Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/3230392e3230302e3234362e302f32342d3234203d3e203630373231.roa
File:                     3230392e3230302e3234362e302f32342d3234203d3e203630373231.roa (raw, json)
Hash identifier:          e6PkzBKcowNTNkvt9oU63bg6/GUUk6Ed4Z2F4ORDEso=
Subject key identifier:   1E:B8:DC:46:A5:FE:CD:B2:87:76:83:21:46:14:C1:7B:B0:E0:9D:8A
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       5E8A8F773FCAEC4EBDC08B0E5022C9F68134C61E
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/3230392e3230302e3234362e302f32342d3234203d3e203630373231.roa
Signing time:             Mon 28 Nov 2022 11:22:01 +0000
ROA not before:           Mon 28 Nov 2022 11:17:01 +0000
ROA not after:            Mon 27 Nov 2023 11:22:01 +0000
asID:                     60721
IP address blocks:        209.200.246.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:8a:8f:77:3f:ca:ec:4e:bd:c0:8b:0e:50:22:c9:f6:81:34:c6:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Nov 28 11:17:01 2022 GMT
            Not After : Nov 27 11:22:01 2023 GMT
        Subject: CN=1EB8DC46A5FECDB2877683214614C17BB0E09D8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:0b:e0:a0:1d:2b:1e:34:bd:e1:c4:69:29:ac:
                    5a:40:e3:97:69:56:87:76:40:d9:b7:34:a5:dd:44:
                    3e:d5:04:fe:ca:35:87:e4:e0:0b:5a:dd:99:b8:c2:
                    b2:2a:e2:bc:cb:a1:15:39:3a:4e:33:83:5d:56:55:
                    47:9a:08:1d:5d:4c:dc:96:dd:87:6d:98:aa:db:0b:
                    7e:f4:7e:cb:1b:55:77:b4:9d:2d:20:d7:e1:b4:5a:
                    a3:25:ff:19:0c:82:f7:5d:44:29:5c:f6:3a:ad:f2:
                    2e:7d:75:25:ee:12:79:f6:e3:8f:40:93:72:79:1d:
                    f0:94:2e:b4:f1:a8:9f:28:20:b1:82:32:a1:34:5f:
                    8c:92:70:e3:ec:a4:fc:08:6a:4c:87:61:9f:ac:ef:
                    a5:7d:45:a6:7f:30:a0:0d:79:d2:48:56:12:11:99:
                    b5:de:cf:6b:1e:19:48:bc:5f:c5:8c:00:f6:01:4a:
                    76:b6:8b:db:62:bd:b7:4b:d4:b3:5b:8e:34:39:da:
                    6f:4d:e9:0d:dd:74:b5:d3:03:01:df:ad:40:7f:fd:
                    94:39:02:ec:c2:aa:15:bc:12:de:0d:33:19:79:82:
                    97:1e:f0:56:50:5c:bf:dd:cd:08:5e:83:20:26:35:
                    ad:f6:44:f2:c5:f0:d8:44:e2:32:a7:e1:bc:3d:30:
                    63:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:B8:DC:46:A5:FE:CD:B2:87:76:83:21:46:14:C1:7B:B0:E0:9D:8A
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/3230392e3230302e3234362e302f32342d3234203d3e203630373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:28:40:2a:07:db:a5:06:ee:1e:56:06:84:54:ec:34:8c:3b:
         51:80:67:9a:ec:55:50:82:44:91:a5:25:5d:5c:0e:ee:a3:19:
         c6:71:6f:a9:e2:21:bb:72:3f:18:ea:8d:78:b8:3b:f8:31:f1:
         65:94:83:65:5e:49:87:5b:ee:12:47:1c:8c:e0:fd:ed:41:44:
         ff:30:57:b4:75:cc:af:f6:d0:13:7f:74:30:6c:14:c1:41:ba:
         80:15:64:ca:7a:a9:f2:0d:73:08:0d:43:f7:27:32:5a:c2:1d:
         a0:61:28:be:21:95:8c:c4:a5:8a:89:a8:5b:c9:d2:4f:8f:1a:
         9f:c8:5d:3f:e8:49:fc:e8:48:7c:7f:01:0c:61:9d:61:66:d2:
         98:0f:7e:66:00:3a:8f:87:33:ba:33:ec:30:ad:02:55:ff:d7:
         a3:db:de:ca:c2:55:6c:49:47:b7:a1:0c:4f:c0:be:29:97:75:
         98:70:96:c3:4c:41:a8:3c:e2:15:29:d2:84:3f:a9:52:47:b7:
         66:07:d2:d5:f6:e6:bc:b0:c8:90:14:a0:5b:07:49:5a:bb:55:
         ba:40:12:4b:bd:0f:48:d7:58:3d:4f:0e:48:1b:c8:60:b1:00:
         84:eb:c0:5f:6c:8a:de:91:b3:3f:5d:81:31:86:ca:d5:aa:f3:
         e3:6a:f2:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----