Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS397373.roa
File:                     AS397373.roa (raw, json)
Hash identifier:          Ih/GRzctzxsPI5R4on5SiIE+EgYLMBVrz6v9l+PzRPI=
Subject key identifier:   3E:E3:16:93:8B:32:15:17:B3:8B:81:7A:82:AA:90:DC:43:41:65:83
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       2A8EB297BEE9B55CED2CF583D626B31BCE82653E
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS397373.roa
Signing time:             Sat 27 May 2023 12:46:21 +0000
ROA not before:           Sat 27 May 2023 12:41:21 +0000
ROA not after:            Sat 25 May 2024 12:46:21 +0000
asID:                     397373
IP address blocks:        75.102.8.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:8e:b2:97:be:e9:b5:5c:ed:2c:f5:83:d6:26:b3:1b:ce:82:65:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: May 27 12:41:21 2023 GMT
            Not After : May 25 12:46:21 2024 GMT
        Subject: CN=3EE316938B321517B38B817A82AA90DC43416583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9d:76:71:1d:34:70:0a:33:e3:1a:00:6f:8a:
                    6d:f9:e0:ac:c5:ce:19:63:32:e2:41:15:39:f5:a6:
                    84:ab:8f:e6:6e:35:a3:31:c4:f8:42:47:64:3e:74:
                    12:67:21:f8:9a:27:4a:73:c4:80:f7:72:d1:32:51:
                    0f:4a:e3:60:57:f6:63:36:8c:5d:1c:38:cd:7b:b2:
                    2f:19:c6:0b:cd:93:89:a3:14:48:de:09:44:58:54:
                    32:66:dd:0c:fa:8a:21:b4:36:8f:ad:dd:bb:43:b6:
                    fc:b5:21:97:1b:5d:bf:72:be:5c:33:b0:ac:d0:97:
                    5f:a9:a8:ec:ee:b0:f3:e5:bd:a9:a9:d2:c5:52:11:
                    39:7a:82:7e:06:ab:48:82:43:81:11:76:c2:73:cd:
                    83:0e:7a:b9:79:04:81:41:67:b7:ff:b8:6c:fc:07:
                    4a:4b:7b:c2:90:fe:78:47:f6:31:55:d3:b9:bf:40:
                    6d:2a:46:86:76:01:84:8a:d5:f5:6c:76:69:c5:14:
                    ba:2b:e3:8e:f7:56:6e:69:22:f1:46:57:ea:35:52:
                    16:f6:e2:99:fb:54:f8:70:ef:85:bf:b6:f9:08:03:
                    a3:ad:6d:c8:ff:cf:36:c5:0f:93:a7:e6:a8:d2:8e:
                    04:5f:6b:51:8a:c1:09:f1:68:f8:3f:82:9d:12:f2:
                    a5:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:E3:16:93:8B:32:15:17:B3:8B:81:7A:82:AA:90:DC:43:41:65:83
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS397373.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.102.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:d1:38:0e:c1:d8:4d:ce:b5:de:9f:f4:d7:37:66:d0:36:8e:
         bf:98:83:57:50:d2:7f:74:1b:2b:44:47:4d:00:f3:df:02:45:
         80:57:3a:44:ef:43:f7:f2:2f:aa:aa:70:8d:44:5d:27:94:2b:
         78:5d:07:5b:32:33:f7:b2:f5:b0:b8:b4:f3:70:54:e2:04:89:
         58:34:54:21:30:f7:71:e6:1c:19:00:98:e8:73:8a:61:b0:27:
         d5:b1:12:b0:b4:7b:5f:a2:8c:98:39:94:bf:35:ff:57:cb:98:
         2f:f8:f1:7e:e3:b1:46:74:21:db:12:18:16:a5:ac:72:77:06:
         86:fe:d8:ac:bf:ab:86:83:4a:cc:fc:da:93:68:e8:0b:85:6c:
         d9:c8:59:10:0f:f4:ac:8c:cf:79:ce:7e:83:b0:a0:bf:0f:87:
         fc:89:10:bd:9a:29:17:af:74:90:17:98:39:22:84:f3:d5:15:
         0f:94:b9:7e:46:d9:ac:96:b9:05:20:cf:b9:65:bd:4e:55:ed:
         e9:6f:61:6b:05:83:0d:3a:33:5e:98:16:68:15:72:e8:c6:a5:
         59:e4:33:a9:ee:21:d6:59:b1:46:a9:ea:da:08:4f:0c:64:68:
         eb:c5:d9:85:02:25:dd:85:de:0e:6c:1e:bb:bf:1b:d1:ad:4e:
         a6:f9:d2:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----