Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/4/32332e3135342e382e302f32342d3234203d3e203430353434.roa
File:                     32332e3135342e382e302f32342d3234203d3e203430353434.roa (raw, json)
Hash identifier:          XxAeNlO6PslWz05DjOGHxR8CAA2UJgpzU9KRG3CXq+Y=
Subject key identifier:   47:DA:C2:1D:7C:2F:FC:A4:5F:37:8B:3A:6C:2E:3F:94:21:EE:AC:E8
Certificate issuer:       /CN=edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08
Certificate serial:       0E1EC66CB83231AD43EEE422F5D047D091400F22
Authority key identifier: 26:29:24:3C:9E:8D:A7:B1:4D:0A:BD:25:66:0A:74:AC:40:81:C8:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/32332e3135342e382e302f32342d3234203d3e203430353434.roa
Signing time:             Wed 24 May 2023 19:26:11 +0000
ROA not before:           Wed 24 May 2023 19:21:11 +0000
ROA not after:            Wed 22 May 2024 19:26:11 +0000
asID:                     40544
IP address blocks:        23.154.8.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:1e:c6:6c:b8:32:31:ad:43:ee:e4:22:f5:d0:47:d0:91:40:0f:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08
        Validity
            Not Before: May 24 19:21:11 2023 GMT
            Not After : May 22 19:26:11 2024 GMT
        Subject: CN=47DAC21D7C2FFCA45F378B3A6C2E3F9421EEACE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c0:fe:4e:6b:af:ce:3a:ab:a2:78:78:1b:bc:
                    0f:40:3c:9d:02:fc:43:2b:1b:6b:3a:c9:6b:75:ba:
                    47:57:ff:4d:33:c1:de:47:47:f5:a5:d2:d6:f1:b7:
                    b1:60:ea:b7:9f:64:ea:c0:a7:fd:c2:c6:88:36:ef:
                    e6:16:d5:34:9d:a1:08:5e:71:8c:13:39:6b:b1:1f:
                    38:75:73:ba:1a:2d:f4:6a:b1:04:f4:55:6d:a1:0e:
                    2a:8b:87:6e:e7:9c:4a:a5:d5:81:af:5d:fa:1a:73:
                    d9:5c:27:98:68:5e:37:f5:1a:c8:c8:59:b1:e9:a7:
                    69:1c:f2:d3:b1:78:43:90:e2:55:ac:2e:9a:22:e6:
                    ea:0c:e8:7c:fb:43:5e:a5:d2:39:53:31:c9:50:d1:
                    fe:09:81:c7:4d:ee:6b:cc:a8:66:d3:68:dc:a0:4f:
                    49:80:3e:8a:6c:52:87:ad:5a:ea:d0:c7:2c:01:47:
                    d9:f5:51:64:14:2e:da:78:e7:b2:d6:e6:ac:67:d0:
                    06:68:41:75:a2:f3:c4:03:d3:c8:5e:12:24:5b:52:
                    ba:3c:69:2f:e4:d9:76:54:a8:26:c1:e4:5f:48:82:
                    e5:b5:37:70:df:12:40:be:37:3a:66:c9:bf:68:80:
                    43:fd:c6:03:85:9c:e0:70:46:0f:39:0d:3e:f8:56:
                    7b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:DA:C2:1D:7C:2F:FC:A4:5F:37:8B:3A:6C:2E:3F:94:21:EE:AC:E8
            X509v3 Authority Key Identifier:
                keyid:26:29:24:3C:9E:8D:A7:B1:4D:0A:BD:25:66:0A:74:AC:40:81:C8:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/2629243C9E8DA7B14D0ABD25660A74AC4081C88B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/32332e3135342e382e302f32342d3234203d3e203430353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.154.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:82:70:61:aa:a1:30:a9:2b:88:7c:a3:fe:56:0f:fe:2f:0d:
         3d:76:b8:5d:2e:08:66:33:89:47:b8:f9:8f:47:38:4e:36:e5:
         a9:d9:73:bb:7f:7a:67:e8:4a:ea:2c:75:32:8e:76:5f:50:39:
         52:1b:19:8b:d2:10:0f:dc:fc:62:30:aa:fb:b2:8d:f0:48:c8:
         8e:f6:63:22:e9:41:af:7e:50:48:70:84:c9:b8:c6:a2:f6:38:
         03:ef:7e:6e:c0:01:97:e2:c9:e5:2d:7d:36:a9:33:82:e3:e0:
         b7:6c:49:0b:4a:c1:76:b1:4d:b5:af:38:33:21:92:12:1f:f5:
         d0:c4:c5:f2:8a:d8:ce:28:ce:f2:ae:21:af:42:4f:52:95:8d:
         f7:42:a6:ed:ad:5a:b2:18:b2:35:8b:ba:f6:a3:70:0b:da:3d:
         1b:b3:e2:ba:ed:40:d8:82:a9:5a:90:85:21:a5:a4:5a:8a:5f:
         8f:af:e3:cf:22:14:88:e6:a2:09:43:eb:a2:0e:62:70:95:2c:
         ea:b8:84:e8:f6:6f:8b:56:60:8b:d9:00:9d:2b:9d:98:c6:77:
         74:91:77:c8:74:ee:4d:90:06:c9:63:d6:41:c3:5f:d3:9b:0f:
         d1:8f:d1:29:f6:18:74:d0:79:b1:a1:81:f6:69:ef:fe:ce:4b:
         55:f9:e3:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----