Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/37352e3130322e36332e302f32342d3234203d3e203631333137.roa
File:                     37352e3130322e36332e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          Qk78voraBimCKPMzuxwo9PYiuQTFdfP9mTPZKzAwaoQ=
Subject key identifier:   A3:01:AF:47:C1:8F:21:B2:0E:78:A9:74:BF:7D:51:D3:B7:96:A4:D1
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       77AD75D53529AA58A79937516AEA3514F97B8ADB
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/37352e3130322e36332e302f32342d3234203d3e203631333137.roa
Signing time:             Tue 14 Mar 2023 18:31:10 +0000
ROA not before:           Tue 14 Mar 2023 18:26:10 +0000
ROA not after:            Tue 12 Mar 2024 18:31:10 +0000
asID:                     61317
IP address blocks:        75.102.63.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:ad:75:d5:35:29:aa:58:a7:99:37:51:6a:ea:35:14:f9:7b:8a:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Mar 14 18:26:10 2023 GMT
            Not After : Mar 12 18:31:10 2024 GMT
        Subject: CN=A301AF47C18F21B20E78A974BF7D51D3B796A4D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e9:79:b8:25:0a:89:bd:c7:68:09:54:d2:73:
                    9b:2f:38:59:38:3e:a2:4b:1f:23:9a:18:41:04:85:
                    62:47:af:d7:77:58:7d:f8:bc:1a:e2:84:c4:65:01:
                    8e:ff:e6:d8:aa:65:5d:6c:61:cd:95:ef:b4:b0:3e:
                    e2:54:6e:64:af:92:14:12:c5:17:29:b3:32:34:26:
                    c1:7d:43:51:69:24:45:36:cf:fc:12:8a:3f:75:29:
                    bc:71:38:3b:5b:f2:30:d3:48:39:48:7a:cb:40:76:
                    bf:4a:09:e2:48:68:0d:97:2a:5c:7d:70:59:c3:6f:
                    4a:08:7b:74:b7:cb:2e:9c:ef:a3:f2:b5:52:d5:72:
                    b4:32:46:79:1b:83:d0:aa:10:b0:c1:dc:bf:fa:56:
                    91:2f:a0:1f:3a:12:5b:71:c0:29:e9:86:72:2d:c1:
                    8e:db:5e:f4:c8:35:9f:1f:de:5d:ff:29:51:e2:b3:
                    1f:5b:aa:16:dd:e2:b3:9a:12:c3:9d:7a:24:da:ff:
                    36:6f:04:cb:66:6f:8c:60:6a:f8:3a:2d:f7:04:a5:
                    de:d8:47:29:00:81:7c:0f:cf:ba:10:92:bb:b5:b9:
                    d4:9d:3b:07:df:94:89:52:ec:cd:e6:19:4f:17:bf:
                    4e:f8:5f:90:e6:10:c9:f3:b5:58:49:b1:f5:6e:ff:
                    a7:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:01:AF:47:C1:8F:21:B2:0E:78:A9:74:BF:7D:51:D3:B7:96:A4:D1
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/37352e3130322e36332e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.102.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:32:f8:af:e4:93:ee:16:43:63:4f:f3:11:75:b1:73:f1:34:
