Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/37352e3130322e36332e302f32342d3234203d3e20383334.roa
File:                     37352e3130322e36332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          dbBXs32VH8MXivo6lh0ggbkjIde7G+P4ZpZQt7h4Tlk=
Subject key identifier:   80:8C:5F:77:26:94:97:3A:06:D8:3D:A2:94:F2:A6:9B:F3:5F:4F:34
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       70D318C4EC981E523E57FB3CFD986E2D0323014F
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/37352e3130322e36332e302f32342d3234203d3e20383334.roa
Signing time:             Mon 15 May 2023 11:30:06 +0000
ROA not before:           Mon 15 May 2023 11:25:06 +0000
ROA not after:            Mon 13 May 2024 11:30:06 +0000
asID:                     834
IP address blocks:        75.102.63.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:d3:18:c4:ec:98:1e:52:3e:57:fb:3c:fd:98:6e:2d:03:23:01:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: May 15 11:25:06 2023 GMT
            Not After : May 13 11:30:06 2024 GMT
        Subject: CN=808C5F772694973A06D83DA294F2A69BF35F4F34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e3:86:81:44:95:85:8d:c5:39:d7:32:00:a7:
                    b8:e3:86:f3:32:d9:45:2c:95:b5:3b:ca:ac:e6:cd:
                    26:d1:30:5b:60:74:3b:86:84:a4:ca:d0:2d:6d:4a:
                    92:ce:21:99:e8:16:14:b3:2c:ac:f4:b4:9e:c6:45:
                    33:d8:9d:4b:a3:23:77:e8:7d:c1:8f:ee:56:6e:33:
                    f7:d7:91:26:8e:ed:a4:f7:c6:5d:d1:d3:49:8b:1e:
                    9a:55:5c:37:a4:2a:12:59:48:31:80:ff:f9:e7:25:
                    ed:98:96:d9:f3:19:25:f3:17:09:39:77:d5:6c:7a:
                    bb:35:ea:84:34:79:aa:c7:7d:f1:2d:06:84:d6:d8:
                    a6:f8:0d:d6:8f:e1:64:9c:dd:5d:b3:22:92:17:15:
                    fc:06:f7:a4:cf:b8:f8:71:0b:20:a5:b5:dc:db:93:
                    90:c9:cb:5c:6e:02:89:16:f5:e9:e6:fe:aa:21:a5:
                    42:08:9d:95:df:e3:27:b1:cc:1e:3d:f3:72:00:d3:
                    79:0e:70:4c:a7:53:b1:85:76:40:58:55:b0:d7:5b:
                    6c:38:0c:54:51:bf:84:6f:5b:f4:29:b2:b6:95:9e:
                    12:dc:99:bb:29:4d:18:cc:a4:67:7b:87:d1:e5:66:
                    f3:97:09:c4:8e:cb:3b:05:46:19:46:cf:93:08:d8:
                    ea:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:8C:5F:77:26:94:97:3A:06:D8:3D:A2:94:F2:A6:9B:F3:5F:4F:34
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/37352e3130322e36332e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.102.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:6c:7e:85:0a:d9:ce:21:e4:e6:79:e6:0f:97:2b:90:5e:a1:
         c7:aa:0b:13:c2:a1:3a:b3:7e:37:fd:24:cf:31:90:48:5d:66:
         eb:82:b6:4b:01:5a:cd:0a:b3:ed:85:aa:ba:16:f2:f3:dc:ab:
         36:cf:c1:20:10:32:3d:cc:2a:c4:60:de:cd:f3:ad:4c:7e:03:
         1a:98:b5:0e:ca:e8:a5:8a:ab:25:55:90:39:42:14:91:58:5d:
         dc:37:e3:5f:98:60:e8:57:04:5b:83:85:ca:41:eb:11:a1:77:
         a8:49:bd:65:bc:73:67:dd:92:e3:8b:50:75:ca:fd:77:ad:09:
         bf:0a:42:6a:b0:ac:44:e4:d2:9c:d5:3f:8c:3f:02:98:94:15:
         b1:fc:95:c1:82:41:42:17:70:6f:19:05:4f:86:b5:98:a0:41:
         28:85:c5:f1:74:b3:24:a2:75:88:f5:f2:ae:df:d5:4e:bb:99:
         cd:2b:09:9b:42:a3:1b:39:5f:13:fb:ae:db:d7:f2:52:b4:9f:
         6b:77:4a:c6:d4:5f:6d:ee:67:3c:56:43:26:90:60:e8:b6:a1:
         b9:01:5a:7a:ec:67:7c:4e:b2:e5:e2:4b:46:7d:b9:ca:38:f3:
         e3:d1:6d:87:c3:c0:0b:33:e9:bc:ef:30:c9:c5:bd:95:1c:30:
         d3:fc:8b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----