Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/32332e3133342e39302e302f32342d3234203d3e203537393734.roa
File:                     32332e3133342e39302e302f32342d3234203d3e203537393734.roa (raw, json)
Hash identifier:          N7z2tySmJswt/gZU+J6ic0b1zsonAZW28F9c6osDWOw=
Subject key identifier:   CB:3D:50:45:78:22:BC:3E:2A:BC:F7:8A:8A:D1:FD:0E:69:59:23:3C
Certificate issuer:       /CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
Certificate serial:       1E98CC78075AC476F76E329EC64B312067BECE18
Authority key identifier: 6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/32332e3133342e39302e302f32342d3234203d3e203537393734.roa
Signing time:             Fri 31 Mar 2023 10:04:01 +0000
ROA not before:           Fri 31 Mar 2023 09:59:01 +0000
ROA not after:            Fri 29 Mar 2024 10:04:01 +0000
asID:                     57974
IP address blocks:        23.134.90.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:98:cc:78:07:5a:c4:76:f7:6e:32:9e:c6:4b:31:20:67:be:ce:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
        Validity
            Not Before: Mar 31 09:59:01 2023 GMT
            Not After : Mar 29 10:04:01 2024 GMT
        Subject: CN=CB3D50457822BC3E2ABCF78A8AD1FD0E6959233C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:bb:81:ca:20:54:05:35:da:3d:14:19:fe:fe:
                    16:62:6f:46:29:d5:d2:6d:db:b5:fc:84:68:ef:a9:
                    39:a7:32:ba:a3:95:1e:d2:b1:88:f8:b7:57:94:a8:
                    17:6f:66:d0:31:ed:d0:bc:2c:af:cc:ae:20:2b:63:
                    13:b5:49:ed:98:83:dc:e3:0f:fa:28:38:14:cc:ee:
                    6d:1b:ae:eb:14:81:ca:17:d2:b8:96:22:1c:b0:2b:
                    46:2b:4d:dd:91:13:9a:ad:c7:19:cd:cc:2f:d5:44:
                    91:e6:d1:5f:9c:32:fa:19:bc:62:33:12:1f:3b:02:
                    b9:07:d1:01:a0:91:2f:81:c4:55:93:b9:58:5a:61:
                    8c:43:41:76:90:d4:9e:e7:cf:da:d1:8c:5f:d8:40:
                    ed:ca:11:19:c0:9f:98:cb:c8:94:8e:d3:a8:94:95:
                    9f:c1:50:ae:47:2a:0b:df:1a:74:78:88:a8:f6:00:
                    92:af:26:9d:8b:c2:18:d3:56:78:87:3d:92:3d:3c:
                    40:d6:d9:20:a8:b2:d9:02:31:50:59:10:36:6d:ed:
                    09:d5:28:6f:21:67:f9:21:34:79:b2:43:32:4d:01:
                    dd:a9:b2:4f:63:bf:3f:bf:4e:ee:73:3d:80:6e:f2:
                    23:b5:c6:ec:49:b8:61:da:8d:38:fa:4a:41:ff:f2:
                    06:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:3D:50:45:78:22:BC:3E:2A:BC:F7:8A:8A:D1:FD:0E:69:59:23:3C
            X509v3 Authority Key Identifier:
                keyid:6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/32332e3133342e39302e302f32342d3234203d3e203537393734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:7e:33:fd:15:3f:87:23:c3:18:7b:32:10:c2:9d:b8:82:ba:
         f3:5c:b9:ed:66:e5:4c:4e:9d:2d:fe:ae:7b:f9:c6:37:17:50:
         53:37:29:35:d7:3f:0f:67:1e:0d:8d:33:9b:7e:96:c1:fc:e9:
         7b:37:b7:d1:be:74:f2:f5:3c:0e:fd:4e:11:65:72:16:ae:bc:
         ed:77:02:18:66:bc:ea:3a:09:7b:d8:af:0d:fa:f2:ac:b9:f7:
         2f:99:07:3f:a0:71:9b:00:52:6d:e0:84:61:9e:4d:0b:d3:97:
         39:da:d7:e6:69:40:8b:30:4b:14:59:25:83:14:02:dc:eb:7d:
         66:b4:2c:40:88:23:58:e9:7f:7a:db:1c:52:61:c7:a2:6d:bb:
         2c:70:8b:90:88:24:74:94:54:36:ef:08:9f:91:b6:d9:96:89:
         74:74:fe:fc:c5:bc:47:fe:e9:c0:20:c4:d1:fd:8b:b5:ad:52:
         6a:d6:0a:4d:24:60:f7:23:10:5e:c3:d8:40:52:86:96:18:50:
         08:53:0d:72:4c:a7:24:fc:e4:a9:00:e3:93:3d:11:27:f1:fd:
         5b:25:d8:9e:99:3e:0d:cf:0a:6a:c0:1a:f2:59:d5:b5:7e:0e:
         d1:89:56:c0:c1:2f:cc:f2:a1:68:7b:70:bd:87:f1:78:23:8a:
         0d:5e:d8:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----