Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/4/32332e3135342e382e302f32342d3234203d3e203532303235.roa
File:                     32332e3135342e382e302f32342d3234203d3e203532303235.roa (raw, json)
Hash identifier:          uugskEeCiMUeBLqzjRt7eMVN+UohYdYItj3WhybGozw=
Subject key identifier:   BD:B7:79:0A:81:71:0B:6A:7F:48:F1:6F:E2:2C:22:22:3E:05:9A:B9
Certificate issuer:       /CN=edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08
Certificate serial:       7C24F2F0E9569D740B7B8982F65B19DE7B428150
Authority key identifier: 26:29:24:3C:9E:8D:A7:B1:4D:0A:BD:25:66:0A:74:AC:40:81:C8:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/32332e3135342e382e302f32342d3234203d3e203532303235.roa
Signing time:             Wed 24 May 2023 19:26:20 +0000
ROA not before:           Wed 24 May 2023 19:21:20 +0000
ROA not after:            Wed 22 May 2024 19:26:20 +0000
asID:                     52025
IP address blocks:        23.154.8.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:24:f2:f0:e9:56:9d:74:0b:7b:89:82:f6:5b:19:de:7b:42:81:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08
        Validity
            Not Before: May 24 19:21:20 2023 GMT
            Not After : May 22 19:26:20 2024 GMT
        Subject: CN=BDB7790A81710B6A7F48F16FE22C22223E059AB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:63:0f:a4:6d:26:9b:11:d9:03:15:5c:8f:11:
                    a0:1c:39:47:92:94:f4:dc:29:28:17:c2:06:59:d5:
                    fa:bd:7a:bc:ee:1a:6a:fe:6f:a8:60:45:11:65:d6:
                    50:74:89:7b:51:f4:7e:a5:1d:20:85:08:6b:e9:f4:
                    c5:72:c6:33:77:c1:4d:b6:c7:82:21:ef:1d:a7:6c:
                    89:d2:df:28:44:aa:34:3c:68:a3:0c:72:67:c5:58:
                    ea:a0:c0:f0:06:dd:2d:db:3f:8e:a2:f0:85:72:5c:
                    9e:96:21:17:4a:f8:a1:67:dc:76:5e:76:9c:26:c8:
                    ea:84:78:c7:24:b1:d8:35:45:6d:ea:fa:06:9e:ed:
                    cd:79:d6:48:94:d6:7b:f2:82:7f:39:7b:08:4a:85:
                    05:fa:1f:07:b0:5e:9b:b6:ee:c4:3f:6a:32:a6:25:
                    bb:91:79:59:9a:15:3b:9d:a9:42:b1:a5:c3:79:76:
                    fe:d6:5a:5a:4e:45:68:06:dd:62:d9:dc:ca:90:f9:
                    53:68:88:a5:5c:34:7c:82:50:33:b9:2d:a2:5b:09:
                    63:d5:97:02:64:de:24:c5:e0:c9:63:a7:32:49:b2:
                    76:e7:6d:8b:58:1c:6b:55:e1:17:22:01:08:1b:f6:
                    d2:99:bb:77:65:c6:53:2c:b5:26:a9:3a:ce:1d:d8:
                    98:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:B7:79:0A:81:71:0B:6A:7F:48:F1:6F:E2:2C:22:22:3E:05:9A:B9
            X509v3 Authority Key Identifier:
                keyid:26:29:24:3C:9E:8D:A7:B1:4D:0A:BD:25:66:0A:74:AC:40:81:C8:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/2629243C9E8DA7B14D0ABD25660A74AC4081C88B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/32332e3135342e382e302f32342d3234203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.154.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:95:48:a4:89:58:78:ff:ed:98:84:09:66:13:fd:29:a9:bc:
         83:5f:6c:0c:41:a9:dc:1d:ae:af:ca:a6:e8:b7:b5:3b:69:0d:
         51:86:67:ea:22:12:9a:83:92:76:da:48:dc:c6:74:60:f8:3f:
         d2:6a:6b:84:1b:f0:d8:88:7c:2f:df:ea:e8:85:da:d7:e4:ca:
         5b:1a:bc:ca:c2:ba:bf:ca:28:aa:61:f1:69:21:bf:9e:d5:47:
         f8:25:f8:7d:36:a7:98:82:de:4c:18:93:6f:8f:42:95:ae:40:
         0b:1f:e3:a4:19:88:8c:86:9d:af:1a:f8:f4:d4:56:36:ff:ee:
         34:97:8f:0c:0c:55:0e:74:18:8c:a3:56:b1:5d:88:6f:52:51:
         46:c1:88:58:d1:46:da:0d:2d:25:3b:fe:70:97:0a:04:f5:80:
         3a:fd:e9:fa:82:57:1c:e9:0e:84:09:87:4a:9c:ac:96:34:f9:
         16:f1:56:9d:10:5f:a6:a0:19:2b:25:46:49:4b:88:1e:d9:a9:
         9e:c3:4b:7a:b4:b6:19:bc:56:3d:e1:5a:7f:08:9a:6e:d1:c4:
         a1:e3:ca:57:a0:7f:4a:99:9a:5f:f0:68:5f:3f:38:94:77:c5:
         0a:ff:57:a4:39:af:86:18:41:4f:93:a8:c0:c3:ba:e5:13:f3:
         2d:fe:14:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----