Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf86941d5c0186cd7a883142e0/1/3230342e36392e3231372e302f32342d3234203d3e20383334.roa
File:                     3230342e36392e3231372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          iJCrX2Z+e1YZ13qC6s3nkJNavWwcwaGgcJdSnkfPXso=
Subject key identifier:   72:9A:F6:88:07:77:DD:B2:76:87:A1:C2:94:F7:BC:BE:41:91:B2:0D
Certificate issuer:       /CN=6f2db144ae1c8ae5b8619a5e09b4d9b5794d37e90612087220
Certificate serial:       2D9D0E2AAA5540656001BFCC7B0D54A43D92AA95
Authority key identifier: A2:8D:27:33:09:C9:FC:76:55:42:49:54:5D:29:D3:88:06:80:EA:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d96df2c4-2bba-40e2-841d-8c7c0a8dee13/6f2db144ae1c8ae5b8619a5e09b4d9b5794d37e90612087220.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186cd7a883142e0/1/3230342e36392e3231372e302f32342d3234203d3e20383334.roa
Signing time:             Mon 13 Mar 2023 06:04:47 +0000
ROA not before:           Mon 13 Mar 2023 05:59:47 +0000
ROA not after:            Mon 11 Mar 2024 06:04:47 +0000
asID:                     834
IP address blocks:        204.69.217.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:9d:0e:2a:aa:55:40:65:60:01:bf:cc:7b:0d:54:a4:3d:92:aa:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f2db144ae1c8ae5b8619a5e09b4d9b5794d37e90612087220
        Validity
            Not Before: Mar 13 05:59:47 2023 GMT
            Not After : Mar 11 06:04:47 2024 GMT
        Subject: CN=729AF6880777DDB27687A1C294F7BCBE4191B20D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:da:e5:69:96:98:2c:fc:ba:98:d6:e5:18:b3:
                    57:a2:19:97:be:67:dc:ff:ee:ef:70:e5:f4:c2:2c:
                    1e:cf:e2:24:c0:59:5b:67:ed:f3:59:fc:57:22:7b:
                    d8:a5:0e:1d:dc:06:4a:b5:8e:31:b7:e5:6e:79:b7:
                    c9:84:04:7c:ef:97:76:25:84:b6:30:24:0a:16:b8:
                    c2:78:00:06:fd:90:17:1e:fc:f7:fc:77:07:c1:35:
                    1b:1e:1e:89:f0:36:25:1b:33:6c:e0:ac:ee:27:aa:
                    90:1e:0b:9d:73:66:bb:00:1c:95:6a:9a:12:f0:65:
                    90:a8:20:36:3a:47:b3:93:9b:f1:83:2b:e9:7f:96:
                    7c:d6:9a:54:9b:ff:dd:cf:e9:65:6a:ec:6f:bc:24:
                    f5:aa:b9:6c:9f:1a:8f:2e:e2:3c:4c:30:8a:ff:2f:
                    6b:18:f7:6e:14:06:7a:ab:9a:b1:f2:b9:81:22:dc:
                    c2:00:02:a7:e7:f9:b3:a1:c0:3f:53:5f:79:63:32:
                    92:d5:f9:1d:b9:b5:93:bc:34:f5:34:15:de:fb:57:
                    15:e6:16:c2:dd:da:8a:9d:72:fa:9c:87:4d:d8:82:
                    c5:30:23:fe:8c:d3:a3:d0:98:33:e6:25:fd:f0:66:
                    03:78:8b:cf:ac:aa:06:70:cc:99:2a:e4:39:cd:67:
                    24:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:9A:F6:88:07:77:DD:B2:76:87:A1:C2:94:F7:BC:BE:41:91:B2:0D
            X509v3 Authority Key Identifier:
                keyid:A2:8D:27:33:09:C9:FC:76:55:42:49:54:5D:29:D3:88:06:80:EA:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186cd7a883142e0/1/A28D273309C9FC76554249545D29D3880680EA7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d96df2c4-2bba-40e2-841d-8c7c0a8dee13/6f2db144ae1c8ae5b8619a5e09b4d9b5794d37e90612087220.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186cd7a883142e0/1/3230342e36392e3231372e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.69.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:51:03:3a:c3:78:fc:e8:3d:29:50:44:34:ec:e3:11:7e:14:
         6b:15:9f:b2:34:7e:b3:23:cb:05:11:6a:c8:a8:03:77:20:1c:
         62:24:9f:42:e4:b5:8e:6f:f1:c7:77:42:3a:58:0a:79:e3:76:
         14:7e:1e:1d:66:1e:c6:e6:16:ff:b2:bf:3e:d3:ec:bd:bf:67:
         ec:19:21:a4:ce:2d:67:05:8f:40:24:e1:01:8b:0e:47:08:43:
         62:2d:bd:35:fc:4f:c1:f9:bd:a7:36:f1:18:b3:f5:a6:15:ca:
         37:85:7d:14:d6:1e:f6:da:58:9c:da:c8:ca:96:66:ed:e6:1c:
         62:2d:bf:fc:d4:5f:d5:62:08:58:67:92:9a:f8:a7:48:3e:11:
         0d:46:21:18:63:c5:31:7a:cd:ae:d0:84:a9:7b:18:3e:a9:0b:
         24:33:0d:82:89:24:e0:38:52:4f:03:99:fe:3a:b0:48:9e:4d:
         a7:7a:7f:22:03:95:a5:50:36:10:f1:41:1e:b1:26:7e:0c:e8:
         f0:29:35:7a:7c:67:9c:21:5c:19:9c:63:a1:f7:54:f4:21:c3:
         dd:bb:ac:fb:7b:30:a2:3c:41:90:72:63:77:06:44:8d:88:09:
         6f:81:85:20:8b:f7:5d:99:d3:7a:d3:9c:cd:6a:6d:54:06:6e:
         cb:d2:29:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----