Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf7f518c5d017f949e0c8c42f5/0/32332e3137352e3139322e3132382f32352d3235203d3e203534343736.roa
File:                     32332e3137352e3139322e3132382f32352d3235203d3e203534343736.roa (raw, json)
Hash identifier:          0Vir20qlOQF+XKR4D5Rk/W1Rlmg+nGtoExuozZdTaiY=
Subject key identifier:   DD:6D:2E:9F:E5:99:E1:B6:B5:A5:F6:97:D1:A4:CC:ED:FB:4D:4C:C8
Certificate issuer:       /CN=63ef6ba7c75b0732465686b4f94bffe5c8f62e466a4f048b0a
Certificate serial:       211152B13226F31477E2FF5553E54441A165EC3E
Authority key identifier: E5:2C:37:7F:6C:65:01:F9:CA:9E:EB:01:8F:66:22:B1:DC:E9:86:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7e20303-2390-47a7-b89c-842367be4584/63ef6ba7c75b0732465686b4f94bffe5c8f62e466a4f048b0a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf7f518c5d017f949e0c8c42f5/0/32332e3137352e3139322e3132382f32352d3235203d3e203534343736.roa
Signing time:             Thu 16 Feb 2023 15:20:00 +0000
ROA not before:           Thu 16 Feb 2023 15:15:00 +0000
ROA not after:            Thu 15 Feb 2024 15:20:00 +0000
asID:                     54476
IP address blocks:        23.175.192.128/25 maxlen: 25

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:11:52:b1:32:26:f3:14:77:e2:ff:55:53:e5:44:41:a1:65:ec:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63ef6ba7c75b0732465686b4f94bffe5c8f62e466a4f048b0a
        Validity
            Not Before: Feb 16 15:15:00 2023 GMT
            Not After : Feb 15 15:20:00 2024 GMT
        Subject: CN=DD6D2E9FE599E1B6B5A5F697D1A4CCEDFB4D4CC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:17:43:38:66:97:fb:4a:f8:67:b9:9f:32:50:
                    31:3b:0d:7d:f4:35:97:4b:10:af:04:86:94:43:80:
                    15:1e:05:74:b4:19:f7:94:43:1f:a1:a8:cf:84:d5:
                    65:7c:b0:39:06:14:1a:a9:9a:ba:85:09:91:24:fc:
                    85:f0:e7:91:27:1c:ae:1c:8b:b9:98:73:f5:12:80:
                    8c:b0:c4:18:fc:c5:87:f0:3a:6e:36:20:ab:00:da:
                    ae:20:21:4c:ab:3a:64:31:fa:b1:00:26:63:f2:73:
                    08:92:11:5f:4c:26:a6:50:0d:9a:f1:47:b9:a2:c6:
                    71:28:88:28:1c:3a:5b:0f:9b:fc:46:8b:ca:23:48:
                    d1:64:50:61:8b:cd:1d:37:48:a9:de:14:26:da:19:
                    7f:35:f3:b8:77:b7:b3:83:ee:31:8b:c2:e1:05:20:
                    5d:1f:cd:63:8b:a2:c6:bf:5f:f6:7c:68:dc:59:54:
                    6b:9c:68:f9:61:24:84:59:fe:56:48:f6:b0:77:21:
                    93:3f:fc:b6:7e:d5:1a:5d:62:2e:33:2a:18:af:fd:
                    5c:7a:3a:13:c5:db:4c:9e:63:ba:6e:25:00:c1:7d:
                    10:31:e5:b9:56:e9:ac:4f:99:03:71:68:fb:7e:0b:
                    d6:e5:ea:5a:c3:0b:fe:62:0d:88:91:5f:c1:e6:33:
                    aa:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:6D:2E:9F:E5:99:E1:B6:B5:A5:F6:97:D1:A4:CC:ED:FB:4D:4C:C8
            X509v3 Authority Key Identifier:
                keyid:E5:2C:37:7F:6C:65:01:F9:CA:9E:EB:01:8F:66:22:B1:DC:E9:86:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf7f518c5d017f949e0c8c42f5/0/E52C377F6C6501F9CA9EEB018F6622B1DCE98600.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7e20303-2390-47a7-b89c-842367be4584/63ef6ba7c75b0732465686b4f94bffe5c8f62e466a4f048b0a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf7f518c5d017f949e0c8c42f5/0/32332e3137352e3139322e3132382f32352d3235203d3e203534343736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.175.192.128/25

    Signature Algorithm: sha256WithRSAEncryption
         c2:c8:d6:cd:34:f8:03:51:9a:7f:20:a0:48:09:53:be:63:4e:
         f0:94:0e:35:0a:27:f4:55:ac:67:48:1a:86:e6:85:36:fa:c7:
         0f:6a:1e:14:bb:61:7f:3c:7f:69:53:92:00:60:b2:a9:c8:27:
         1c:73:b6:99:aa:a4:75:aa:b3:87:df:eb:d7:c6:63:93:2a:f9:
         98:9e:9c:20:d0:d6:9e:b5:6a:96:da:8e:7d:b1:6d:d0:a6:fc:
         2d:f3:4d:6f:93:a3:1b:fb:99:8a:d5:7d:38:5b:d0:ca:ba:03:
         ed:d8:91:ee:60:3d:69:09:6d:95:67:12:b8:4c:3c:44:5c:a9:
         c5:c2:55:18:22:4c:d8:8c:9f:10:4a:98:be:8c:96:3f:bb:15:
         98:d3:44:dd:bf:1b:e4:dd:c7:4f:a5:9d:b4:30:1e:ef:e0:b1:
         d1:fc:ad:e7:5f:77:40:96:54:3f:16:d9:2b:6a:9e:8a:f8:52:
         ff:25:fc:7d:23:7a:c3:e8:b6:97:c5:60:ea:87:c0:f9:e2:b6:
         9c:ec:df:3b:d7:f5:a5:bf:0a:42:4e:31:51:7e:4f:31:63:be:
         dc:c0:b8:b5:ec:c5:d6:00:f5:44:30:25:b8:2f:4d:85:6f:67:
         11:1a:c3:03:21:e6:2d:c0:3e:8e:a2:8e:c0:94:e8:bc:39:7c:
         19:e1:ad:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----