Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/37352e3130322e36332e302f32342d3234203d3e2033353037.roa
File:                     37352e3130322e36332e302f32342d3234203d3e2033353037.roa (raw, json)
Hash identifier:          w2eh01+uoLvlTtofQg3LuhLK5UcYENyMzQs8pj7r224=
Subject key identifier:   73:4B:AC:6E:10:56:6A:EF:5F:92:6A:AE:7A:C9:75:8A:8B:E9:CF:0D
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       13799451F5D3444F7A6C2B820AF6E24EC2C6A3E6
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/37352e3130322e36332e302f32342d3234203d3e2033353037.roa
Signing time:             Tue 25 Apr 2023 11:34:02 +0000
ROA not before:           Tue 25 Apr 2023 11:29:02 +0000
ROA not after:            Tue 23 Apr 2024 11:34:02 +0000
asID:                     3507
IP address blocks:        75.102.63.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:79:94:51:f5:d3:44:4f:7a:6c:2b:82:0a:f6:e2:4e:c2:c6:a3:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Apr 25 11:29:02 2023 GMT
            Not After : Apr 23 11:34:02 2024 GMT
        Subject: CN=734BAC6E10566AEF5F926AAE7AC9758A8BE9CF0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ec:56:9e:7a:69:d4:65:7f:b8:16:85:21:cb:
                    54:d8:47:0a:51:ec:73:f5:f9:55:44:7d:31:2e:b9:
                    8d:08:29:2b:ba:a1:4a:03:d6:40:45:09:98:a4:03:
                    19:de:04:3f:ed:d8:dd:f2:a7:f7:8d:ee:6d:9f:00:
                    ce:65:48:06:86:22:07:6e:9e:aa:2a:7c:6f:42:3b:
                    3f:76:e3:fd:16:e7:b7:bf:7e:9a:49:c7:45:25:7d:
                    1f:35:22:a8:a1:5d:2a:22:d0:25:0e:62:9b:b4:87:
                    e7:a8:68:b0:41:ea:50:4e:9a:ff:d3:8a:c3:e7:65:
                    6d:5b:46:68:ed:d2:93:2a:c4:72:03:df:5c:f1:47:
                    ff:67:58:38:db:8d:82:1f:cf:0b:c2:53:be:3b:74:
                    82:74:94:61:33:15:0b:b4:20:52:d2:db:32:bb:c5:
                    30:ee:49:6c:00:64:0d:33:eb:b0:f5:21:2f:77:3e:
                    29:6d:fc:0b:fc:e0:28:d6:c9:ec:05:fc:b9:ff:d3:
                    f6:31:83:65:fd:9c:17:eb:a9:e5:28:26:6c:48:2b:
                    27:89:32:15:e7:9d:a4:01:03:77:95:9a:68:3c:fe:
                    8a:10:2b:c1:f7:ae:cd:98:72:a2:20:fc:8f:df:7a:
                    6d:a3:cf:d9:51:1d:48:5a:9e:7d:eb:bf:eb:22:5c:
                    e0:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:4B:AC:6E:10:56:6A:EF:5F:92:6A:AE:7A:C9:75:8A:8B:E9:CF:0D
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/37352e3130322e36332e302f32342d3234203d3e2033353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.102.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:56:86:95:e9:cf:42:d2:03:37:d7:6d:6a:fb:b9:e0:fd:02:
         1f:ee:34:9a:bf:c7:3f:35:ce:63:6f:fa:aa:a5:7d:f8:d8:0a:
         29:b8:53:d0:0a:02:49:28:54:1c:a8:e9:bc:9a:71:ea:6c:e4:
         fe:d1:a4:4c:b3:4c:2e:f7:d5:d4:d3:41:70:0a:cb:9c:ca:26:
         f4:04:9e:74:9a:33:da:62:86:68:f9:8b:20:ae:0c:14:57:f2:
         85:c8:f8:78:7b:98:02:e1:3b:86:de:45:3f:ee:4a:dc:25:e4:
         7e:69:9b:83:0f:69:be:2b:98:75:1d:bf:29:6a:c1:26:5c:9e:
         75:d1:fc:7d:ba:59:08:20:08:01:d2:56:83:98:e5:de:c2:27:
         8b:ed:d8:a3:a2:ae:c7:89:9d:1f:f6:df:98:a8:0c:b1:25:5c:
         07:eb:e7:32:a1:f1:95:b8:03:c2:84:97:35:aa:d4:93:1e:f2:
         76:16:28:3d:25:89:5f:0a:62:3b:dc:e1:53:26:1d:a9:b5:88:
         f9:a5:7d:27:a9:6d:18:99:55:7f:92:05:98:f3:2a:40:6d:f6:
         22:b6:3f:a0:bc:cd:d7:5b:34:5d:f8:d2:2c:b2:95:b1:32:d2:
         05:e4:95:5d:e2:11:eb:e4:30:0f:c3:56:ad:fd:b2:a5:93:cb:
         ea:4f:f6:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----