Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/323630323a666261313a3961303a3a2f34342d3438203d3e203631393737.roa
File:                     323630323a666261313a3961303a3a2f34342d3438203d3e203631393737.roa (raw, json)
Hash identifier:          WiBcvs7V9PBGdvalOA0rw3YbT7W3Ui5K+c4ZgUgFaJE=
Subject key identifier:   F5:AF:CA:70:C2:FB:9D:05:13:11:BF:09:9B:54:32:EC:92:D1:14:8F
Certificate issuer:       /CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
Certificate serial:       620F675775B29ED3D174E9F03A94D1B93A923FD2
Authority key identifier: 6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/323630323a666261313a3961303a3a2f34342d3438203d3e203631393737.roa
Signing time:             Sat 04 Feb 2023 07:12:45 +0000
ROA not before:           Sat 04 Feb 2023 07:07:45 +0000
ROA not after:            Sat 03 Feb 2024 07:12:45 +0000
asID:                     61977
IP address blocks:        2602:fba1:9a0::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:0f:67:57:75:b2:9e:d3:d1:74:e9:f0:3a:94:d1:b9:3a:92:3f:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
        Validity
            Not Before: Feb  4 07:07:45 2023 GMT
            Not After : Feb  3 07:12:45 2024 GMT
        Subject: CN=F5AFCA70C2FB9D051311BF099B5432EC92D1148F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:04:bf:12:5b:97:3c:a5:f0:65:97:6d:2f:8d:
                    fe:d5:4c:22:43:e7:56:4c:ad:f7:ff:70:14:13:ad:
                    fc:2f:72:f9:76:59:91:2c:2e:28:0d:6e:92:dc:98:
                    de:1b:2d:17:f9:d5:bd:f0:8a:3d:9c:02:33:d7:38:
                    d8:d6:cd:be:38:bb:17:ed:60:29:f1:fa:ab:78:c3:
                    51:f1:23:2d:99:68:b0:03:31:0d:dd:fa:12:a3:c8:
                    68:99:bd:73:3d:9d:7a:fe:94:e5:3d:b9:fc:b5:83:
                    13:e4:fb:2f:f5:3d:db:a0:ce:4f:86:fc:68:88:cf:
                    83:b4:64:7f:25:34:ee:df:90:b6:dd:1e:3f:bc:39:
                    95:35:d9:2e:f8:1b:3b:2f:50:5b:2a:c7:8a:01:db:
                    98:cf:de:6c:f7:82:1e:a9:db:bf:a9:b6:d0:24:01:
                    9c:0f:d6:75:b7:01:fb:af:ac:4a:76:5f:c7:b0:32:
                    4c:82:d6:66:41:f0:1f:d2:61:fd:2b:76:86:3f:70:
                    6c:d9:06:6d:5f:65:9d:77:b2:88:7b:8a:82:43:3f:
                    51:b5:0a:96:9d:e4:4e:ee:ac:19:8e:37:e6:4a:16:
                    89:9d:b0:d8:8d:03:b4:22:a4:55:ab:88:05:11:40:
                    1c:39:2c:03:15:5b:3d:48:aa:e6:2c:a1:30:d9:d9:
                    81:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:AF:CA:70:C2:FB:9D:05:13:11:BF:09:9B:54:32:EC:92:D1:14:8F
            X509v3 Authority Key Identifier:
                keyid:6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/323630323a666261313a3961303a3a2f34342d3438203d3e203631393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fba1:9a0::/44

    Signature Algorithm: sha256WithRSAEncryption
