Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/38392e33352e39342e302f32342d3234203d3e20323131303631.roa
File:                     38392e33352e39342e302f32342d3234203d3e20323131303631.roa (raw, json)
Hash identifier:          Yfx+U+3ACmKl9oS5p8GgbpQi9zWj4l/65vngtNVAueU=
Subject key identifier:   8B:31:C0:42:4B:D0:5A:C5:1A:65:00:49:9E:BE:FC:73:29:99:9F:E4
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       28DED7F47FE60A47AC2D5CE7C78F51B05928129B
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/38392e33352e39342e302f32342d3234203d3e20323131303631.roa
Signing time:             Mon 28 Nov 2022 11:21:59 +0000
ROA not before:           Mon 28 Nov 2022 11:16:59 +0000
ROA not after:            Mon 27 Nov 2023 11:21:59 +0000
asID:                     211061
IP address blocks:        89.35.94.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:de:d7:f4:7f:e6:0a:47:ac:2d:5c:e7:c7:8f:51:b0:59:28:12:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Nov 28 11:16:59 2022 GMT
            Not After : Nov 27 11:21:59 2023 GMT
        Subject: CN=8B31C0424BD05AC51A6500499EBEFC7329999FE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:84:16:60:30:c9:05:4e:39:98:bb:fe:14:d5:
                    69:65:f6:ae:9a:5c:f1:22:aa:7c:04:ed:4e:47:8c:
                    db:17:56:6b:47:58:06:e5:30:f6:c4:ea:b0:05:c8:
                    d7:5c:cb:f2:83:49:bd:3b:c1:17:f6:53:05:83:62:
                    c9:c2:c3:84:b9:e5:b7:55:36:48:b6:34:2f:4f:71:
                    e9:c0:d2:d7:db:c2:0b:cf:fc:a6:06:95:a7:a5:62:
                    63:ee:4e:95:82:e8:38:66:f1:32:14:50:c2:7d:82:
                    8d:b4:92:40:6a:af:cc:33:8a:3b:1d:60:ce:05:3d:
                    7a:ee:7d:8d:af:56:69:e0:38:5b:4d:af:e1:b9:50:
                    37:71:63:41:de:08:2c:b4:15:a7:86:00:7f:93:53:
                    c2:a1:dc:42:38:0d:f9:f3:9e:35:3b:c7:d3:0c:af:
                    69:28:56:01:dc:8a:d6:e6:45:41:52:14:6b:61:a5:
                    02:63:52:ec:26:8f:00:68:b3:e2:94:55:7d:aa:eb:
                    a6:20:a7:48:bd:3e:52:98:6b:a8:09:42:12:10:39:
                    22:29:9c:a7:f6:cf:d5:5d:6d:fd:2b:8d:82:69:fb:
                    0b:92:66:e8:62:6c:ee:6f:47:4b:d8:7e:e8:15:fd:
                    97:13:ed:3c:f3:52:2f:bb:7d:39:52:62:80:d0:97:
                    91:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:31:C0:42:4B:D0:5A:C5:1A:65:00:49:9E:BE:FC:73:29:99:9F:E4
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/38392e33352e39342e302f32342d3234203d3e20323131303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.35.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:d1:73:d2:a3:8b:bf:b7:c4:10:e8:54:5e:8b:1b:f5:83:ec:
         5b:1e:a3:16:0e:d8:45:80:1b:7b:aa:77:9d:a1:f4:a3:04:ab:
         f8:3e:17:c3:c1:60:29:fd:20:25:a6:57:8f:3a:90:12:9b:2d:
         1a:63:d4:43:da:0d:c0:55:03:a9:48:0a:f0:0e:69:e0:ca:0e:
         6e:a2:08:81:e3:36:55:f4:0b:08:36:3e:f8:6f:21:13:8a:8c:
         e7:3a:bf:5a:f6:79:01:d5:fb:11:c1:de:47:d0:63:67:4c:63:
         ea:49:db:71:21:61:e7:65:f2:4f:2c:f3:af:f0:69:45:ae:b1:
         15:e3:a1:bb:b0:24:36:31:32:79:55:7a:e5:13:cb:ca:1b:91:
         72:6d:1a:00:65:64:ee:cd:48:42:bd:b4:a0:7e:0c:64:4e:d1:
         32:ae:6e:d0:f5:ff:fc:8a:3b:2a:b2:0e:d3:92:30:8c:2f:8e:
         c1:8b:14:d3:c9:88:c0:bb:1b:df:87:27:97:0a:59:f0:cd:d9:
         8c:d6:7c:6f:97:4f:2d:95:4e:00:7d:d3:bc:33:d2:2c:2c:83:
         9c:51:88:a7:c2:d6:ad:48:7e:e1:f6:d8:ec:ac:80:c2:81:6c:
         e6:a9:9c:f1:3e:0c:04:bf:6e:d5:97:b7:31:01:01:71:83:79:
         7c:26:09:89
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUKN7X9H/mCkesLVznx49RsFkoEpswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy
YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjIxMTI4MTExNjU5WhcNMjMxMTI3MTEyMTU5
WjAzMTEwLwYDVQQDEyg4QjMxQzA0MjRCRDA1QUM1MUE2NTAwNDk5RUJFRkM3MzI5
OTk5RkU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4QWYDDJBU45
mLv+FNVpZfaumlzxIqp8BO1OR4zbF1ZrR1gG5TD2xOqwBcjXXMvyg0m9O8EX9lMF
g2LJwsOEueW3VTZItjQvT3HpwNLX28ILz/ymBpWnpWJj7k6Vgug4ZvEyFFDCfYKN
tJJAaq/MM4o7HWDOBT167n2Nr1Zp4DhbTa/huVA3cWNB3ggstBWnhgB/k1PCodxC
OA358541O8fTDK9pKFYB3IrW5kVBUhRrYaUCY1LsJo8AaLPilFV9quumIKdIvT5S
mGuoCUISEDkiKZyn9s/VXW39K42CafsLkmboYmzub0dL2H7oFf2XE+0881Ivu305
UmKA0JeRKwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFIsxwEJL0FrFGmUASZ6+/HMp
mZ/kMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv
NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MjEx
M2VlYTQ5MGQzMy8xLzM4MzkyZTMzMzUyZTM5MzQyZTMwMmYzMjM0MmQzMjM0MjAz
ZDNlMjAzMjMxMzEzMDM2MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABZI14wDQYJKoZIhvcNAQELBQAD
ggEBAFrRc9Kji7+3xBDoVF6LG/WD7FseoxYO2EWAG3uqd52h9KMEq/g+F8PBYCn9
ICWmV486kBKbLRpj1EPaDcBVA6lICvAOaeDKDm6iCIHjNlX0Cwg2PvhvIROKjOc6
v1r2eQHV+xHB3kfQY2dMY+pJ23EhYedl8k8s86/waUWusRXjobuwJDYxMnlVeuUT
y8obkXJtGgBlZO7NSEK9tKB+DGRO0TKubtD1//yKOyqyDtOSMIwvjsGLFNPJiMC7
G9+HJ5cKWfDN2YzWfG+XTy2VTgB907wz0iwsg5xRiKfC1q1IfuH22OysgMKBbOap
nPE+DAS/btWXtzEBAXGDeXwmCYk=
-----END CERTIFICATE-----