Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/37352e3130322e36322e302f32342d3234203d3e2037303138.roa
File:                     37352e3130322e36322e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier:          AQBj9yL6rRFcWutLHhPgJSkyOrOHXzrHALwWWOSmf28=
Subject key identifier:   BD:37:D8:C7:AF:D6:5C:BD:55:05:69:11:68:AC:28:7F:79:0E:96:3F
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       4EC3F426F50F10674E1E1BF60FC4CBDB6593E9C9
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/37352e3130322e36322e302f32342d3234203d3e2037303138.roa
Signing time:             Wed 15 Mar 2023 16:09:44 +0000
ROA not before:           Wed 15 Mar 2023 16:04:44 +0000
ROA not after:            Wed 13 Mar 2024 16:09:44 +0000
asID:                     7018
IP address blocks:        75.102.62.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:c3:f4:26:f5:0f:10:67:4e:1e:1b:f6:0f:c4:cb:db:65:93:e9:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Mar 15 16:04:44 2023 GMT
            Not After : Mar 13 16:09:44 2024 GMT
        Subject: CN=BD37D8C7AFD65CBD5505691168AC287F790E963F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e9:76:44:a8:93:7a:c1:57:0c:65:01:00:dc:
                    cd:99:0d:9f:aa:22:ec:b7:da:e6:5b:0c:42:45:7c:
                    e3:5e:fd:07:58:4b:de:3a:78:7d:b5:f2:6b:0f:b4:
                    f8:3d:d8:82:51:9a:ca:63:e8:df:26:ff:5c:93:2f:
                    c6:cd:d0:6c:b4:b2:8f:c8:5b:35:ee:eb:ad:d5:d1:
                    45:cd:d6:11:d1:a2:a6:2a:de:8e:00:11:04:6b:5f:
                    a6:ae:3f:31:86:95:39:93:ee:16:97:94:79:d7:1a:
                    84:bb:4b:f3:f0:a0:3a:4b:10:2f:8b:d3:5d:ba:0b:
                    26:70:a5:6c:16:28:50:df:0d:9a:94:65:83:2f:9a:
                    52:7b:9e:ec:87:f9:f3:c6:a0:3d:30:45:20:5f:3c:
                    91:52:33:ed:14:ad:cb:d5:fb:23:bf:52:73:2b:85:
                    d8:2e:00:fa:da:7c:9f:67:78:24:8c:41:ea:8e:8c:
                    b9:ce:ee:02:4b:ef:4f:4a:c3:46:a2:db:10:c8:4e:
                    23:75:4f:1c:95:93:e6:ed:bc:ff:c7:77:a1:4b:a1:
                    0c:96:9c:79:92:68:2f:47:34:90:30:7f:58:1a:35:
                    e1:8c:33:42:c7:87:5b:d9:c8:74:69:57:6c:bd:07:
                    23:e8:4b:0e:e1:00:a2:df:35:91:ac:d3:31:a7:23:
                    d6:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:37:D8:C7:AF:D6:5C:BD:55:05:69:11:68:AC:28:7F:79:0E:96:3F
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/37352e3130322e36322e302f32342d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.102.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:93:a9:5b:35:a4:3d:80:c5:41:86:5e:da:37:1a:c5:b3:79:
         5f:21:ae:db:e1:17:91:d8:6e:db:8c:bd:cf:95:97:f9:01:70:
         60:1a:fb:68:d2:10:5e:82:ab:a3:d7:7b:da:7e:92:59:f1:29:
         49:12:44:03:81:69:4e:cc:31:76:65:84:77:a1:8f:61:9a:5b:
         57:75:76:1d:c4:c9:c5:f1:17:bb:04:ab:d3:c5:87:6d:77:29:
         92:81:93:83:c1:27:6f:b3:66:ec:50:6c:23:c2:8a:90:16:40:
         09:f2:5e:76:e1:22:b3:71:0c:b1:28:7d:4a:01:1f:17:ef:02:
         cb:3d:dc:85:99:fd:2d:30:b8:34:54:c5:3d:9c:e5:21:3f:d6:
         e4:ff:99:3f:60:7e:00:65:42:4c:de:cb:dd:1b:c0:35:b9:7a:
         3b:6a:e3:bb:94:35:87:d3:aa:d8:32:f2:28:1c:c4:c7:3c:38:
         f8:ac:39:55:bb:f0:93:9a:69:ae:24:b5:60:bd:9a:54:3f:8a:
         fb:cd:e3:17:51:a5:04:8b:bb:6a:e7:e4:64:b8:ec:83:9d:f9:
         23:00:f5:a2:f1:c6:71:4b:95:4d:c0:84:d4:20:c7:e0:ff:fe:
         4c:21:23:1f:d6:5e:61:17:be:47:d6:89:7c:b6:c2:3c:5b:fd:
         8b:4e:e2:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----