Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630373a3a2f34382d3438203d3e20323132323934.roa
File:                     323630323a666166643a6630373a3a2f34382d3438203d3e20323132323934.roa (raw, json)
Hash identifier:          +GoxlQOWayQPL/PwYU9sfewy7sdbhV2W1kVwoCDWPwE=
Subject key identifier:   74:C5:BE:16:37:31:24:8F:03:0C:14:70:28:5E:E8:6E:6C:F1:B1:42
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       5A7A253B3B50B366B85E49CD184ABF242621D85F
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630373a3a2f34382d3438203d3e20323132323934.roa
Signing time:             Wed 14 Dec 2022 12:10:12 +0000
ROA not before:           Wed 14 Dec 2022 12:05:12 +0000
ROA not after:            Wed 13 Dec 2023 12:10:12 +0000
asID:                     212294
IP address blocks:        2602:fafd:f07::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:7a:25:3b:3b:50:b3:66:b8:5e:49:cd:18:4a:bf:24:26:21:d8:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Dec 14 12:05:12 2022 GMT
            Not After : Dec 13 12:10:12 2023 GMT
        Subject: CN=74C5BE163731248F030C1470285EE86E6CF1B142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0e:88:61:69:e1:d5:d0:6b:96:39:04:4a:04:
                    ef:f4:60:dc:34:62:16:d6:af:be:50:87:e3:ce:ac:
                    5a:bf:05:2c:f8:b5:7d:72:5e:54:d7:5f:e8:e9:7e:
                    09:a6:c3:29:32:cd:07:77:2c:02:09:92:ed:86:06:
                    91:8f:72:b7:a1:78:19:9f:30:a0:dc:7b:bd:0a:62:
                    5d:b0:37:b1:2e:89:43:e0:b0:b4:7a:16:5b:67:7c:
                    af:d6:43:f2:b6:4d:ff:ed:df:84:2c:ad:08:2d:d1:
                    ea:19:81:95:d0:61:78:f8:48:a0:1f:6b:b7:01:52:
                    96:15:41:19:d7:da:eb:16:3f:8f:12:b2:f1:20:7d:
                    e6:1b:23:91:6d:21:fb:de:1a:59:2c:41:ce:51:13:
                    7b:52:ef:4e:74:d1:9f:b2:6f:e1:8b:b7:29:4b:ac:
                    ad:d9:bd:ad:e4:cb:49:44:f7:f3:6c:c0:a2:4d:39:
                    34:1e:7d:77:94:b8:47:5e:05:87:ef:67:61:53:47:
                    e6:dd:75:b5:fd:97:f7:92:69:f8:ef:50:26:6b:62:
                    fb:74:b5:fb:c2:cf:12:4b:30:22:a6:ed:0b:7c:ef:
                    3e:d1:df:63:3d:cd:6f:c4:e5:e8:17:87:d2:fb:2c:
                    97:63:33:f2:f8:8f:e3:c0:9e:52:2b:31:ee:56:63:
                    c0:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:C5:BE:16:37:31:24:8F:03:0C:14:70:28:5E:E8:6E:6C:F1:B1:42
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630373a3a2f34382d3438203d3e20323132323934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd:f07::/48

    Signature Algorithm: sha256WithRSAEncryption
         7d:ef:94:29:ba:97:8a:2e:f7:5f:01:e8:27:65:8f:a6:81:81:
         b2:2a:0d:b2:f1:cb:a8:51:67:da:77:b4:a3:a1:24:37:4e:48:
         d9:3f:9a:66:2c:0e:fa:89:db:25:81:6a:2d:82:13:39:0e:33:
         33:2a:2b:87:0b:92:a6:4f:b0:94:6e:bb:75:b8:a9:24:c6:4e:
         a8:19:65:b7:15:37:1c:3a:14:11:b1:7f:fe:02:86:49:b8:5e:
         db:eb:6e:9d:ee:92:ff:9c:a3:56:c1:7f:ab:d9:18:c8:70:c1:
         9b:39:ee:44:a5:23:36:a5:f4:50:7a:96:59:8d:d7:cd:b5:bf:
         06:73:5a:05:bf:80:24:d6:3a:ad:ce:13:9b:0e:a4:11:69:f3:
         81:9f:86:9a:9c:a2:ef:5a:f7:88:41:ed:3b:95:1b:16:a5:7d:
         8e:a5:63:02:11:2b:35:4d:96:d3:8b:10:d2:3a:37:25:e3:c8:
         66:3e:64:e4:66:ce:cb:70:ac:bc:7e:d3:f6:89:01:6a:aa:20:
         5e:2c:83:18:e2:f2:a6:85:eb:fc:90:f2:13:7c:27:56:de:2e:
         15:12:ed:42:fa:77:a3:05:6d:f3:30:8f:6f:b6:38:f2:ec:06:
         9d:56:2b:1a:3c:d2:96:d4:8e:4b:27:92:3b:5f:ab:27:2c:cb:
         ed:94:6e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----