Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS209043.roa
File:                     AS209043.roa (raw, json)
Hash identifier:          X4M91t4Deql14hrRmNUfPeepUPG1cOxCSxZSAE3J/Z4=
Subject key identifier:   E7:D5:31:7F:B4:88:F9:12:45:62:3A:4D:8A:37:C5:48:EF:AE:93:F2
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       27464B9226420D0E64D341E06CE1D566253DF6C2
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS209043.roa
Signing time:             Tue 18 Apr 2023 11:55:14 +0000
ROA not before:           Tue 18 Apr 2023 11:50:14 +0000
ROA not after:            Tue 16 Apr 2024 11:55:14 +0000
asID:                     209043
IP address blocks:        64.50.170.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:46:4b:92:26:42:0d:0e:64:d3:41:e0:6c:e1:d5:66:25:3d:f6:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Apr 18 11:50:14 2023 GMT
            Not After : Apr 16 11:55:14 2024 GMT
        Subject: CN=E7D5317FB488F91245623A4D8A37C548EFAE93F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:71:cb:02:c0:2e:d3:a2:90:a5:c6:0a:27:34:
                    9b:fc:d5:c6:78:8e:5f:07:3e:5b:82:a2:1e:f5:56:
                    ba:be:45:bd:20:2b:01:97:90:5c:43:6f:41:95:dc:
                    d5:e4:2c:4d:bc:34:e7:19:75:f0:ce:a3:cb:47:28:
                    cb:e4:68:78:43:92:ca:d0:db:21:a3:27:39:dc:94:
                    78:cd:ca:63:cb:4f:2a:d1:43:1f:99:cb:01:7a:7b:
                    09:37:2c:22:2f:c6:02:2c:eb:bb:dd:33:71:fe:a2:
                    56:f5:8b:80:e7:6a:2b:2e:67:3e:bf:01:11:e5:29:
                    8f:58:46:08:be:d2:86:ca:28:82:cb:e8:a3:14:87:
                    c0:7f:cc:6b:59:d7:04:79:d8:37:25:52:e9:12:26:
                    ed:6c:73:5e:18:fe:ff:ec:d7:a2:de:e5:42:06:73:
                    0d:44:4a:a6:22:a4:01:68:9f:11:dd:50:2c:41:ca:
                    59:d0:0d:a4:23:e8:8c:a2:a8:ac:01:63:e9:91:5f:
                    6c:2c:3f:40:87:30:11:af:d4:1c:19:78:fc:47:e5:
                    d8:d9:c4:3e:8d:68:30:48:39:2c:a7:95:70:e1:90:
                    93:64:85:eb:dc:a3:1d:36:6c:55:b8:d8:ca:0d:eb:
                    8e:e7:f3:ad:1a:df:71:24:53:e5:85:7e:7a:9a:c6:
                    22:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:D5:31:7F:B4:88:F9:12:45:62:3A:4D:8A:37:C5:48:EF:AE:93:F2
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS209043.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.50.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:9d:78:2c:91:b9:44:de:ab:32:ec:6a:00:aa:18:81:cf:9f:
         2e:a8:1f:e0:dc:07:97:65:fc:30:29:ab:8b:64:9f:c1:2e:a4:
         0a:69:2f:af:3f:f6:85:54:02:9e:3b:f2:f3:dc:4e:79:6b:fd:
         42:ad:98:e5:54:ed:46:9a:d3:e4:00:96:26:a0:62:0d:a2:9f:
         73:e3:27:ee:53:00:5a:3e:21:36:76:69:22:99:c0:8d:ef:b7:
         61:71:c4:e0:df:e8:c3:f0:42:b8:85:51:16:c9:89:73:3d:ed:
         1d:8f:7f:06:53:9d:de:70:90:79:3d:22:63:16:96:cb:d7:b3:
         f3:a9:86:69:93:c3:a5:e8:2a:46:30:25:f0:16:8d:3f:f8:52:
         af:f6:0c:7c:50:6a:b0:62:db:86:53:cd:ab:d5:b2:4f:40:a4:
         a4:13:be:2b:cd:0d:97:42:83:86:17:f2:4f:ff:d1:c6:78:7c:
         4d:66:52:87:cf:e2:31:17:e5:5c:29:61:90:d1:f5:b1:fd:23:
         32:fd:c7:30:42:94:d8:04:96:62:e2:cf:37:d6:76:8c:d4:44:
         3a:04:fe:ea:e6:4f:1c:d0:ec:45:e4:b8:dd:ca:de:ba:b3:89:
         00:13:ea:1c:b2:2f:9a:6d:ff:da:38:7e:ff:6b:27:d9:0d:a9:
         0d:f2:75:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----