Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS212219.roa
File:                     AS212219.roa (raw, json)
Hash identifier:          urSabp0ZZOGFniX9S744Sm5ZAe7zKOdOw20qE1rNX4s=
Subject key identifier:   FC:E8:0C:20:03:30:2B:4F:D9:B0:B9:D9:3D:54:4D:DE:D1:29:A9:4E
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       41EF293A54EEF525B58917EBAFE162C36055BD78
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS212219.roa
Signing time:             Sun 19 Feb 2023 13:45:10 +0000
ROA not before:           Sun 19 Feb 2023 13:40:10 +0000
ROA not after:            Sun 18 Feb 2024 13:45:10 +0000
asID:                     212219
IP address blocks:        64.50.186.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:ef:29:3a:54:ee:f5:25:b5:89:17:eb:af:e1:62:c3:60:55:bd:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Feb 19 13:40:10 2023 GMT
            Not After : Feb 18 13:45:10 2024 GMT
        Subject: CN=FCE80C2003302B4FD9B0B9D93D544DDED129A94E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:dd:64:30:d1:c5:c4:33:87:48:a5:9a:a0:75:
                    1b:77:8a:38:ef:0a:ba:9d:db:12:f7:b0:e5:5b:ca:
                    8d:65:b5:43:f7:9a:e6:60:45:ef:eb:d3:13:28:c0:
                    74:76:3f:75:4e:e3:8f:ad:53:55:d0:22:18:33:a2:
                    62:31:32:00:14:66:fa:15:2c:64:f9:8b:86:8d:f8:
                    f8:05:29:0f:0b:c2:26:0d:64:08:95:08:60:89:b0:
                    24:a5:9e:2f:01:91:ea:6b:31:63:7b:a1:b1:b2:58:
                    b0:d3:88:44:e9:f2:f4:16:07:b3:fe:48:d8:0f:3d:
                    93:ab:e7:8e:b7:a2:86:3f:72:92:72:4a:c4:cc:14:
                    13:2e:1e:f3:16:6b:c7:73:b0:26:9b:4f:89:b3:e5:
                    b9:11:70:0c:e2:ff:1d:33:0c:ab:6b:d6:82:97:f4:
                    b2:86:58:72:ce:61:2e:f6:29:6f:11:e5:2b:5f:76:
                    8d:94:5a:e1:e6:97:07:b5:67:20:1f:0e:43:fa:0f:
                    e6:2a:21:2e:6d:74:62:42:5a:22:9a:ec:82:12:ee:
                    79:d2:cd:66:b9:9d:5f:23:55:90:9a:4d:7e:f2:70:
                    20:d5:e4:40:84:ec:55:82:19:f9:33:fe:57:6d:19:
                    30:87:e3:15:67:6e:4f:e9:3a:83:66:af:89:36:8d:
                    9f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:E8:0C:20:03:30:2B:4F:D9:B0:B9:D9:3D:54:4D:DE:D1:29:A9:4E
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS212219.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.50.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:f9:b7:06:d7:59:6e:c0:ee:3c:c3:d7:b5:ca:bd:b2:67:53:
         09:97:9a:de:38:93:c4:e8:66:40:fe:c0:67:48:df:53:a2:7b:
         05:a2:37:d8:3a:3a:f5:1c:f3:02:36:61:f5:83:02:ef:3a:5b:
         cf:f0:a7:a6:10:2f:a4:1d:66:3d:09:c2:49:d8:20:f0:16:34:
         cc:82:d5:9a:10:f6:08:a8:e2:30:58:01:e7:48:d1:f3:5d:9c:
         53:89:5a:30:fb:79:94:74:af:2d:6f:d5:9c:18:8c:e9:cf:58:
         ff:dd:3f:60:c3:ca:f1:fc:cb:17:93:16:52:f3:e0:1d:33:d4:
         96:3d:36:19:86:1e:43:26:98:82:03:42:90:15:43:77:7e:f9:
         c8:fb:3a:aa:70:ef:33:b4:33:14:8d:41:47:71:11:09:19:b5:
         6b:21:0b:74:0f:c9:ba:fc:54:d2:d1:a9:09:3b:7e:d2:13:9a:
         da:26:10:00:89:9d:d6:71:61:92:58:f6:d8:4a:30:df:7f:d3:
         1d:4c:9a:66:d9:5f:15:b6:25:e8:63:1f:f7:58:73:1b:2b:96:
         a5:2f:6a:f7:1c:2d:c4:6f:ac:48:c6:35:27:cb:54:5c:37:29:
         bc:a9:c8:c9:51:9f:9f:c1:12:60:aa:fd:e8:3f:ff:0d:f4:9c:
         48:26:23:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----