Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a3a2f33362d3438203d3e20393234.roa
File:                     323630323a666166643a3a2f33362d3438203d3e20393234.roa (raw, json)
Hash identifier:          MjPEP9PKrfBAfeL6vqDzgSQbV9ZnXEBEnay29qEuDR4=
Subject key identifier:   23:5B:2C:B4:50:80:B3:3E:12:8C:9D:69:DD:A4:0B:D6:F0:48:A3:CF
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       4C7C4EDDEDBB1EE00B0832CCEB7F7EAFDD54E6CA
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a3a2f33362d3438203d3e20393234.roa
Signing time:             Wed 14 Dec 2022 12:10:13 +0000
ROA not before:           Wed 14 Dec 2022 12:05:13 +0000
ROA not after:            Wed 13 Dec 2023 12:10:13 +0000
asID:                     924
IP address blocks:        2602:fafd::/36 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:7c:4e:dd:ed:bb:1e:e0:0b:08:32:cc:eb:7f:7e:af:dd:54:e6:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Dec 14 12:05:13 2022 GMT
            Not After : Dec 13 12:10:13 2023 GMT
        Subject: CN=235B2CB45080B33E128C9D69DDA40BD6F048A3CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:27:bd:00:ad:04:30:3a:5c:c0:f4:cd:d9:15:
                    23:1a:8e:20:7c:55:e3:b5:02:46:ec:12:00:6f:84:
                    8e:e3:98:8f:9f:fe:ef:42:8b:57:2f:e2:36:41:a1:
                    58:fb:62:5f:86:96:d2:af:49:0a:38:fc:dc:de:ae:
                    22:7d:be:26:50:ba:23:f5:6a:a4:bc:82:58:f9:06:
                    1d:6c:1e:35:ab:b1:b6:16:89:52:b5:32:fc:1f:c9:
                    5c:f3:33:3e:75:c8:42:dd:ab:eb:11:a2:87:6a:c0:
                    d3:33:a6:6e:c4:04:01:51:4d:87:de:d1:a2:06:7f:
                    4d:11:de:55:8e:de:c2:ec:d1:14:a6:27:47:2e:06:
                    27:2b:f4:f4:c8:9b:73:1d:33:d3:1e:49:95:d7:4f:
                    49:f1:f1:f6:9b:70:06:b9:e9:cf:e6:27:e8:4c:77:
                    23:7f:ac:70:04:80:3d:a6:e4:a9:bb:eb:06:28:0b:
                    36:21:f0:10:2e:df:db:1b:75:fc:8a:ae:5d:e3:13:
                    d8:8b:53:c7:ba:42:88:1a:ab:f2:4b:cb:a0:fc:00:
                    51:c7:fa:80:5e:a2:b2:09:31:b5:1d:8f:0a:28:97:
                    ab:65:66:6a:1f:c4:1b:51:7d:e7:66:22:19:37:b3:
                    52:03:5a:7f:73:a3:4f:12:0d:0a:3b:19:06:7b:e3:
                    43:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:5B:2C:B4:50:80:B3:3E:12:8C:9D:69:DD:A4:0B:D6:F0:48:A3:CF
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a3a2f33362d3438203d3e20393234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd::/36

    Signature Algorithm: sha256WithRSAEncryption
         6c:9d:7d:70:70:93:61:72:00:05:9e:bd:27:f5:1c:94:cb:cc:
         93:95:71:d8:1f:52:4c:22:32:47:c4:42:52:c2:37:2c:5a:07:
         e9:b8:17:25:69:f0:de:6a:81:40:d7:13:bb:1c:40:26:96:41:
         b3:80:c6:65:40:f7:fa:f0:23:f7:32:ea:5f:12:4f:bd:fa:65:
         7d:09:8d:98:68:d5:a5:cd:dc:da:dc:4b:6e:0a:19:26:85:35:
         d8:84:79:15:17:13:ef:1e:36:7e:fa:e7:eb:42:18:15:c4:ee:
         81:84:35:c6:5a:ab:b9:2f:3a:e0:ca:eb:fc:cf:15:04:cb:e5:
         23:cc:e9:d7:c6:32:9a:9a:e1:36:bd:41:58:81:76:31:b6:a9:
         85:7d:5a:79:0e:56:79:9f:34:3e:f0:fb:1a:00:d1:5e:a9:e4:
         f0:b4:ed:69:e6:6e:be:1e:62:72:07:e4:ce:ef:b0:85:6e:a0:
         88:9d:71:34:ae:1a:91:25:fd:bd:74:7f:c6:a8:21:30:ca:6f:
         96:4d:a9:3e:da:27:57:e6:b0:73:f7:76:d2:da:fb:4d:86:4a:
         87:9c:5c:ac:ad:66:9f:69:c7:60:72:1c:a3:d3:49:0f:1d:82:
         3c:54:f8:23:23:fa:ab:1d:d3:5d:cb:bc:4b:93:69:2c:ab:0d:
         c5:8a:78:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----