Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/37352e3130322e32382e302f32342d3234203d3e203439393939.roa
File:                     37352e3130322e32382e302f32342d3234203d3e203439393939.roa (raw, json)
Hash identifier:          Pgfo0zkah6NLUnqeQeECkBLJGIlRONSZd7XT2k9f+EE=
Subject key identifier:   7A:A8:B9:1A:1F:C9:2D:21:31:CB:66:5A:B7:FF:7A:54:AF:4D:9F:C6
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       68533735E817D561B645286C022C7D8BD86AEE03
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/37352e3130322e32382e302f32342d3234203d3e203439393939.roa
Signing time:             Fri 19 May 2023 10:56:28 +0000
ROA not before:           Fri 19 May 2023 10:51:28 +0000
ROA not after:            Fri 17 May 2024 10:56:28 +0000
asID:                     49999
IP address blocks:        75.102.28.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:53:37:35:e8:17:d5:61:b6:45:28:6c:02:2c:7d:8b:d8:6a:ee:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: May 19 10:51:28 2023 GMT
            Not After : May 17 10:56:28 2024 GMT
        Subject: CN=7AA8B91A1FC92D2131CB665AB7FF7A54AF4D9FC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:67:43:fd:b9:57:7e:99:36:24:09:cf:e3:c6:
                    f2:45:9c:ff:f6:e1:03:80:2f:a6:33:f4:15:63:ae:
                    9b:33:22:f1:73:ed:84:bc:58:4c:3a:a3:65:ed:80:
                    f0:5d:cb:68:16:ba:1c:ab:22:4b:30:83:b1:23:7a:
                    31:fc:a7:da:37:67:ef:e9:04:fb:33:36:cc:d4:83:
                    83:af:ca:5a:8c:1a:da:17:35:4e:47:11:c1:09:c6:
                    d9:62:49:74:95:b7:5a:4e:ba:99:76:0e:62:6c:f6:
                    13:6b:3b:f6:d4:17:a3:bc:d5:05:16:69:fc:56:39:
                    bf:ac:6f:e8:39:a2:bd:3a:98:32:c2:03:b1:d0:f0:
                    75:b7:bb:1c:e6:30:fd:e9:75:1a:cb:ab:a3:c0:67:
                    3f:25:89:7d:d1:6a:9d:6a:64:e1:0b:9f:fa:25:55:
                    87:97:33:cf:e0:98:e6:9e:da:25:6c:d0:3e:c2:dc:
                    eb:18:4f:39:92:ce:b8:f4:50:a7:0d:c8:5c:89:dd:
                    5b:49:92:f4:b1:1f:31:5a:0c:95:cb:85:0d:67:9f:
                    88:70:3d:72:b0:a1:9e:e0:f6:fd:5b:50:5a:20:f9:
                    77:b6:65:81:b5:c5:a7:f1:7b:81:d3:9a:c2:23:eb:
                    dd:10:85:48:f0:34:1e:f7:65:19:72:11:9d:d2:6b:
                    ef:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:A8:B9:1A:1F:C9:2D:21:31:CB:66:5A:B7:FF:7A:54:AF:4D:9F:C6
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/37352e3130322e32382e302f32342d3234203d3e203439393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.102.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:69:ba:eb:75:1c:ec:d0:d5:e8:c0:f7:10:96:a4:77:47:16:
         a0:b9:d8:87:f6:c5:88:a5:61:17:fd:96:b0:bc:04:99:b2:b8:
         e7:5d:a1:5a:9f:8e:2c:82:a2:94:60:60:22:65:a5:d4:ad:2f:
         18:19:b0:f3:61:23:36:33:22:17:8a:03:f9:12:91:3c:b4:e4:
         ce:4a:64:92:ed:28:33:c4:6a:38:47:c5:61:4a:9b:fe:9b:22:
         ed:8a:4a:9a:73:9f:6d:0e:37:23:48:13:2c:19:98:40:af:ef:
         f0:0e:67:bf:e4:aa:55:5a:84:bd:ab:d0:04:f8:7f:3e:0e:c5:
         20:ab:9a:c7:aa:8f:e7:cc:cb:f9:74:5b:86:18:44:56:16:49:
         e4:d7:ff:72:ab:6c:d0:20:31:ed:c3:03:e1:6a:cf:db:ab:94:
         c5:e5:ce:bc:9b:36:c5:cc:3b:45:d6:45:13:00:95:79:d6:8c:
         92:27:f7:4f:7d:cc:2b:2b:4d:aa:28:e9:f3:d3:a6:60:1c:d5:
         28:4d:be:d2:93:14:e8:87:32:36:fa:35:96:e1:fe:bd:22:ed:
         3a:eb:6c:29:e6:84:42:e9:47:c0:fe:6f:b1:88:91:0d:5a:b2:
         d1:fd:82:91:c9:01:25:55:32:18:a3:6e:0d:74:68:c3:cb:ed:
         de:91:9e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----