Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS210439.roa
File:                     AS210439.roa (raw, json)
Hash identifier:          el3ZEIbT7okjNQjQIB4S/X1Xx8isLgQ0j1FkGjMvkdQ=
Subject key identifier:   AC:E4:71:D2:84:3B:4A:59:B4:13:4D:33:97:AE:6B:34:BD:D5:03:58
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       248443CDAE708276F4243F2BD9EADDC13B5A430F
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS210439.roa
Signing time:             Tue 14 Mar 2023 14:00:11 +0000
ROA not before:           Tue 14 Mar 2023 13:55:11 +0000
ROA not after:            Tue 12 Mar 2024 14:00:11 +0000
asID:                     210439
IP address blocks:        216.97.225.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:84:43:cd:ae:70:82:76:f4:24:3f:2b:d9:ea:dd:c1:3b:5a:43:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Mar 14 13:55:11 2023 GMT
            Not After : Mar 12 14:00:11 2024 GMT
        Subject: CN=ACE471D2843B4A59B4134D3397AE6B34BDD50358
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6c:6d:60:48:79:05:0a:63:18:cc:dd:9c:c5:
                    b2:a7:de:e9:43:9b:b4:d6:28:b2:69:be:2a:24:1d:
                    58:f8:9c:3d:8c:2f:b9:fb:73:b1:ef:23:c3:d7:3c:
                    47:bd:4e:a1:58:70:4d:80:f6:90:a6:63:48:ee:48:
                    8d:55:37:8d:bf:b8:1a:7b:ff:52:6d:82:b3:3f:89:
                    17:57:b7:90:f7:e7:c0:19:0d:87:77:1b:f6:6d:bb:
                    33:4a:84:10:80:1b:56:a3:df:8d:c7:de:03:4b:5b:
                    c3:38:99:14:20:37:92:3d:df:37:61:a6:a4:28:80:
                    d4:75:c3:ea:d6:78:a3:9b:ee:fa:0a:de:0c:68:11:
                    a9:95:af:fd:f5:3c:8d:b4:5b:a3:19:f8:44:bf:31:
                    07:62:f1:e4:95:85:f6:69:56:41:85:4a:5a:6c:cf:
                    5b:0d:f7:d5:d9:12:85:f2:4c:5d:f6:aa:57:96:8e:
                    63:a2:22:11:09:3d:5a:ac:dd:27:07:fd:95:91:1f:
                    cd:cf:56:da:8b:dd:ea:4a:a5:86:10:77:03:01:d0:
                    62:c6:a1:4f:89:1a:ea:6e:bd:af:9e:9b:ea:31:0a:
                    c3:f1:0c:50:7e:36:fe:bb:37:79:36:af:d2:4f:92:
                    60:00:36:9a:46:61:a1:62:bb:ad:49:c4:5f:9a:8f:
                    86:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:E4:71:D2:84:3B:4A:59:B4:13:4D:33:97:AE:6B:34:BD:D5:03:58
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS210439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.97.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:ed:12:84:41:23:5a:2a:6a:f1:00:72:22:b2:f7:54:c1:f9:
         78:73:be:f4:d5:f4:eb:36:e8:66:5c:0c:78:98:2b:83:08:a9:
         c0:c1:fc:ff:21:5e:aa:49:ec:3e:7e:df:4f:0a:d3:e6:10:01:
         a4:c0:f6:fe:3e:99:f8:1d:51:e4:23:73:e6:5e:f3:aa:37:6a:
         42:d3:07:80:e8:4a:2a:dc:08:9a:96:a5:3f:42:b2:06:fb:2b:
         01:b7:2c:10:7b:dd:02:1c:c1:29:11:cc:e5:03:49:06:86:c0:
         5e:bc:53:9d:68:bf:d1:68:ae:bd:55:60:47:b7:db:a5:1d:ec:
         8f:8e:16:71:f3:56:b0:d4:ea:7a:11:a1:e3:77:34:07:d9:bf:
         4a:e4:0d:2b:e0:26:b4:7a:1c:3e:0b:05:25:ce:12:f8:51:5f:
         b9:84:79:ee:9a:a4:0d:62:87:21:8d:ef:bd:a8:74:c2:b1:90:
         24:52:c6:78:eb:6c:29:7b:e6:91:68:9b:ee:e5:22:6a:11:2d:
         7a:65:86:e1:c6:0b:12:98:00:db:9d:d9:75:f5:e4:04:8d:5f:
         33:3f:fb:ed:92:74:eb:ab:1d:d0:95:02:4d:fe:a7:f1:01:6c:
         11:a6:7d:76:e3:a3:93:70:b7:da:73:3e:19:a9:3e:2f:9e:c5:
         23:f0:fb:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----