Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/37352e3130322e36332e302f32342d3234203d3e20323131343430.roa
File:                     37352e3130322e36332e302f32342d3234203d3e20323131343430.roa (raw, json)
Hash identifier:          bZ2XcwhVo7DV2y/lQembKbHmZHxvQO6E+Do4MsqbF1M=
Subject key identifier:   3D:E1:54:B1:BD:64:FB:88:2A:47:20:A6:7B:73:D8:46:95:DC:62:34
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       7ED62231E7E0A2D35DB863024A0861B2981A672C
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/37352e3130322e36332e302f32342d3234203d3e20323131343430.roa
Signing time:             Fri 26 May 2023 07:11:21 +0000
ROA not before:           Fri 26 May 2023 07:06:21 +0000
ROA not after:            Fri 24 May 2024 07:11:21 +0000
asID:                     211440
IP address blocks:        75.102.63.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:d6:22:31:e7:e0:a2:d3:5d:b8:63:02:4a:08:61:b2:98:1a:67:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: May 26 07:06:21 2023 GMT
            Not After : May 24 07:11:21 2024 GMT
        Subject: CN=3DE154B1BD64FB882A4720A67B73D84695DC6234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ac:d5:29:d6:0a:22:1e:91:54:89:f2:55:de:
                    f0:5e:3d:53:97:58:a9:32:e1:bf:79:5f:32:6f:1b:
                    50:bf:eb:8f:2f:cf:a8:16:38:31:a5:3a:24:76:ff:
                    f4:57:e4:70:f1:9a:40:fa:f1:8e:1e:cd:c0:c6:96:
                    e2:7f:9a:57:05:0c:8e:1b:97:ea:79:31:a8:ec:89:
                    85:16:06:8f:34:5b:8b:6d:26:bc:aa:a4:4d:23:b4:
                    12:b5:27:95:b1:e1:59:d1:d1:c6:b4:a6:f1:73:d8:
                    cf:57:91:e5:06:e5:6f:36:57:57:ef:ab:eb:c8:ca:
                    cd:e5:8a:d1:3f:0e:24:ff:40:20:51:dd:92:09:49:
                    b6:3c:11:b9:71:94:f6:6a:4c:ef:7d:ba:a9:87:36:
                    72:52:e1:85:20:26:fb:cd:20:01:17:23:e0:1a:92:
                    f4:24:7c:bf:b0:ff:ca:8e:2e:5b:4e:cc:e3:f8:2c:
                    4e:3d:1d:8a:fd:eb:a5:5f:f9:07:f9:b7:40:44:38:
                    07:e8:d1:be:35:10:09:02:fa:27:95:b3:bc:01:0d:
                    0f:f7:3e:dd:2f:36:99:e7:eb:d6:e7:fa:a7:37:64:
                    64:52:9d:ea:1a:2a:3e:3f:1f:30:61:af:9d:31:e9:
                    7e:b2:4b:5d:18:c1:e7:99:5b:06:f0:ca:b6:f7:73:
                    ba:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:E1:54:B1:BD:64:FB:88:2A:47:20:A6:7B:73:D8:46:95:DC:62:34
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/37352e3130322e36332e302f32342d3234203d3e20323131343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.102.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:d4:72:89:f2:3a:14:15:3c:5d:e1:54:9a:57:8e:5b:ef:a9:
         c9:59:21:9d:dc:3f:a5:b7:58:7a:20:3f:71:46:f1:53:d0:8e:
         fb:98:55:4a:15:14:ea:07:52:1c:d2:2a:d2:40:f8:b3:d5:37:
         4b:4f:af:9a:c1:b4:fc:45:7c:89:9c:57:da:9c:bb:39:61:51:
         03:34:5c:4e:f1:93:8c:d7:2b:70:48:69:b3:5e:3f:2f:f4:c8:
         49:7d:35:ef:d5:cf:98:fd:31:c2:0b:d1:a9:1e:df:68:e9:15:
         f7:30:f4:4e:a2:aa:08:c1:11:72:2b:05:83:19:a8:59:f7:40:
         cf:41:c7:b7:0b:5f:b0:70:d1:30:37:dc:8a:85:7b:b1:1c:53:
         7a:78:9a:0e:1b:ee:c9:42:77:3e:52:b3:7d:58:70:a5:7f:43:
         8d:2c:8b:83:a5:6e:52:85:13:e3:38:b6:ae:62:e3:95:30:53:
         78:db:9b:0e:43:0f:1d:ca:22:16:ea:f9:8f:51:05:40:5d:f5:
         45:1c:38:e9:e5:68:81:0a:6c:b4:06:8c:3b:71:51:87:73:6b:
         ba:85:81:4a:79:6e:e4:b3:a3:13:58:62:9b:56:de:aa:f3:9e:
         78:b6:a0:86:54:7a:ee:38:aa:07:e4:aa:7a:ac:7f:e6:1c:ed:
         e7:32:7b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----