Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/37352e3130322e32382e302f32342d3234203d3e20383334.roa
File:                     37352e3130322e32382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          jDPWYmNECWAFSHNKRLa5V2OBHcRFH0KnWXgSD/HboUo=
Subject key identifier:   6F:2A:D1:9E:40:0B:14:E7:DD:79:4D:08:50:D9:C0:DD:94:79:96:09
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       6CDED8830ED3E59620FF4774D95691EAED4C525D
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/37352e3130322e32382e302f32342d3234203d3e20383334.roa
Signing time:             Thu 18 May 2023 10:00:05 +0000
ROA not before:           Thu 18 May 2023 09:55:05 +0000
ROA not after:            Thu 16 May 2024 10:00:05 +0000
asID:                     834
IP address blocks:        75.102.28.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:de:d8:83:0e:d3:e5:96:20:ff:47:74:d9:56:91:ea:ed:4c:52:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: May 18 09:55:05 2023 GMT
            Not After : May 16 10:00:05 2024 GMT
        Subject: CN=6F2AD19E400B14E7DD794D0850D9C0DD94799609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:4c:e6:94:4d:7b:98:eb:d7:3a:9b:8c:ef:b5:
                    1b:d7:96:5f:2d:fa:48:a6:30:21:65:3b:17:79:a6:
                    c0:b3:3b:de:ac:ae:f7:1f:5a:b5:ab:13:87:f0:48:
                    8d:a0:0b:d7:52:06:cd:5a:4e:e6:d9:9c:6a:18:51:
                    b1:b8:af:36:69:d0:bf:0f:59:af:cd:8e:12:cc:01:
                    6a:1a:be:46:6a:c7:bd:ef:61:9b:58:27:79:bc:a0:
                    e4:9a:65:dd:a4:d8:b0:ab:b5:32:56:37:f9:a3:0d:
                    79:29:c4:7a:36:69:16:0d:d2:dc:9d:33:71:db:e2:
                    e4:a9:8d:cb:7f:2d:b8:ed:86:69:be:82:07:24:a3:
                    a9:03:2c:ca:e2:72:f8:79:b5:f8:17:aa:fc:fd:d5:
                    b5:d9:b8:8e:82:0b:ad:97:04:24:9a:d5:23:91:58:
                    fe:13:9a:fa:71:99:4e:29:d0:58:13:36:5a:c3:f6:
                    9e:a0:cb:eb:8c:9d:ca:94:48:f9:a1:44:48:a9:12:
                    d8:97:5f:f8:81:c8:a2:c9:cb:5f:c5:36:0f:e5:4d:
                    f8:70:60:aa:e7:6c:7e:aa:5d:c4:5b:5c:dc:f6:16:
                    8d:c1:16:b1:8e:c0:e0:0f:36:6d:03:bb:1b:8b:26:
                    65:52:5c:92:82:81:90:db:d5:70:b6:10:f1:a3:7c:
                    0c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:2A:D1:9E:40:0B:14:E7:DD:79:4D:08:50:D9:C0:DD:94:79:96:09
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/37352e3130322e32382e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.102.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:12:0d:35:96:fb:d2:ad:b5:c4:38:57:33:2f:6e:2d:8d:64:
