Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/3230392e3230302e3233342e302f32342d3234203d3e2037303138.roa
File:                     3230392e3230302e3233342e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier:          4ggYPFg//SNHnED1J+cY1pYVcmbFO90PrQ/5wQ0N6Ps=
Subject key identifier:   40:4D:67:06:DC:E0:08:B3:2B:A9:87:E4:5C:7A:A0:B3:62:57:28:88
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       5C0677A1997921CAFF4C5C006F4595F6656B3421
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/3230392e3230302e3233342e302f32342d3234203d3e2037303138.roa
Signing time:             Mon 28 Nov 2022 11:22:02 +0000
ROA not before:           Mon 28 Nov 2022 11:17:02 +0000
ROA not after:            Mon 27 Nov 2023 11:22:02 +0000
asID:                     7018
IP address blocks:        209.200.234.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:06:77:a1:99:79:21:ca:ff:4c:5c:00:6f:45:95:f6:65:6b:34:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Nov 28 11:17:02 2022 GMT
            Not After : Nov 27 11:22:02 2023 GMT
        Subject: CN=404D6706DCE008B32BA987E45C7AA0B362572888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1f:da:f2:50:b1:8e:2d:1a:1d:08:6c:8f:e6:
                    77:6e:ad:2c:df:ca:1e:eb:cc:c7:40:96:9a:7b:a3:
                    96:2a:28:ed:6c:43:41:31:56:29:19:bb:1d:b4:5d:
                    6c:2c:bd:19:84:b8:02:a9:f0:3b:fd:4c:75:9a:e4:
                    fc:6c:d0:9a:ed:cb:a3:ee:5f:ac:fa:e1:1c:d4:34:
                    8d:0c:38:32:de:5d:5a:64:af:25:95:02:9b:d3:c8:
                    9e:8f:31:e7:71:9d:f1:58:88:d3:b1:a5:6d:0a:94:
                    94:b6:f0:62:28:62:bd:59:19:16:43:14:36:d5:12:
                    38:b3:80:7b:df:0f:e8:55:3d:5f:7a:61:36:4e:70:
                    32:a4:c1:15:94:f4:66:03:27:fd:1f:5a:f1:f4:4b:
                    55:1a:f1:99:9c:d0:d6:35:32:73:01:92:00:2e:e8:
                    eb:77:42:79:76:af:27:5d:2c:fd:96:d3:d9:bb:ce:
                    3b:ff:5f:76:25:f4:e3:3f:d1:bd:68:cd:d2:b9:19:
                    74:50:6e:e8:da:da:d4:6e:f9:dc:56:a2:25:57:b7:
                    e0:10:d6:73:c3:a6:5a:b0:88:06:57:88:a7:19:0b:
                    8b:0f:ae:23:72:94:a8:23:db:a5:0b:a3:74:ec:e8:
                    cf:24:5a:0e:3a:f0:c5:94:f0:77:54:85:7f:52:a0:
                    2d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:4D:67:06:DC:E0:08:B3:2B:A9:87:E4:5C:7A:A0:B3:62:57:28:88
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/3230392e3230302e3233342e302f32342d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:87:74:20:93:bf:15:e3:46:7e:31:15:58:ea:b9:3c:1d:b9:
         af:94:1d:06:36:f5:d0:c2:cf:c4:1c:63:03:b8:c7:a5:89:7c:
         47:d3:92:60:c1:56:18:0d:6f:5e:53:1e:ff:72:96:90:70:6a:
         31:8f:5f:f2:78:70:bd:91:aa:af:c1:82:5e:aa:ae:27:ee:ca:
         6f:7e:eb:d5:0e:6b:03:2b:44:fd:6f:f7:2b:73:90:14:b9:a9:
         86:7d:29:32:8a:d4:83:77:f8:91:9a:8b:c4:bd:fc:66:47:c8:
         29:36:b1:9d:66:41:4e:58:c2:f3:e8:da:89:72:f5:7c:6e:26:
         d4:f0:1d:9b:a3:55:04:a9:16:02:6c:a7:de:84:1b:5d:56:e1:
         86:53:e6:06:b1:b9:28:19:f9:9c:3b:95:c3:98:2f:a0:20:14:
         18:db:d3:ff:4e:f5:54:1a:87:69:fb:be:b3:2a:56:32:14:81:
         d0:77:35:dd:65:02:18:71:e7:36:62:8a:24:89:31:1e:2f:0a:
         89:83:07:2b:87:fe:14:fd:b5:2a:14:f8:19:a4:32:a4:5b:b2:
         60:34:bb:8c:46:4a:4c:49:cb:87:f7:8c:62:d1:ec:60:83:18:
         15:16:e7:f4:a1:d5:d1:86:ff:af:12:45:16:62:86:9e:f4:d3:
         67:8f:11:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----