Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS211440.roa
File:                     AS211440.roa (raw, json)
Hash identifier:          rEp6ANI/7S8UR9hzG8hybWATk2JNDNveAmffL90FsKM=
Subject key identifier:   0A:2D:84:D7:6F:73:72:CF:DD:46:1E:A1:43:DB:F3:3D:F3:B5:64:0D
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       10DEE39164AC3EC451B184D9C761071F773F0ED4
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS211440.roa
Signing time:             Sat 27 May 2023 12:46:22 +0000
ROA not before:           Sat 27 May 2023 12:41:22 +0000
ROA not after:            Sat 25 May 2024 12:46:22 +0000
asID:                     211440
IP address blocks:        75.102.63.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:de:e3:91:64:ac:3e:c4:51:b1:84:d9:c7:61:07:1f:77:3f:0e:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: May 27 12:41:22 2023 GMT
            Not After : May 25 12:46:22 2024 GMT
        Subject: CN=0A2D84D76F7372CFDD461EA143DBF33DF3B5640D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:95:2c:97:94:78:b9:be:71:7b:b9:73:33:96:
                    7b:87:cf:2b:62:a5:3a:e8:62:0c:20:12:7f:e0:58:
                    49:69:ed:ec:61:c9:eb:7f:02:8c:4c:03:0e:22:65:
                    9a:3d:ef:b5:9b:a2:8c:2a:69:48:76:0d:bf:67:59:
                    c2:46:54:bf:1c:e3:55:6b:d5:ce:dc:96:dc:65:32:
                    3d:b5:48:f2:2e:0c:4f:14:e8:9d:41:75:6a:86:74:
                    3f:ae:18:3e:b7:29:61:37:20:22:91:4e:2a:44:49:
                    1b:bb:3f:87:ad:d9:a7:65:fa:4b:8b:4c:df:5d:3f:
                    9b:07:11:b7:bb:8d:34:e0:8a:d4:29:dc:a0:f8:d8:
                    0a:87:f2:50:4f:18:b7:bb:86:28:dd:d6:d0:e6:23:
                    89:03:06:be:71:30:e3:40:d5:8a:47:05:d6:e5:9e:
                    16:c3:b2:29:8e:c6:f9:c7:9e:34:11:bb:0e:95:ce:
                    b5:56:ef:f3:32:50:85:5b:68:6b:11:8b:68:80:38:
                    7f:3a:ff:71:76:e7:45:3e:44:91:ae:97:eb:c0:d5:
                    32:c7:b6:59:50:87:7a:88:81:52:e9:9e:95:61:eb:
                    52:e6:93:96:42:5b:a3:32:b2:85:5b:00:fd:d6:93:
                    f7:fa:67:4a:86:0b:0a:78:ff:3c:d8:b4:3f:4c:e8:
                    3a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:2D:84:D7:6F:73:72:CF:DD:46:1E:A1:43:DB:F3:3D:F3:B5:64:0D
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS211440.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.102.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d1:31:20:d4:c2:f4:d2:a4:b7:72:9d:34:d6:96:b4:fb:38:05:
         26:31:ad:f6:34:7b:25:4c:ec:9c:43:b7:ad:41:ea:c9:10:82:
         e2:97:ab:96:7c:d7:31:c6:2b:b9:72:1a:06:d8:1a:67:7f:74:
         58:00:f7:b2:ad:f7:b8:d0:fb:9f:f0:92:89:e6:93:5e:20:a4:
         5f:c1:80:b3:92:0d:bd:cb:3d:97:5c:9a:90:37:a2:7e:9c:2e:
         9f:92:ac:aa:b5:c9:8e:ed:85:86:78:3d:9b:40:48:47:84:e2:
         c5:b6:a8:47:25:86:05:18:b3:d9:24:cc:eb:dc:fb:76:39:a1:
         d6:7f:92:e7:c5:70:4c:9b:0d:d9:1e:fa:8f:8e:9f:31:2c:57:
         c1:36:20:72:97:4b:de:fa:1a:ca:d9:a9:38:87:83:32:43:a2:
         7b:88:3e:c0:db:f3:68:14:e0:96:44:d8:b0:62:15:2c:3a:f9:
         5f:df:96:dc:a6:97:5d:07:11:d0:d3:38:2d:e4:55:a4:8d:65:
         50:24:52:b1:9e:2a:4e:03:f5:93:da:3d:89:1f:ac:18:15:22:
         0a:50:31:10:06:db:aa:11:c3:19:41:20:54:fc:c7:b8:c7:e1:
         bc:ca:04:42:e1:c5:58:80:3c:93:82:6a:8b:f6:39:d0:d3:7c:
         c5:93:a8:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----