         a0:56:20:31:1b:c4:10:16:02:e7:37:5a:0a:f7:e8:59:04:38:
         68:65:28:ac:bf:8c:40:88:19:aa:28:fc:e6:45:8c:10:77:56:
         b7:d6:81:ec:1a:36:9b:cd:dc:c9:e3:99:93:9d:c6:9b:42:a7:
         13:7c:59:d0:e5:74:9f:b5:6c:e5:ec:c4:37:af:d4:b6:83:d1:
         d2:de:60:21:83:39:84:04:ad:6f:42:20:32:b6:3b:a6:75:07:
         39:f0:13:49:a5:bf:69:af:fd:89:36:db:24:d7:9b:58:7b:84:
         0d:e4:20:14:3c:6f:4a:29:a2:f7:c9:48:37:ad:3a:fb:35:a3:
         11:35:5e:22:0d:bd:9a:b3:da:91:f7:f4:e0:b4:9b:9c:35:70:
         73:ef:0c:a3:ee:2e:05:5c:6a:2d:7f:92:de:d8:b6:be:75:e6:
         02:ec:de:37:35:78:d7:13:dd:bd:8f:c8:ab:b6:f1:c7:06:84:
         a4:a0:a7:2e:04:59:f4:83:07:c6:a6:55:e4:b5:b1:0f:8d:b9:
         a2:4a:19:1d:51:97:94:cc:f1:1e:20:75:e7:be:5f:a7:d7:89:
         c5:21:7b:f0:67:db:79:43:ad:38:63:45:08:b0:2b:32:d5:5f:
         bd:75:09:68
-----BEGIN CERTIFICATE-----
MIIFqzCCBJOgAwIBAgIUbN7Ygw7T5ZYg/0d02VaR6u1MUl0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjk2MjZjMmUwYjk2NGVkNWU4YmE2YTZmM2VkMGZkNjM2
Y2YzNjQ1ZDZjY2I2MTIzYjkwHhcNMjMwNTE4MDk1NTA1WhcNMjQwNTE2MTAwMDA1
WjAzMTEwLwYDVQQDEyg2RjJBRDE5RTQwMEIxNEU3REQ3OTREMDg1MEQ5QzBERDk0
Nzk5NjA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8UzmlE17mOvX
OpuM77Ub15ZfLfpIpjAhZTsXeabAszverK73H1q1qxOH8EiNoAvXUgbNWk7m2Zxq
GFGxuK82adC/D1mvzY4SzAFqGr5Gase972GbWCd5vKDkmmXdpNiwq7UyVjf5ow15
KcR6NmkWDdLcnTNx2+LkqY3Lfy247YZpvoIHJKOpAyzK4nL4ebX4F6r8/dW12biO
ggutlwQkmtUjkVj+E5r6cZlOKdBYEzZaw/aeoMvrjJ3KlEj5oURIqRLYl1/4gcii
yctfxTYP5U34cGCq52x+ql3EW1zc9haNwRaxjsDgDzZtA7sbiyZlUlySgoGQ29Vw
thDxo3wMlQIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFG8q0Z5ACxTn3XlNCFDZwN2U
eZYJMB8GA1UdIwQYMBaAFE8GHzq5hjgo92M+vEYwD5t+h3q8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODY5M2YwNjAwMTg2YzZlN2ZkOGQzNjYwLzAv
NEYwNjFGM0FCOTg2MzgyOEY3NjMzRUJDNDYzMDBGOUI3RTg3N0FCQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2FkOWIzMDEwLTMxMTYtNDY0ZS04YzU4LTk1ODY1MDBmMTcwMS82OTYy
NmMyZTBiOTY0ZWQ1ZThiYTZhNmYzZWQwZmQ2MzZjZjM2NDVkNmNjYjYxMjNiOS5j
ZXIwgZsGCCsGAQUFBwELBIGOMIGLMIGIBggrBgEFBQcwC4Z8cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRlODY5M2YwNjAwMTg2YzZl
N2ZkOGQzNjYwLzAvMzczNTJlMzEzMDMyMmUzMjM4MmUzMDJmMzIzNDJkMzIzNDIw
M2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2YcMA0GCSqGSIb3DQEBCwUAA4IBAQDG
Eg01lvvSrbXEOFczL24tjWSgViAxG8QQFgLnN1oK9+hZBDhoZSisv4xAiBmqKPzm
RYwQd1a31oHsGjabzdzJ45mTncabQqcTfFnQ5XSftWzl7MQ3r9S2g9HS3mAhgzmE
BK1vQiAytjumdQc58BNJpb9pr/2JNtsk15tYe4QN5CAUPG9KKaL3yUg3rTr7NaMR
NV4iDb2as9qR9/TgtJucNXBz7wyj7i4FXGotf5Le2La+deYC7N43NXjXE929j8ir
tvHHBoSkoKcuBFn0gwfGplXktbEPjbmiShkdUZeUzPEeIHXnvl+n14nFIXvwZ9t5
Q604Y0UIsCsy1V+9dQlo
-----END CERTIFICATE-----