Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3231362e3134362e32342e302f32342d3234203d3e20323033343533.roa
File:                     3231362e3134362e32342e302f32342d3234203d3e20323033343533.roa (raw, json)
Hash identifier:          cxJkBBL3zPnZjB4+zVEBOqtkSVNmni1ezuH3Kelx2zY=
Subject key identifier:   B4:E6:7A:D3:A3:06:6B:CB:89:C4:0D:B0:D0:45:4E:2E:F4:81:7C:F5
Certificate issuer:       /CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
Certificate serial:       38A983A06A793C29AC84DB0CFF49F95F2650DE1F
Authority key identifier: 6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3231362e3134362e32342e302f32342d3234203d3e20323033343533.roa
Signing time:             Wed 21 Dec 2022 22:07:44 +0000
ROA not before:           Wed 21 Dec 2022 22:02:44 +0000
ROA not after:            Wed 20 Dec 2023 22:07:44 +0000
asID:                     203453
IP address blocks:        216.146.24.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:a9:83:a0:6a:79:3c:29:ac:84:db:0c:ff:49:f9:5f:26:50:de:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
        Validity
            Not Before: Dec 21 22:02:44 2022 GMT
            Not After : Dec 20 22:07:44 2023 GMT
        Subject: CN=B4E67AD3A3066BCB89C40DB0D0454E2EF4817CF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9b:bd:b5:f0:ee:b3:2e:07:62:fc:90:ec:13:
                    2e:ef:8f:db:d0:d7:de:73:44:6b:be:8b:da:36:19:
                    87:ee:57:02:a3:59:6e:8b:7f:ca:64:9d:d1:a6:0b:
                    39:a3:f0:d8:f7:54:f3:82:be:73:2c:c0:fa:c1:f8:
                    58:ea:ee:c2:0c:9e:ce:38:63:16:c3:1b:ba:dd:6c:
                    c1:e7:a6:52:ff:3f:00:22:be:bf:de:58:4d:9c:46:
                    97:f6:89:bf:9f:f5:01:7e:d7:71:0b:67:63:24:70:
                    0d:ec:cd:9b:58:23:a0:2c:5a:ea:67:0d:bd:c8:e6:
                    39:ff:81:a4:52:40:f3:2d:8e:b5:d3:84:09:45:4c:
                    fd:44:ef:64:d8:56:0d:9e:d6:52:4d:82:ac:08:39:
                    3c:72:a4:1e:19:ba:d3:fa:0a:26:60:96:fb:57:04:
                    8d:2d:c3:2a:4e:e9:b2:41:72:52:d5:43:63:64:59:
                    08:01:8c:e9:d9:c8:36:de:e3:59:62:cc:86:56:36:
                    4b:38:6f:4d:b3:af:8c:d4:b7:5a:e6:ac:1e:fd:95:
                    39:84:72:86:29:c0:c1:26:16:85:c6:dd:96:0d:9b:
                    71:f1:5a:97:a9:60:e3:6f:8c:ca:13:00:35:83:cd:
                    01:5f:f7:de:5c:e5:76:28:94:04:a3:66:67:a5:a5:
                    6d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:E6:7A:D3:A3:06:6B:CB:89:C4:0D:B0:D0:45:4E:2E:F4:81:7C:F5
            X509v3 Authority Key Identifier:
                keyid:6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3231362e3134362e32342e302f32342d3234203d3e20323033343533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.146.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:0c:91:a9:2b:e0:2d:47:1f:60:65:e7:d2:bc:7e:ec:3d:8d:
         21:7e:f9:78:38:69:f1:c9:3b:d2:c3:8e:e5:98:40:3a:27:fe:
         81:6e:a1:43:79:5d:d4:2b:72:d5:22:1b:dd:e3:a3:98:7c:3a:
         97:ae:f9:3b:5c:ae:38:d5:87:db:e5:89:ef:1a:b2:85:2a:f6:
         90:f2:02:45:84:ce:11:a9:a4:a4:88:2c:07:bb:9d:87:4a:06:
         80:02:76:1b:1f:3e:87:6b:09:a1:13:b1:96:a4:70:86:e2:6a:
         ba:a1:28:71:22:76:26:de:91:dc:42:66:63:c6:fb:5b:4b:0f:
         5c:be:40:fe:7b:02:77:92:28:b5:d6:1a:7e:f3:7f:0c:21:64:
         8e:12:e5:7c:c0:cd:44:4e:65:e5:c6:c6:58:f7:8a:5a:82:31:
         2a:28:9a:51:d5:47:32:02:3f:cb:dd:bc:30:ab:8c:95:05:12:
         f6:c8:cb:4a:f4:db:2d:60:99:28:c8:ba:9e:1c:25:21:c3:a4:
         92:26:32:27:2e:d8:b7:e1:80:ff:80:b0:91:23:83:34:5f:54:
         50:3f:ce:32:42:1f:d5:06:a0:6c:17:51:57:4d:33:95:00:91:
         98:2e:8c:82:55:dd:0c:f8:5a:cd:89:aa:0b:b8:eb:5c:79:ed:
         c6:89:b4:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----