Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/32332e3133342e39302e302f32342d3234203d3e203335393133.roa
File:                     32332e3133342e39302e302f32342d3234203d3e203335393133.roa (raw, json)
Hash identifier:          KKRFwZ3N5LQ6jH/fiwiwJqofQo9GVQrheg6h97GXpAw=
Subject key identifier:   8E:4E:E1:A0:0C:93:54:AE:81:7C:B7:10:2E:D8:E1:3A:34:AB:AA:45
Certificate issuer:       /CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
Certificate serial:       57E342D5E34DA4A00D16079BBB1B54076E026AA0
Authority key identifier: 6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/32332e3133342e39302e302f32342d3234203d3e203335393133.roa
Signing time:             Wed 21 Dec 2022 22:04:45 +0000
ROA not before:           Wed 21 Dec 2022 21:59:45 +0000
ROA not after:            Wed 20 Dec 2023 22:04:45 +0000
asID:                     35913
IP address blocks:        23.134.90.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:e3:42:d5:e3:4d:a4:a0:0d:16:07:9b:bb:1b:54:07:6e:02:6a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
        Validity
            Not Before: Dec 21 21:59:45 2022 GMT
            Not After : Dec 20 22:04:45 2023 GMT
        Subject: CN=8E4EE1A00C9354AE817CB7102ED8E13A34ABAA45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7b:fd:33:da:eb:b2:87:ee:58:92:f0:7b:df:
                    95:c3:c3:33:40:3e:f1:c8:8b:9f:86:54:cf:87:34:
                    6f:44:8e:59:b7:1f:13:ca:cb:ed:9f:40:95:d9:58:
                    a7:7a:65:d9:84:2b:e7:5f:63:59:4f:a1:32:69:48:
                    2d:ed:8f:7f:f3:bc:42:e0:06:40:c9:e0:42:d0:ba:
                    e0:73:92:30:3e:1e:c2:51:04:67:32:e1:0e:04:9a:
                    47:3e:7d:b5:17:35:04:8e:57:de:07:3b:f0:ca:2c:
                    df:bc:3c:1c:1a:e5:6e:b9:38:9c:19:db:d5:44:04:
                    ff:c5:0e:7c:6e:c5:2d:d7:f2:60:a3:de:e5:01:41:
                    88:0b:b6:68:bb:ac:90:b4:21:19:22:26:0a:0d:39:
                    b3:b5:06:43:f0:d9:a9:42:7c:23:8d:43:08:a0:7e:
                    3a:39:62:3e:b2:85:00:3a:d7:0c:2d:9d:b5:bb:c0:
                    0f:09:24:51:d9:48:b3:6a:4e:58:c3:fe:0f:c9:18:
                    77:cc:c8:87:1f:ad:8e:21:c9:7e:5d:a7:3d:14:4a:
                    42:82:94:ba:21:c1:2f:dd:89:04:09:62:a7:6e:2a:
                    ea:7d:6d:1c:9d:ab:4a:6d:6b:c0:16:12:84:de:3a:
                    85:ed:4a:92:3a:40:ce:0b:e7:ec:6c:ba:6b:c7:6f:
                    7d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:4E:E1:A0:0C:93:54:AE:81:7C:B7:10:2E:D8:E1:3A:34:AB:AA:45
            X509v3 Authority Key Identifier:
                keyid:6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/32332e3133342e39302e302f32342d3234203d3e203335393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:27:20:1a:6b:ea:bb:ae:4f:d2:ef:a4:ec:1e:be:b9:6e:90:
         bb:f1:c7:61:35:25:2d:e6:a1:14:57:d3:5e:a6:2d:ac:b0:59:
         02:97:4f:31:4c:36:58:c4:4d:79:59:7d:33:fd:75:ff:1b:2b:
         ba:ba:06:1a:bc:92:45:aa:c2:18:0d:26:85:dc:b5:f8:9d:e5:
         b3:0a:cc:f3:61:02:76:c1:d8:e5:71:1e:1b:ab:87:72:a3:a1:
         7c:d2:81:ba:04:a6:96:39:34:33:ca:37:9a:06:08:1c:a3:51:
         33:31:0d:55:47:7e:c9:86:ae:c5:ab:39:18:c4:71:41:4b:75:
         b1:31:30:83:d6:4e:80:dc:fd:c9:39:5a:90:4f:0d:8c:a5:2b:
         d7:b1:76:30:0e:c6:6f:bf:ec:98:fe:6f:3e:f1:fe:4b:bf:cb:
         df:08:79:f6:c2:79:8c:0f:5e:48:79:a6:f2:f9:57:a9:94:da:
         cd:86:84:4d:ba:5a:67:75:a0:16:c4:18:55:a5:33:7b:d2:e1:
         02:72:ca:b2:b0:0d:36:11:1f:2c:45:4a:92:88:8c:ae:4d:98:
         b9:53:73:fe:95:ef:77:a9:56:9e:32:7c:08:92:3b:97:8b:20:
         c4:a6:e1:30:20:7b:c7:3f:29:53:0e:93:22:21:60:d4:e1:5f:
         ff:43:bc:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----