234203d3e2031323339.roa (raw, json)
Hash identifier:          kUBJ8rbkR5ZYd58Odb8z4JtZlet0aOkxWb9yuAYLQHs=
Subject key identifier:   30:04:79:33:04:D1:83:F4:F8:B2:D5:94:52:80:86:0C:36:F6:3E:67
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       24682B197E7620523A2F1DA7259668B3D857208A
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/3230392e3230302e3233342e302f32342d3234203d3e2031323339.roa
Signing time:             Mon 28 Nov 2022 11:21:59 +0000
ROA not before:           Mon 28 Nov 2022 11:16:59 +0000
ROA not after:            Mon 27 Nov 2023 11:21:59 +0000
asID:                     1239
IP address blocks:        209.200.234.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:68:2b:19:7e:76:20:52:3a:2f:1d:a7:25:96:68:b3:d8:57:20:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Nov 28 11:16:59 2022 GMT
            Not After : Nov 27 11:21:59 2023 GMT
        Subject: CN=3004793304D183F4F8B2D5945280860C36F63E67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2a:d4:12:19:51:21:2a:51:58:90:ee:1f:e6:
                    0b:0f:7b:d9:d4:e9:f0:6e:df:de:a8:f8:23:b2:47:
                    39:cb:c0:f0:bf:84:11:1d:e8:54:24:64:fe:71:ec:
                    b1:ae:8b:f0:68:84:94:f3:fe:64:69:df:06:fa:92:
                    d9:54:78:3c:55:33:2b:fe:e4:8a:0f:ae:1d:3c:1e:
                    4d:6d:63:f3:8e:4b:03:92:0d:07:e5:0b:ce:52:b2:
                    d7:16:18:7c:41:ff:bd:f9:ce:93:7c:36:63:49:96:
                    92:d3:aa:3a:d4:f8:05:73:7e:6b:c6:00:7e:49:58:
                    ba:06:48:06:70:88:5b:c3:00:1d:8f:d3:ad:c0:7a:
                    4c:48:12:bf:f8:f0:21:0b:e5:16:94:55:9c:47:08:
                    d7:38:a0:49:60:c7:5e:ea:99:da:fe:9e:52:52:47:
                    2d:44:5d:46:12:ae:58:85:3a:02:de:b4:93:8d:b4:
                    99:a8:65:53:f3:d3:29:be:e3:7e:2e:b1:28:12:5e:
                    f9:89:08:c0:82:ae:3c:43:4b:ea:a1:b2:85:60:bb:
                    49:12:cd:39:97:8b:ff:72:21:cf:59:82:e1:ca:d9:
                    0f:6c:13:40:47:85:e0:25:0d:ee:7f:1d:91:53:13:
                    d0:9a:3c:72:87:1b:be:a8:4c:a8:8c:89:8a:8a:ab:
                    19:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:04:79:33:04:D1:83:F4:F8:B2:D5:94:52:80:86:0C:36:F6:3E:67
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/3230392e3230302e3233342e302f32342d3234203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:72:32:89:6c:4c:98:ed:3d:19:ba:7d:82:6a:9d:1e:47:0c:
         6d:11:42:60:e7:3d:88:b3:53:35:7b:1f:51:d6:e2:70:3c:4e:
         05:63:62:14:3b:39:ae:ea:3e:83:68:76:13:92:73:9f:07:a9:
         31:38:13:a9:9e:f3:48:d0:e9:a5:a2:12:28:7d:1b:ed:bb:3a:
         d2:2a:05:8c:6d:6b:3e:1c:c5:33:9f:4a:3e:60:c2:36:9f:71:
         6e:bb:81:7d:f2:88:4a:1a:72:77:b3:c3:04:17:aa:13:43:14:
         ba:52:ba:09:2b:a6:3e:20:f3:46:15:f6:44:81:56:12:b0:dd:
         a7:f8:e3:95:c6:84:37:de:c8:48:77:20:fd:d0:de:43:fc:9f:
         89:97:2d:c0:96:42:ee:66:ac:e5:42:c3:01:7e:68:a0:d1:00:
         a7:47:bb:ea:b1:46:cc:9f:11:90:31:a9:fd:86:cf:36:5c:e1:
         a1:bf:1c:3f:11:64:68:ff:09:38:1d:ca:c5:0a:3e:4f:3d:c9:
         f3:6c:3b:22:06:aa:1d:85:ef:7f:5c:e5:c5:35:85:e7:9f:64:
         ca:25:ec:c5:c3:8e:c9:38:29:1d:f6:67:fa:22:c8:9d:4e:d5:
         89:6a:cb:1c:9e:2d:8e:23:f1:f5:cf:89:d1:3f:89:77:f3:db:
         fd:ff:9e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----