Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS200482.roa
File:                     AS200482.roa (raw, json)
Hash identifier:          j+LfmLe85tNyFkpteu5MyRcLYi7iTbCRd29Sc5q3d3c=
Subject key identifier:   53:AD:EA:B8:D1:D1:EA:A6:2E:D4:A1:F7:BF:B2:85:5A:06:CF:80:D9
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       24896C6F2961368FB09B1334796C43213E21A2C2
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS200482.roa
Signing time:             Tue 24 Jan 2023 10:06:41 +0000
ROA not before:           Tue 24 Jan 2023 10:01:41 +0000
ROA not after:            Tue 23 Jan 2024 10:06:41 +0000
asID:                     200482
IP address blocks:        64.50.166.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:89:6c:6f:29:61:36:8f:b0:9b:13:34:79:6c:43:21:3e:21:a2:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jan 24 10:01:41 2023 GMT
            Not After : Jan 23 10:06:41 2024 GMT
        Subject: CN=53ADEAB8D1D1EAA62ED4A1F7BFB2855A06CF80D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ab:4e:fe:01:7c:f4:c4:d9:6d:ee:f4:33:ce:
                    b3:02:9e:47:66:ec:74:2f:5e:32:d1:07:17:67:f1:
                    a0:f9:9b:ae:d2:13:65:0f:2a:0d:29:f0:86:5a:d2:
                    ab:3a:88:c8:cb:68:d1:04:5c:e4:3e:88:20:7b:e5:
                    1f:4a:fb:21:62:01:e5:74:bf:bb:b2:fc:cf:f9:42:
                    ab:87:59:10:56:1d:da:70:97:78:4a:7b:16:23:26:
                    d8:7f:e2:20:4f:22:35:ab:4b:e0:a1:d7:03:03:a8:
                    b1:79:2c:e1:3a:75:03:88:19:7d:bc:ba:e2:31:46:
                    ce:e8:ca:aa:61:cd:15:3d:2b:83:88:3b:37:71:b0:
                    11:6d:8e:11:91:e2:c7:b4:4e:ea:cb:e1:e6:0c:b2:
                    c2:89:89:7b:a5:61:27:23:36:00:ab:85:de:22:0f:
                    93:b1:0f:6f:6f:b9:85:bf:66:bd:ac:fa:e9:32:ce:
                    29:fa:81:c1:9e:27:5e:44:50:8a:51:37:1f:cd:18:
                    33:3a:6b:8f:e5:42:24:bf:80:a3:3b:90:6a:e5:9c:
                    c9:0c:34:12:a1:9a:99:f1:21:00:1b:28:19:32:06:
                    4e:6f:00:c3:b8:2d:5f:1e:75:47:28:40:70:aa:63:
                    50:11:8d:ca:91:30:71:82:5f:39:c9:26:ca:1d:21:
                    0a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:AD:EA:B8:D1:D1:EA:A6:2E:D4:A1:F7:BF:B2:85:5A:06:CF:80:D9
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS200482.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.50.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:8c:af:d3:c4:ff:a7:75:10:81:1d:e4:94:9d:27:bc:d8:dc:
         78:f0:56:1e:b1:3d:6c:0e:05:81:86:99:64:4b:fd:73:33:31:
         eb:b8:a4:15:bb:0c:07:9f:47:2b:17:02:a3:6f:ae:d0:16:22:
         fa:aa:37:b5:0a:6d:fa:2e:bc:a8:ec:82:10:e7:8f:58:bc:1d:
         8d:c5:cc:93:18:62:30:a2:ea:31:e6:46:d0:23:d7:a4:7c:72:
         53:03:62:c8:41:83:f6:50:e4:fa:a4:40:3c:7c:88:86:73:b3:
         eb:33:bf:7a:00:de:d3:85:69:27:8b:fb:88:c3:a0:f6:0a:b4:
         78:bd:46:a1:7f:c0:c4:ab:bf:73:18:6d:15:a4:a5:5f:71:4f:
         24:61:ef:d9:6e:ee:17:75:5f:68:f0:1a:81:a6:55:c4:81:22:
         29:ab:ff:2e:3a:56:f4:e1:6d:1a:e8:4e:3f:d6:fd:d2:ba:70:
         be:d0:9a:c0:d6:c7:09:22:1c:7b:1d:91:ed:19:b3:e6:01:5f:
         89:66:d3:ba:5c:b4:aa:53:d8:8e:47:3b:ad:56:64:d5:0d:1e:
         c7:11:c6:8e:e4:71:d1:42:72:5d:fc:bd:7c:b4:1f:bf:2c:36:
         e2:a1:80:e4:cc:07:5d:7e:7d:ef:d0:28:21:f6:01:2e:ae:f8:
         44:34:d8:0a
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUJIlsbylhNo+wmxM0eWxDIT4hosIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy
YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjMwMTI0MTAwMTQxWhcNMjQwMTIzMTAwNjQx
WjAzMTEwLwYDVQQDEyg1M0FERUFCOEQxRDFFQUE2MkVENEExRjdCRkIyODU1QTA2
Q0Y4MEQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKtO/gF89MTZ
be70M86zAp5HZux0L14y0QcXZ/Gg+Zuu0hNlDyoNKfCGWtKrOojIy2jRBFzkPogg
e+UfSvshYgHldL+7svzP+UKrh1kQVh3acJd4SnsWIybYf+IgTyI1q0vgodcDA6ix
eSzhOnUDiBl9vLriMUbO6MqqYc0VPSuDiDs3cbARbY4RkeLHtE7qy+HmDLLCiYl7
pWEnIzYAq4XeIg+TsQ9vb7mFv2a9rPrpMs4p+oHBnideRFCKUTcfzRgzOmuP5UIk
v4CjO5Bq5ZzJDDQSoZqZ8SEAGygZMgZObwDDuC1fHnVHKEBwqmNQEY3KkTBxgl85
ySbKHSEKCQIDAQABo4ICfzCCAnswHQYDVR0OBBYEFFOt6rjR0eqmLtSh97+yhVoG
z4DZMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv
NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0
OTBkMzMvMS9BUzIwMDQ4Mi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAEAypjANBgkqhkiG9w0BAQsFAAOC
AQEAdoyv08T/p3UQgR3klJ0nvNjcePBWHrE9bA4FgYaZZEv9czMx67ikFbsMB59H
KxcCo2+u0BYi+qo3tQpt+i68qOyCEOePWLwdjcXMkxhiMKLqMeZG0CPXpHxyUwNi
yEGD9lDk+qRAPHyIhnOz6zO/egDe04VpJ4v7iMOg9gq0eL1GoX/AxKu/cxhtFaSl
X3FPJGHv2W7uF3VfaPAagaZVxIEiKav/LjpW9OFtGuhOP9b90rpwvtCawNbHCSIc
ex2R7Rmz5gFfiWbTuly0qlPYjkc7rVZk1Q0exxHGjuRx0UJyXfy9fLQfvyw24qGA
5MwHXX5979AoIfYBLq74RDTYCg==
-----END CERTIFICATE-----