Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3231362e3134362e32342e302f32342d3234203d3e20393234.roa
File:                     3231362e3134362e32342e302f32342d3234203d3e20393234.roa (raw, json)
Hash identifier:          M3knn2zFx1fh6L63hNLKKwEsU2N7SCoCI3oW5qwphig=
Subject key identifier:   FE:C0:B3:78:43:A2:27:40:48:FA:FE:D0:D1:AD:33:1C:22:B6:16:F6
Certificate issuer:       /CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
Certificate serial:       5236A9D149EF3A98AA989F55374ED6F9D6DABF1A
Authority key identifier: 6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3231362e3134362e32342e302f32342d3234203d3e20393234.roa
Signing time:             Fri 14 Apr 2023 05:50:18 +0000
ROA not before:           Fri 14 Apr 2023 05:45:18 +0000
ROA not after:            Fri 12 Apr 2024 05:50:18 +0000
asID:                     924
IP address blocks:        216.146.24.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:36:a9:d1:49:ef:3a:98:aa:98:9f:55:37:4e:d6:f9:d6:da:bf:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
        Validity
            Not Before: Apr 14 05:45:18 2023 GMT
            Not After : Apr 12 05:50:18 2024 GMT
        Subject: CN=FEC0B37843A2274048FAFED0D1AD331C22B616F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:9e:7c:92:87:30:91:01:ef:2a:6a:53:c3:15:
                    5a:27:c7:c3:15:51:5c:65:93:85:61:b8:06:05:4e:
                    e9:10:b6:ab:5a:4b:60:06:ca:42:04:06:e5:fe:44:
                    e1:6a:7f:f1:e4:25:ed:c2:98:fd:21:e6:8d:f3:bd:
                    05:dc:64:e1:3a:30:b5:1b:90:19:b5:08:bf:6c:42:
                    78:1f:96:96:0f:dc:40:1e:08:bc:55:a0:f3:23:9b:
                    7e:06:d0:d7:4f:29:74:53:47:da:af:c2:fa:1b:ab:
                    8a:b3:b4:2a:28:93:cc:5b:1c:a0:35:e3:ea:6d:ee:
                    01:4c:ef:c3:f7:bc:24:f6:48:53:72:3e:ed:a7:0e:
                    bd:e4:fd:ef:b2:56:dd:7c:13:10:99:e3:df:29:9c:
                    ce:8f:76:4e:4e:69:4d:f8:6e:ac:09:46:f8:4a:b1:
                    b1:3f:94:21:df:c1:14:f1:e6:4c:c3:b0:3b:4b:69:
                    20:d2:5e:fc:52:dc:ad:b9:16:e3:d9:12:8b:3d:9b:
                    6d:1c:f6:5d:40:db:e3:c9:7a:44:a7:30:6b:ff:a4:
                    dc:d5:c9:3c:18:8d:aa:10:9c:2a:de:b1:c4:4d:89:
                    d8:a3:9e:c9:8b:0a:a4:1f:23:e2:a1:6a:db:76:ab:
                    03:bd:e9:94:4e:c0:e4:c5:46:1b:3c:90:94:bd:c4:
                    52:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:C0:B3:78:43:A2:27:40:48:FA:FE:D0:D1:AD:33:1C:22:B6:16:F6
            X509v3 Authority Key Identifier:
                keyid:6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3231362e3134362e32342e302f32342d3234203d3e20393234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.146.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:cb:06:56:e0:95:6a:35:9f:90:bd:a6:4e:1b:19:f3:85:61:
         87:b7:a1:6a:5d:35:9a:9e:1b:94:af:98:7c:9d:3e:22:b2:29:
         be:a1:f9:86:56:d8:da:19:b0:db:32:e1:8d:9c:21:57:93:e7:
         91:87:7f:8a:f5:8f:81:cf:8b:b8:b7:2f:bb:4a:f5:de:c2:f3:
         40:b1:78:c1:57:1e:1c:ea:28:88:9c:2c:32:f6:92:42:2b:2d:
         f2:47:e8:be:51:07:e6:79:59:8c:ae:71:53:44:5a:af:3d:9f:
         24:dc:78:42:d6:2a:27:b9:fa:2c:87:c6:c8:7a:b2:80:a6:c5:
         e9:99:53:23:cf:61:89:3b:ad:9e:f7:f3:e5:d2:58:15:15:e0:
         ef:da:d2:82:23:0a:84:e3:ed:9d:b8:66:05:5e:4d:cb:7b:80:
         53:40:bb:bc:c9:aa:d0:c6:95:5d:1d:e8:8f:31:97:5f:81:84:
         4b:56:c1:0a:70:f0:2c:1b:54:86:70:52:67:b5:51:ea:12:5f:
         70:48:3f:3a:d8:61:c1:64:6a:a2:13:9c:a6:b0:c4:49:d3:56:
         85:dc:36:e1:92:94:a7:c0:28:51:f5:c8:f0:b5:85:2e:52:6c:
         02:83:99:50:b4:ca:2d:f2:9b:8c:b2:f0:ad:0a:7f:4b:55:12:
         11:94:01:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----