Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/37352e3130322e31382e302f32342d3234203d3e203631313338.roa
File:                     37352e3130322e31382e302f32342d3234203d3e203631313338.roa (raw, json)
Hash identifier:          EefRwkXtiFgvfQLQoU8T0nX86F8o4qYSQODMrFLJApI=
Subject key identifier:   68:8E:E9:17:C1:E4:09:7A:9A:82:48:0E:10:7E:4A:C9:61:D5:6B:35
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       45B2EBBDC1D79E496293FD1AFA3C2414A1692A12
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/37352e3130322e31382e302f32342d3234203d3e203631313338.roa
Signing time:             Mon 24 Apr 2023 17:29:08 +0000
ROA not before:           Mon 24 Apr 2023 17:24:08 +0000
ROA not after:            Mon 22 Apr 2024 17:29:08 +0000
asID:                     61138
IP address blocks:        75.102.18.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:b2:eb:bd:c1:d7:9e:49:62:93:fd:1a:fa:3c:24:14:a1:69:2a:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Apr 24 17:24:08 2023 GMT
            Not After : Apr 22 17:29:08 2024 GMT
        Subject: CN=688EE917C1E4097A9A82480E107E4AC961D56B35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:76:7b:92:4a:78:1a:75:30:07:e4:35:7e:4e:
                    65:1c:81:b5:7d:63:c4:98:54:80:4d:ee:44:41:fd:
                    ce:58:86:d0:33:00:c2:42:3d:66:c8:86:4f:8b:04:
                    77:b9:db:3d:14:4f:df:7e:f6:da:af:bc:4f:20:d9:
                    42:10:7c:82:de:03:f1:0f:cc:74:e5:2d:d3:c0:3f:
                    0f:b4:52:f5:51:92:77:5f:2f:99:8a:38:6c:39:4f:
                    4e:08:d9:71:cc:76:ef:3b:7d:f2:97:26:1f:7c:5c:
                    b6:77:bf:5d:6b:03:17:83:2c:25:ad:4f:32:15:ea:
                    4a:b3:19:85:6c:13:c8:7b:02:40:2a:ea:df:8b:60:
                    c5:d3:5d:4d:3b:09:11:bb:aa:df:e4:5d:62:4a:9e:
                    1d:10:9e:a9:71:3b:9d:20:b2:57:b2:6d:ad:b0:ed:
                    7c:2a:44:07:8e:c7:fd:f7:28:98:c6:34:fd:d0:41:
                    17:c7:2c:c2:c9:d3:2c:33:2b:ea:8f:4e:38:82:bc:
                    7a:36:73:b8:79:56:0a:cc:6c:46:22:47:b8:49:45:
                    92:db:e6:fb:e0:7f:94:72:2f:00:31:3c:23:24:eb:
                    3b:4c:4f:f5:09:86:9b:df:93:50:23:0b:fe:0e:cc:
                    87:56:36:c5:ee:15:e8:8d:b0:a8:dc:b3:e2:6f:38:
                    f7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:8E:E9:17:C1:E4:09:7A:9A:82:48:0E:10:7E:4A:C9:61:D5:6B:35
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/37352e3130322e31382e302f32342d3234203d3e203631313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.102.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:64:ed:14:d7:34:06:1c:a3:d9:c6:72:73:f7:53:87:8d:01:
         f3:d7:1d:0b:79:e7:74:38:0b:99:17:73:44:e4:98:f7:0d:9c:
         aa:e1:0d:87:7f:d2:9b:0e:69:5f:90:d8:c8:aa:b6:81:f1:4e:
         ba:dc:f9:18:c8:46:3e:9e:6a:c5:3f:09:99:de:4f:e8:51:88:
         da:7d:52:e7:0e:d5:89:3e:6d:01:e1:d5:19:a3:13:d4:ab:16:
         81:7c:b0:34:c4:9e:f5:ab:70:5e:70:03:f5:09:37:8b:67:ff:
         b2:db:00:0a:cf:84:ec:5a:67:26:a8:3a:04:d4:f2:ec:51:23:
         e6:5d:80:ef:fe:4f:ed:4d:89:b5:59:9b:d5:e3:c5:d4:2f:af:
         54:0d:91:32:3e:97:60:e5:2e:e8:38:ef:03:79:78:fa:a1:7d:
         f3:1f:b3:08:66:50:c3:64:41:3e:65:f4:13:9f:bf:d4:80:2e:
         15:6d:8d:6b:20:1f:47:22:05:7a:6f:f6:ee:7b:0c:0d:d0:88:
         9f:9f:4e:11:41:8c:55:e1:07:b7:b3:1c:8a:c0:ac:dd:da:72:
         a0:8a:5b:35:c7:e1:19:95:60:51:3d:fb:43:df:36:19:7d:a2:
         f6:6b:b1:21:d8:70:c1:38:43:9d:92:03:a8:19:1b:6c:bc:08:
         11:77:a5:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----