Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34372e302f32342d3234203d3e203232363236.roa
File:                     34352e34322e34372e302f32342d3234203d3e203232363236.roa (raw, json)
Hash identifier:          xqLv1H6otY0IhVJRo+fZwCpofVBldElDuQ6llZwu1/4=
Subject key identifier:   61:9B:19:EE:7A:6A:37:2F:1E:B6:3A:15:47:2F:7E:94:01:80:46:B6
Certificate issuer:       /CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
Certificate serial:       650C286DDFD8C27D1C3AF57FDE30E3B93CCCBF1F
Authority key identifier: 48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34372e302f32342d3234203d3e203232363236.roa
Signing time:             Fri 20 Jan 2023 06:11:12 +0000
ROA not before:           Fri 20 Jan 2023 06:06:12 +0000
ROA not after:            Fri 19 Jan 2024 06:11:12 +0000
asID:                     22626
IP address blocks:        45.42.47.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:0c:28:6d:df:d8:c2:7d:1c:3a:f5:7f:de:30:e3:b9:3c:cc:bf:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
        Validity
            Not Before: Jan 20 06:06:12 2023 GMT
            Not After : Jan 19 06:11:12 2024 GMT
        Subject: CN=619B19EE7A6A372F1EB63A15472F7E94018046B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:56:d3:f0:00:d4:9b:23:ed:3c:37:21:cb:6f:
                    aa:23:12:2d:15:3c:33:92:e1:cc:1e:f9:70:e2:1d:
                    c3:e1:c9:36:aa:a4:87:b9:79:18:e1:29:ef:fd:89:
                    d2:da:43:3c:74:8c:80:3d:1e:2e:53:5e:29:8e:f3:
                    81:19:15:b8:42:d3:aa:7d:50:8c:f6:9e:85:a4:f2:
                    1d:37:37:7c:90:7c:03:bf:0d:9a:5c:85:fb:f8:4a:
                    63:ba:e9:20:82:a5:f8:ac:45:2a:35:be:26:25:50:
                    13:1f:f7:b1:20:59:b9:01:db:09:08:ba:78:b2:d9:
                    fb:b4:d9:39:0a:eb:d1:45:84:b1:47:ee:90:bf:e2:
                    62:ce:e3:e7:56:9d:c1:22:72:ae:1a:f5:3f:7f:cf:
                    9d:7e:bc:86:30:e1:7a:89:79:00:bc:fa:d0:67:83:
                    eb:84:c5:09:47:19:70:ba:b5:3a:bc:61:c6:db:16:
                    c7:3a:9b:e4:a2:40:cd:3c:07:4d:ec:fb:59:89:78:
                    2a:f7:8d:a5:4b:6b:b6:4a:f8:41:1a:37:9f:c5:ca:
                    f4:ca:e4:b2:e9:14:d9:81:3c:db:fa:8e:d8:cc:0a:
                    50:67:dc:5b:67:e8:69:e5:a8:73:35:0f:7f:dc:4a:
                    ac:56:5e:03:eb:be:8e:ee:29:26:63:dd:49:38:c5:
                    d1:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:9B:19:EE:7A:6A:37:2F:1E:B6:3A:15:47:2F:7E:94:01:80:46:B6
            X509v3 Authority Key Identifier:
                keyid:48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34372e302f32342d3234203d3e203232363236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:91:8d:72:f4:3e:34:a0:78:13:ea:70:b1:d1:f9:e8:1a:fd:
         28:ae:15:a9:19:c9:d8:e3:a2:7c:5a:f5:14:83:b4:4b:42:13:
         08:d9:89:f0:e1:5b:67:25:48:b6:8d:29:ff:5f:75:31:ff:3e:
         01:f4:02:8c:08:b4:d9:40:72:b4:0f:fb:f1:b9:42:3d:f0:19:
         45:51:77:db:78:71:4c:5f:e4:f8:bc:20:6f:a9:d6:0b:ff:44:
         c4:b5:e5:b7:a3:09:1d:13:40:47:83:2a:d5:83:b4:11:54:74:
         32:3e:93:4a:6e:ae:e8:ba:6b:91:b8:ca:0e:51:e7:3c:88:ef:
         9d:da:e8:07:78:09:d8:e2:81:92:87:94:f0:4f:f0:d5:90:8b:
         15:6b:80:ab:32:cb:2a:fc:16:12:7e:9f:f5:e5:ce:ea:c1:53:
         b9:62:d5:09:1b:1d:16:b9:ef:af:73:ae:e8:28:9d:b6:cf:bf:
         ff:35:ae:bc:d2:6f:8d:6a:ab:04:b6:a1:3b:d7:95:8c:49:e2:
         02:b4:a8:fa:fd:63:17:aa:fe:13:08:29:68:c9:90:d2:ef:f9:
         17:d1:eb:df:d2:55:a9:77:58:cb:86:40:3e:97:fa:bf:be:5d:
         c8:62:ee:a3:ca:7d:01:3f:dd:3b:01:9f:fb:4d:df:87:9f:33:
         50:37:2b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----