         93:f1:3a:17:2a:d8:3e:a5:c6:62:84:22:b5:77:1b:a1:49:51:
         91:d5:50:78:f9:61:31:a6:36:90:50:38:c3:e7:5a:fa:40:9f:
         cc:53:8d:89:2e:8a:9f:a4:f0:7a:1c:7a:f7:0e:89:30:9f:44:
         67:81:dd:dc:44:87:fd:9b:e3:57:94:5e:15:89:a6:ce:f5:e9:
         0d:31:3f:06:4d:6f:97:72:6a:70:f0:a4:9f:f2:c7:7d:8c:d3:
         84:1d:c6:f0:5b:da:97:a2:c0:bd:3c:fe:1c:c6:91:2f:5c:e0:
         5e:58:b8:8b:d1:79:43:17:63:29:8a:51:9f:af:d9:f4:ad:f6:
         e2:9f:37:51:ad:5d:ce:8a:09:3a:11:3c:ab:7e:ff:39:aa:33:
         73:dc:6a:56:90:a2:86:11:21:7e:40:a3:5d:e0:f0:3f:48:08:
         1f:9e:79:fc:56:3a:c0:44:fe:fc:9c:ab:0f:41:08:f2:39:dd:
         91:28:27:15:34:a4:63:50:8e:ec:3b:3c:21:2e:97:81:4c:15:
         ef:99:d1:e3:3f:9f:f9:a4:27:54:e3:62:f7:29:ac:a4:b2:19:
         44:e4:fc:b1:2b:c9:4c:59:1c:19:c4:ac:31:b5:59:7e:52:b7:
         74:31:cb:e2:0d:9e:ab:1f:7e:04:25:29:18:f9:27:2b:46:a5:
         b3:65:cf:e2
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIUYg9nV3WyntPRdOnwOpTRuTqSP9IwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyY2JlYzYzNGIwN2Y1MGYzZTgwNDIzYTdjMTExYWU5MjEz
YjUwNmI3OGJmOTkyNGFkNDIwHhcNMjMwMjA0MDcwNzQ1WhcNMjQwMjAzMDcxMjQ1
WjAzMTEwLwYDVQQDEyhGNUFGQ0E3MEMyRkI5RDA1MTMxMUJGMDk5QjU0MzJFQzky
RDExNDhGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAS/EluXPKXw
ZZdtL43+1UwiQ+dWTK33/3AUE638L3L5dlmRLC4oDW6S3JjeGy0X+dW98Io9nAIz
1zjY1s2+OLsX7WAp8fqreMNR8SMtmWiwAzEN3foSo8homb1zPZ16/pTlPbn8tYMT
5Psv9T3boM5PhvxoiM+DtGR/JTTu35C23R4/vDmVNdku+Bs7L1BbKseKAduYz95s
94Ieqdu/qbbQJAGcD9Z1twH7r6xKdl/HsDJMgtZmQfAf0mH9K3aGP3Bs2QZtX2Wd
d7KIe4qCQz9RtQqWneRO7qwZjjfmShaJnbDYjQO0IqRVq4gFEUAcOSwDFVs9SKrm
LKEw2dmBsQIDAQABo4ICjDCCAogwHQYDVR0OBBYEFPWvynDC+50FExG/CZtUMuyS
0RSPMB8GA1UdIwQYMBaAFGvsGu1lCLsHURsBsXdVF5La6yyQMA4GA1UdDwEB/wQE
AwIHgDBvBgNVHR8EaDBmMGSgYqBghl5yc3luYzovL2Nsb3VkaWUtcmVwby5ycGtp
LmFwcC9yZXBvL0NMT1VESUUtUlBLSS8yLzZCRUMxQUVENjUwOEJCMDc1MTFCMDFC
MTc3NTUxNzkyREFFQjJDOTAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYB
BQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy
MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jMTMwMzVjZC1jNDZkLTQy
MWMtYjllMC1lNmQ0ZGQzMzZkMjEvY2JlYzYzNGIwN2Y1MGYzZTgwNDIzYTdjMTEx
YWU5MjEzYjUwNmI3OGJmOTkyNGFkNDIuY2VyMIGQBggrBgEFBQcBCwSBgzCBgDB+
BggrBgEFBQcwC4ZycnN5bmM6Ly9jbG91ZGllLXJlcG8ucnBraS5hcHAvcmVwby9D
TE9VRElFLVJQS0kvMi8zMjM2MzAzMjNhNjY2MjYxMzEzYTM5NjEzMDNhM2EyZjM0
MzQyZDM0MzgyMDNkM2UyMDM2MzEzOTM3Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQmAvuhCaAwDQYJ
KoZIhvcNAQELBQADggEBAJPxOhcq2D6lxmKEIrV3G6FJUZHVUHj5YTGmNpBQOMPn
WvpAn8xTjYkuip+k8HocevcOiTCfRGeB3dxEh/2b41eUXhWJps716Q0xPwZNb5dy
anDwpJ/yx32M04QdxvBb2peiwL08/hzGkS9c4F5YuIvReUMXYymKUZ+v2fSt9uKf
N1GtXc6KCToRPKt+/zmqM3PcalaQooYRIX5Ao13g8D9ICB+eefxWOsBE/vycqw9B
CPI53ZEoJxU0pGNQjuw7PCEul4FMFe+Z0eM/n/mkJ1TjYvcprKSyGUTk/LEryUxZ
HBnErDG1WX5St3Qxy+INnqsffgQlKRj5JytGpbNlz+I=
-----END CERTIFICATE-----