         56:34:65:ae:b1:c3:32:ca:9c:70:2f:9a:e9:6b:34:fe:b3:80:
         83:c1:67:e1:f6:2e:4f:7d:c6:d9:7b:3d:1b:b8:bd:ae:ca:87:
         d6:20:ed:b4:8b:f1:26:a2:4d:c6:14:ba:af:73:ea:c3:22:94:
         7e:c1:dd:aa:a6:f5:a8:e1:14:08:9a:67:34:df:8b:3f:e1:9d:
         2a:2b:c2:df:38:5e:d7:60:05:eb:03:bb:86:08:9a:18:14:01:
         63:3e:33:9e:d9:1b:12:30:e6:e9:3b:14:15:44:7b:f6:1a:19:
         90:46:48:1f:e3:9b:6a:90:df:90:b1:11:74:45:93:7e:d4:e6:
         2a:66:f0:df:1e:37:23:0b:7e:a9:88:46:15:6e:55:91:fe:9f:
         32:58:e8:23:02:52:b6:9e:43:55:86:26:fa:b0:70:e1:ef:cf:
         09:4a:e1:fa:bd:60:71:2b:6e:15:bb:72:74:28:1f:65:57:46:
         53:1b:64:be:7d:32:b9:19:ae:64:2b:41:dd:f4:9d:d6:b2:c8:
         ea:fe:d9:e0:05:8d:3a:d1:16:89:e4:bd:4e:f8:3b:2b:47:9f:
         83:7e:e6:25:be:8b:f0:0d:5a:49:06:90:e2:a5:22:22:8a:66:
         e3:5b:c8:3a
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUd6111TUpqlinmTdRauo1FPl7itswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjk2MjZjMmUwYjk2NGVkNWU4YmE2YTZmM2VkMGZkNjM2
Y2YzNjQ1ZDZjY2I2MTIzYjkwHhcNMjMwMzE0MTgyNjEwWhcNMjQwMzEyMTgzMTEw
WjAzMTEwLwYDVQQDEyhBMzAxQUY0N0MxOEYyMUIyMEU3OEE5NzRCRjdENTFEM0I3
OTZBNEQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtel5uCUKib3H
aAlU0nObLzhZOD6iSx8jmhhBBIViR6/Xd1h9+Lwa4oTEZQGO/+bYqmVdbGHNle+0
sD7iVG5kr5IUEsUXKbMyNCbBfUNRaSRFNs/8Eoo/dSm8cTg7W/Iw00g5SHrLQHa/
SgniSGgNlypcfXBZw29KCHt0t8sunO+j8rVS1XK0MkZ5G4PQqhCwwdy/+laRL6Af
OhJbccAp6YZyLcGO2170yDWfH95d/ylR4rMfW6oW3eKzmhLDnXok2v82bwTLZm+M
YGr4Oi33BKXe2EcpAIF8D8+6EJK7tbnUnTsH35SJUuzN5hlPF79O+F+Q5hDJ87VY
SbH1bv+n6QIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFKMBr0fBjyGyDnipdL99UdO3
lqTRMB8GA1UdIwQYMBaAFE8GHzq5hjgo92M+vEYwD5t+h3q8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODY5M2YwNjAwMTg2YzZlN2ZkOGQzNjYwLzAv
NEYwNjFGM0FCOTg2MzgyOEY3NjMzRUJDNDYzMDBGOUI3RTg3N0FCQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2FkOWIzMDEwLTMxMTYtNDY0ZS04YzU4LTk1ODY1MDBmMTcwMS82OTYy
NmMyZTBiOTY0ZWQ1ZThiYTZhNmYzZWQwZmQ2MzZjZjM2NDVkNmNjYjYxMjNiOS5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg2OTNmMDYwMDE4NmM2
ZTdmZDhkMzY2MC8wLzM3MzUyZTMxMzAzMjJlMzYzMzJlMzAyZjMyMzQyZDMyMzQy
MDNkM2UyMDM2MzEzMzMxMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABLZj8wDQYJKoZIhvcNAQELBQAD
ggEBADYy+K/kk+4WQ2NP8xF1sXPxNFY0Za6xwzLKnHAvmulrNP6zgIPBZ+H2Lk99
xtl7PRu4va7Kh9Yg7bSL8SaiTcYUuq9z6sMilH7B3aqm9ajhFAiaZzTfiz/hnSor
wt84XtdgBesDu4YImhgUAWM+M57ZGxIw5uk7FBVEe/YaGZBGSB/jm2qQ35CxEXRF
k37U5ipm8N8eNyMLfqmIRhVuVZH+nzJY6CMCUraeQ1WGJvqwcOHvzwlK4fq9YHEr
bhW7cnQoH2VXRlMbZL59MrkZrmQrQd30ndayyOr+2eAFjTrRFonkvU74OytHn4N+
5iW+i/ANWkkGkOKlIiKKZuNbyDo=
-----END CERTIFICATE-----