Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/3230392e3230302e3234382e302f32322d3234203d3e20323131353835.roa
File:                     3230392e3230302e3234382e302f32322d3234203d3e20323131353835.roa (raw, json)
Hash identifier:          3X7VS4buO7LHYT4QhPCfWo5S9T35/4SqLu7dntZSM00=
Subject key identifier:   BE:C8:4F:A4:0F:B4:D9:8E:E8:E6:46:77:0C:75:73:97:78:4B:F7:0D
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       1FE908DE8528AACD8D041790CB7313B3EC5935B8
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/3230392e3230302e3234382e302f32322d3234203d3e20323131353835.roa
Signing time:             Mon 28 Nov 2022 11:22:01 +0000
ROA not before:           Mon 28 Nov 2022 11:17:01 +0000
ROA not after:            Mon 27 Nov 2023 11:22:01 +0000
asID:                     211585
IP address blocks:        209.200.248.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:e9:08:de:85:28:aa:cd:8d:04:17:90:cb:73:13:b3:ec:59:35:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Nov 28 11:17:01 2022 GMT
            Not After : Nov 27 11:22:01 2023 GMT
        Subject: CN=BEC84FA40FB4D98EE8E646770C757397784BF70D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3d:a5:ec:c6:af:6e:61:ee:43:f4:d1:51:27:
                    5a:82:34:91:5d:74:dd:d9:eb:ee:20:51:0a:41:43:
                    dc:1e:41:93:96:68:9c:2b:91:2f:2d:a0:6b:fe:fb:
                    26:f5:70:50:1f:4b:53:57:90:33:54:45:ff:fc:54:
                    db:32:5e:7b:fb:a7:c8:1c:e6:2e:74:e3:2e:6d:87:
                    f8:7c:b1:0f:64:6a:9f:2b:51:e3:e9:0a:56:c7:a4:
                    34:80:3f:54:9c:53:3e:8f:7e:f6:29:9a:81:3e:fb:
                    7d:29:52:59:3e:93:65:f3:d0:76:2b:c0:9a:cc:ea:
                    6c:9a:f6:a3:6a:9a:5c:c8:99:64:0f:14:a8:17:95:
                    98:c3:9b:51:19:b1:f8:a4:ad:24:c6:f2:b8:6f:c0:
                    d2:91:33:31:32:a4:a3:0b:1e:03:73:f4:d7:b0:c8:
                    cf:27:3b:52:99:5d:d6:d7:9e:b3:d9:9f:3b:b2:99:
                    82:72:e3:6e:1e:d0:f9:af:6e:29:6a:f9:a4:b7:41:
                    bb:33:29:dd:45:43:54:49:1b:fc:8f:d4:57:b4:05:
                    e9:d2:23:c3:e8:66:73:5a:c6:30:2a:68:74:cb:aa:
                    fa:6a:13:c8:9d:3d:64:fc:1a:72:33:59:8d:69:13:
                    c0:b3:89:10:1d:c6:53:a5:df:18:56:0d:be:42:5a:
                    99:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:C8:4F:A4:0F:B4:D9:8E:E8:E6:46:77:0C:75:73:97:78:4B:F7:0D
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/3230392e3230302e3234382e302f32322d3234203d3e20323131353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:42:7c:04:a9:6f:69:6c:90:1e:d5:8a:81:51:68:a9:06:3d:
         00:ce:fc:4a:99:ec:4a:db:9b:41:07:b1:a8:6e:93:42:71:27:
         00:9b:87:66:e9:46:d9:6d:c4:04:ab:27:1c:70:e9:42:4b:53:
         49:24:d3:61:5b:ac:5f:aa:10:18:44:b2:eb:6e:16:05:01:8b:
         36:e9:68:de:63:08:2d:49:41:87:e9:e2:59:18:6d:9b:cd:ed:
         16:9d:38:76:10:c2:72:2a:ac:54:6d:5f:a9:73:0b:bc:e9:cc:
         0a:43:52:8c:db:68:98:63:9c:2a:46:2e:a2:a8:2a:69:1a:78:
         25:8a:b4:27:6d:b7:a9:c5:55:b6:34:64:d6:f1:8f:a7:4e:06:
         97:d2:ae:8c:ef:c1:54:60:53:7c:04:0e:31:22:1e:e0:8c:50:
         5a:3a:5e:41:31:92:e7:57:23:31:73:7f:a2:cd:b1:84:44:95:
         35:e3:3d:0f:8d:25:0d:39:6a:cd:7c:c7:d4:1a:db:ed:78:9c:
         86:fc:d8:41:b0:38:b1:e9:b4:7c:4f:ea:38:2c:5e:14:44:0e:
         2c:69:2b:a4:0f:6d:40:04:6d:1b:34:bf:3b:8b:f9:bf:f4:6e:
         7e:ea:90:d3:f9:9e:26:ca:ef:d9:94:53:91:34:e8:7c:9e:b4:
         57:08:be:30
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgIUH+kI3oUoqs2NBBeQy3MTs+xZNbgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy
YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjIxMTI4MTExNzAxWhcNMjMxMTI3MTEyMjAx
WjAzMTEwLwYDVQQDEyhCRUM4NEZBNDBGQjREOThFRThFNjQ2NzcwQzc1NzM5Nzc4
NEJGNzBEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuT2l7MavbmHu
Q/TRUSdagjSRXXTd2evuIFEKQUPcHkGTlmicK5EvLaBr/vsm9XBQH0tTV5AzVEX/
/FTbMl57+6fIHOYudOMubYf4fLEPZGqfK1Hj6QpWx6Q0gD9UnFM+j372KZqBPvt9
KVJZPpNl89B2K8CazOpsmvajappcyJlkDxSoF5WYw5tRGbH4pK0kxvK4b8DSkTMx
MqSjCx4Dc/TXsMjPJztSmV3W156z2Z87spmCcuNuHtD5r24pavmkt0G7MyndRUNU
SRv8j9RXtAXp0iPD6GZzWsYwKmh0y6r6ahPInT1k/BpyM1mNaRPAs4kQHcZTpd8Y
Vg2+QlqZ6QIDAQABo4ICtjCCArIwHQYDVR0OBBYEFL7IT6QPtNmO6OZGdwx1c5d4
S/cNMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv
NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MjEx
M2VlYTQ5MGQzMy8xLzMyMzAzOTJlMzIzMDMwMmUzMjM0MzgyZTMwMmYzMjMyMmQz
MjM0MjAzZDNlMjAzMjMxMzEzNTM4MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALRyPgwDQYJKoZIhvcN
AQELBQADggEBADNCfASpb2lskB7VioFRaKkGPQDO/EqZ7Erbm0EHsahuk0JxJwCb
h2bpRtltxASrJxxw6UJLU0kk02FbrF+qEBhEsutuFgUBizbpaN5jCC1JQYfp4lkY
bZvN7RadOHYQwnIqrFRtX6lzC7zpzApDUozbaJhjnCpGLqKoKmkaeCWKtCdtt6nF
VbY0ZNbxj6dOBpfSrozvwVRgU3wEDjEiHuCMUFo6XkExkudXIzFzf6LNsYRElTXj
PQ+NJQ05as18x9Qa2+14nIb82EGwOLHptHxP6jgsXhREDixpK6QPbUAEbRs0vzuL
+b/0bn7qkNP5nibK79mUU5E06HyetFcIvjA=
-----END CERTIFICATE-----