Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/3230392e3230302e3235352e302f32342d3234203d3e20323131303631.roa
File:                     3230392e3230302e3235352e302f32342d3234203d3e20323131303631.roa (raw, json)
Hash identifier:          r/9DminiSqq6GONMCnfVHBRjy8XUlWkC1M8c6YfNaFI=
Subject key identifier:   C7:8B:70:80:26:D7:88:1A:BF:8F:6E:BF:4D:EA:DD:F6:F4:CF:62:26
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       6C7E8523B0673C4EF17227E351C23D657E5821B4
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/3230392e3230302e3235352e302f32342d3234203d3e20323131303631.roa
Signing time:             Mon 28 Nov 2022 11:21:59 +0000
ROA not before:           Mon 28 Nov 2022 11:16:59 +0000
ROA not after:            Mon 27 Nov 2023 11:21:59 +0000
asID:                     211061
IP address blocks:        209.200.255.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:7e:85:23:b0:67:3c:4e:f1:72:27:e3:51:c2:3d:65:7e:58:21:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Nov 28 11:16:59 2022 GMT
            Not After : Nov 27 11:21:59 2023 GMT
        Subject: CN=C78B708026D7881ABF8F6EBF4DEADDF6F4CF6226
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:29:d5:c8:25:50:c0:2a:f3:a9:5e:9a:d5:ce:
                    68:6b:d4:64:23:b8:83:52:23:52:60:1a:41:f2:69:
                    43:3e:53:54:82:dc:9f:d5:57:94:48:4e:d9:cf:c5:
                    58:e8:1d:ba:27:c8:e1:ad:11:53:56:66:6c:4e:6e:
                    d4:ce:f3:f0:9f:a0:98:37:63:8d:4e:7f:5c:e4:8d:
                    20:d7:7c:6a:11:30:c7:10:eb:7a:95:6a:34:3d:9e:
                    5f:50:26:d3:9e:d9:e6:75:3a:9f:52:bd:11:62:3b:
                    8e:3b:6a:69:0c:56:de:d6:ab:ea:b7:b1:76:c1:c9:
                    fe:7e:29:d3:4d:18:83:eb:84:33:b9:db:5b:1e:45:
                    ed:51:9d:75:bc:74:9a:52:9a:30:eb:ed:bb:d8:f1:
                    5e:9c:b2:81:74:11:8c:9c:d5:c0:41:03:53:65:9a:
                    4e:ec:d5:77:dd:7b:21:d1:ee:c3:31:76:e3:45:40:
                    87:25:a8:a2:e4:b5:db:54:20:17:30:97:f5:48:7d:
                    9d:04:ad:a7:4d:ef:4b:e2:ff:2d:2c:66:c9:35:63:
                    31:6f:81:37:0a:81:ae:e9:94:74:9f:e5:be:65:aa:
                    e9:8e:4a:b0:29:e3:19:a8:3a:22:51:e3:4f:54:b9:
                    34:f8:82:36:a9:69:05:52:fa:42:2a:c4:13:37:81:
                    b2:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:8B:70:80:26:D7:88:1A:BF:8F:6E:BF:4D:EA:DD:F6:F4:CF:62:26
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/3230392e3230302e3235352e302f32342d3234203d3e20323131303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:9a:2f:fa:5d:ab:ba:b8:c1:39:3c:e0:e6:e6:3e:aa:1a:8f:
         d4:1f:e9:73:cb:a9:0c:12:29:b6:fe:34:5b:1a:88:af:59:6b:
         e1:1b:b5:1d:10:26:64:6d:1e:bc:e4:01:6c:2a:0c:0c:ee:9a:
         fd:95:60:5d:ec:de:03:8b:7c:6a:8a:4e:17:fd:2a:41:5a:eb:
         e0:e1:53:96:44:ce:27:28:1e:dc:c2:c9:37:2d:b1:52:a8:1c:
         58:14:11:16:0a:cb:95:2f:97:ab:3f:c7:b3:20:51:4b:15:4e:
         20:4c:a6:22:df:b4:cc:8b:be:c4:c2:40:fc:5b:20:1b:a6:de:
         ac:30:72:3e:ca:2d:9f:56:dd:b4:7c:eb:4f:3e:87:ea:b3:a3:
         d4:5c:b2:f2:ab:46:9d:03:be:38:64:75:5c:2a:8d:9a:1c:c8:
         53:6e:f5:02:01:87:f5:f6:f2:9d:aa:33:30:51:d5:42:cc:d7:
         73:bc:cf:8a:b8:57:d6:08:98:de:fb:97:26:5b:4c:34:63:79:
         8f:a5:03:3b:de:3c:49:c6:07:5a:48:7d:f2:06:a1:30:4c:86:
         82:bf:a6:13:ba:7d:a5:19:40:fb:6b:ae:39:26:2f:3a:64:33:
         58:b7:50:45:3a:48:fa:05:22:1a:92:b2:14:89:88:db:f1:e7:
         30:31:45:38
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgIUbH6FI7BnPE7xcifjUcI9ZX5YIbQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy
YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjIxMTI4MTExNjU5WhcNMjMxMTI3MTEyMTU5
WjAzMTEwLwYDVQQDEyhDNzhCNzA4MDI2RDc4ODFBQkY4RjZFQkY0REVBRERGNkY0
Q0Y2MjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSnVyCVQwCrz
qV6a1c5oa9RkI7iDUiNSYBpB8mlDPlNUgtyf1VeUSE7Zz8VY6B26J8jhrRFTVmZs
Tm7UzvPwn6CYN2ONTn9c5I0g13xqETDHEOt6lWo0PZ5fUCbTntnmdTqfUr0RYjuO
O2ppDFbe1qvqt7F2wcn+finTTRiD64QzudtbHkXtUZ11vHSaUpow6+272PFenLKB
dBGMnNXAQQNTZZpO7NV33Xsh0e7DMXbjRUCHJaii5LXbVCAXMJf1SH2dBK2nTe9L
4v8tLGbJNWMxb4E3CoGu6ZR0n+W+ZarpjkqwKeMZqDoiUeNPVLk0+II2qWkFUvpC
KsQTN4GyBwIDAQABo4ICtjCCArIwHQYDVR0OBBYEFMeLcIAm14gav49uv03q3fb0
z2ImMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv
NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MjEx
M2VlYTQ5MGQzMy8xLzMyMzAzOTJlMzIzMDMwMmUzMjM1MzUyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMjMxMzEzMDM2MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADRyP8wDQYJKoZIhvcN
AQELBQADggEBAEiaL/pdq7q4wTk84ObmPqoaj9Qf6XPLqQwSKbb+NFsaiK9Za+Eb
tR0QJmRtHrzkAWwqDAzumv2VYF3s3gOLfGqKThf9KkFa6+DhU5ZEzicoHtzCyTct
sVKoHFgUERYKy5Uvl6s/x7MgUUsVTiBMpiLftMyLvsTCQPxbIBum3qwwcj7KLZ9W
3bR8608+h+qzo9RcsvKrRp0DvjhkdVwqjZocyFNu9QIBh/X28p2qMzBR1ULM13O8
z4q4V9YImN77lyZbTDRjeY+lAzvePEnGB1pIffIGoTBMhoK/phO6faUZQPtrrjkm
LzpkM1i3UEU6SPoFIhqSshSJiNvx5zAxRTg=
-----END CERTIFICATE-----