Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/3230392e3230302e3233392e302f32342d3234203d3e203631333137.roa
File:                     3230392e3230302e3233392e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          co6Ocd9jhuE9MResrn40bvft3hzvUNMbbH1+Fy7prnw=
Subject key identifier:   B9:9A:7D:6E:49:61:20:10:F4:CC:DC:13:21:46:9D:A9:F2:23:EE:BB
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       5B1B8CCBB181AAF3C3C9D4E65FC7D3ED78512E05
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/3230392e3230302e3233392e302f32342d3234203d3e203631333137.roa
Signing time:             Mon 28 Nov 2022 11:22:01 +0000
ROA not before:           Mon 28 Nov 2022 11:17:01 +0000
ROA not after:            Mon 27 Nov 2023 11:22:01 +0000
asID:                     61317
IP address blocks:        209.200.239.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:1b:8c:cb:b1:81:aa:f3:c3:c9:d4:e6:5f:c7:d3:ed:78:51:2e:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Nov 28 11:17:01 2022 GMT
            Not After : Nov 27 11:22:01 2023 GMT
        Subject: CN=B99A7D6E49612010F4CCDC1321469DA9F223EEBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ae:a3:e9:3c:2c:2e:58:df:3b:c1:42:94:5d:
                    9a:48:62:ef:8c:e4:39:b8:26:21:b6:80:98:69:37:
                    d9:07:9b:81:50:f3:72:79:a0:47:15:de:8d:f0:23:
                    38:11:2b:0e:90:27:38:da:85:68:63:71:10:f1:b7:
                    31:c5:05:bd:7d:4d:33:66:d7:d7:7e:a2:3f:eb:9d:
                    7d:49:4a:10:a3:67:94:e3:17:f0:5b:4b:3f:a7:c6:
                    59:7b:ee:94:f7:05:04:c3:71:a6:2d:bd:f4:c4:a7:
                    85:93:bc:26:f4:8b:d9:72:c3:b7:8e:61:e7:c0:9f:
                    d1:31:47:a6:66:70:f1:77:c7:56:92:c6:c7:8e:e5:
                    0d:6c:65:6d:39:33:ed:27:66:d8:5e:06:09:cd:ce:
                    71:8e:26:bf:6e:7a:68:96:f2:92:49:77:cd:1c:5c:
                    88:ef:e6:4b:c0:7b:8d:5f:3d:09:c0:e1:9e:0d:60:
                    12:f4:f4:99:44:0d:1f:7b:49:8a:b7:78:58:c6:bb:
                    02:5b:7c:f3:0a:30:87:c7:53:b6:b5:97:ff:a9:91:
                    cf:58:75:0f:a1:61:77:f3:2f:36:91:e6:32:f5:1b:
                    a9:6b:b7:13:d6:d1:92:5a:6f:13:0a:92:e0:71:7b:
                    1c:d2:c6:f9:ca:b8:b8:e3:23:47:cb:44:61:19:0e:
                    a4:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:9A:7D:6E:49:61:20:10:F4:CC:DC:13:21:46:9D:A9:F2:23:EE:BB
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/3230392e3230302e3233392e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:64:70:fe:35:92:c1:53:18:fb:45:d9:19:a5:be:51:1a:f8:
         cf:e4:bd:b5:c3:b0:12:bd:93:94:96:bf:51:55:83:18:61:79:
         11:3a:8b:5a:60:49:e0:05:6b:e2:cd:ea:07:af:41:f6:2b:54:
         28:41:3c:e4:39:0e:4e:8d:e2:09:0d:1d:0d:44:e5:b7:08:8e:
         52:92:41:ad:5d:04:0f:7c:9f:93:50:db:d1:47:34:e4:f1:47:
         bc:dc:e7:1a:d0:6d:71:26:50:14:2b:42:4f:15:c8:6f:f8:e1:
         06:84:1e:72:98:ad:d5:07:18:fb:25:af:42:d4:85:51:2a:0a:
         ef:fe:fc:ca:4e:9b:fe:1a:33:13:3d:6b:3c:9e:ff:29:e2:5b:
         4c:dc:a9:c7:9c:4f:83:5f:43:45:a6:3f:88:a1:0f:ac:49:28:
         ec:9a:59:84:27:8e:cc:33:b2:60:0f:cd:3e:d0:58:95:ff:c6:
         a8:11:03:a7:05:2a:77:ca:e3:35:f7:6a:0e:8a:7d:b8:51:09:
         b8:7b:c7:fd:75:2b:df:e7:84:60:06:05:29:bc:a6:7f:f6:fc:
         39:82:95:41:bf:9c:1b:62:a7:97:7e:14:e2:25:48:ac:9c:60:
         05:16:70:ca:83:30:66:cf:19:69:a3:89:28:fd:5a:4b:e4:80:
         97:bb:9c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----