Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3139322e3230392e36332e302f32342d3234203d3e2038313030.roa
File:                     3139322e3230392e36332e302f32342d3234203d3e2038313030.roa (raw, json)
Hash identifier:          HiE+yVnpXWP5kvNZtdQ7Pomw2htGXrW3COFlf3VhMVU=
Subject key identifier:   61:42:C5:56:88:E4:F4:78:45:3B:47:94:4E:B5:19:7E:58:E0:BF:DE
Certificate issuer:       /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial:       415026399C1E54CD6B402D26FF4D702D1BD7D418
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3139322e3230392e36332e302f32342d3234203d3e2038313030.roa
Signing time:             Tue 03 Jan 2023 02:07:03 +0000
ROA not before:           Tue 03 Jan 2023 02:02:03 +0000
ROA not after:            Tue 02 Jan 2024 02:07:03 +0000
asID:                     8100
IP address blocks:        192.209.63.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:50:26:39:9c:1e:54:cd:6b:40:2d:26:ff:4d:70:2d:1b:d7:d4:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
        Validity
            Not Before: Jan  3 02:02:03 2023 GMT
            Not After : Jan  2 02:07:03 2024 GMT
        Subject: CN=6142C55688E4F478453B47944EB5197E58E0BFDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:89:58:af:23:28:d1:5b:5c:14:dc:49:00:cc:
                    b4:68:f2:3c:cc:c9:34:71:00:45:3f:f6:f7:43:c6:
                    fb:a8:e3:8b:88:46:1b:15:ff:88:ce:ee:38:18:36:
                    db:75:33:69:31:97:f4:ae:ee:87:7a:13:0d:db:b6:
                    dc:f9:d0:47:a6:bc:88:ff:f2:b6:69:78:26:8a:e5:
                    ac:03:09:9b:2d:4f:fb:39:28:2d:9b:6a:45:b9:24:
                    bb:85:85:ef:52:34:a2:97:d2:35:7b:b5:f1:d8:8f:
                    0d:89:3f:5d:35:ed:32:a7:4e:6f:8d:5e:86:e7:02:
                    02:52:ef:92:75:04:24:1f:46:be:3f:46:a8:b3:0d:
                    9f:a8:f2:2a:29:e0:62:d1:52:6b:02:c9:eb:af:35:
                    6b:6f:71:ae:18:f7:f8:00:72:c2:92:8e:bc:da:35:
                    06:18:78:dc:5a:5b:71:c6:80:cb:b8:02:4d:68:59:
                    21:d4:b4:22:ad:9a:77:d1:0a:30:72:32:90:06:30:
                    e3:e7:43:2f:f2:c1:02:09:db:a8:f4:cf:70:cc:3c:
                    21:e0:e0:21:c3:a4:b8:b7:10:a0:43:84:f5:c4:f8:
                    05:3d:4f:ea:7e:f1:7c:3f:3e:83:dd:a4:5f:72:43:
                    25:f6:b6:d7:60:52:cd:3b:73:19:d0:5e:87:c5:7a:
                    a4:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:42:C5:56:88:E4:F4:78:45:3B:47:94:4E:B5:19:7E:58:E0:BF:DE
            X509v3 Authority Key Identifier:
                keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3139322e3230392e36332e302f32342d3234203d3e2038313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.209.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:94:02:82:06:69:df:da:3f:64:ca:0b:78:ff:9b:7c:dc:b2:
         16:21:d9:9c:c1:4b:6a:99:e8:72:b3:bc:6f:5b:df:ee:44:51:
         39:e7:e2:e2:05:8c:bd:e2:f5:ec:87:4c:30:64:08:74:48:69:
         64:85:76:42:15:49:f8:42:cd:71:ae:37:86:23:66:6a:78:f8:
         ef:d4:22:02:cb:bf:b2:02:65:3c:2f:45:ea:52:63:66:8e:e4:
         0d:1f:5f:48:e1:50:ab:1f:fc:52:04:38:66:bf:7d:86:d2:26:
         e7:c4:e3:7f:81:3a:01:5e:bf:c2:8b:99:41:76:a4:d3:f2:ae:
         ab:13:34:4a:fb:4c:7b:bc:d0:67:e7:55:a1:f6:df:71:e8:2d:
         b6:1a:ff:4c:95:3f:91:67:9a:fc:ab:2c:0e:cf:57:c1:c2:ad:
         96:f4:5b:8f:21:40:e1:ce:11:68:51:c2:8d:4d:5b:11:49:b1:
         a2:d1:4d:07:ec:e2:8a:99:c8:b7:d9:b7:e2:89:c1:7a:72:b7:
         52:13:79:6a:9e:21:3c:1d:97:3e:29:05:de:5e:94:42:f6:67:
         c4:d8:85:04:fe:9c:67:6d:00:f2:eb:ff:7c:e6:1a:37:e5:3b:
         92:62:7b:74:a9:9f:c8:60:a0:f2:60:e1:ec:fd:5c:05:35:04:
         c5:93:1c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----