Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3135372e35332e3235342e302f32342d3234203d3e203136353039.roa
File:                     3135372e35332e3235342e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier:          Z5voaWMeagYuuJYRDYd5z/Mn1cyj/vkv2o0GLHGFwHY=
Subject key identifier:   70:03:17:BD:C9:7F:C8:CE:E8:77:1D:2F:F3:A1:54:C3:34:41:E1:5C
Certificate issuer:       /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial:       22F8FEC13341453636C9A93E1DEF813D3C6C79F5
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3135372e35332e3235342e302f32342d3234203d3e203136353039.roa
Signing time:             Thu 20 Oct 2022 18:03:27 +0000
ROA not before:           Thu 20 Oct 2022 17:58:27 +0000
ROA not after:            Thu 19 Oct 2023 18:03:27 +0000
asID:                     16509
IP address blocks:        157.53.254.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:f8:fe:c1:33:41:45:36:36:c9:a9:3e:1d:ef:81:3d:3c:6c:79:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
        Validity
            Not Before: Oct 20 17:58:27 2022 GMT
            Not After : Oct 19 18:03:27 2023 GMT
        Subject: CN=700317BDC97FC8CEE8771D2FF3A154C33441E15C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:e5:72:15:5b:5c:38:21:34:49:80:25:09:89:
                    55:52:bf:a9:f8:03:45:8d:aa:db:6f:dd:ed:37:da:
                    d4:a3:a3:c6:f8:9f:02:63:2b:5b:59:0b:6d:2f:d8:
                    60:11:31:64:43:61:a0:cd:b7:e9:af:41:5f:ea:0f:
                    31:31:e1:46:fa:28:95:1a:5a:75:de:85:b9:bb:f6:
                    ed:5b:e2:c8:24:24:16:f8:ea:1d:65:aa:c2:a8:da:
                    08:15:1c:3e:3e:79:59:72:66:a8:95:df:3f:21:0c:
                    03:6b:03:79:3e:dc:ca:58:6a:20:a6:7c:c7:80:18:
                    b6:46:d8:56:7e:e2:02:ff:f6:c0:db:2d:94:a3:e7:
                    b6:aa:37:ea:4c:78:a5:88:a4:cd:fb:88:c4:a1:d8:
                    72:d5:e7:3d:08:29:8a:84:27:5c:9a:bf:66:77:a2:
                    a5:66:aa:c7:4a:40:15:5c:ba:ad:1e:ad:23:f8:61:
                    65:ae:04:ae:26:2f:2e:44:20:4a:eb:f4:d6:69:b9:
                    2c:0a:2e:0e:66:54:ff:5b:20:d8:29:ec:a0:30:c0:
                    42:95:71:59:87:71:f7:d8:7f:ac:56:2e:db:6e:fa:
                    86:f3:1c:b1:c7:7d:74:84:2b:06:a6:42:77:99:64:
                    3e:29:ec:18:14:de:6f:35:3b:c9:78:a1:b8:fa:e7:
                    07:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:03:17:BD:C9:7F:C8:CE:E8:77:1D:2F:F3:A1:54:C3:34:41:E1:5C
            X509v3 Authority Key Identifier:
                keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3135372e35332e3235342e302f32342d3234203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.53.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:f6:76:39:8c:e1:5b:13:95:2f:38:df:a8:a1:82:0c:7f:88:
         6b:00:f0:bd:8b:40:68:e0:e1:a3:04:aa:52:01:4e:e2:62:ad:
         70:a7:c5:cf:8e:d1:dc:0a:a3:f8:ae:21:e2:6d:f2:59:b9:7d:
         1e:69:7d:50:c9:78:e4:98:16:44:e3:a6:0f:3b:ea:98:f8:3d:
         53:18:54:a6:64:4e:14:d0:87:89:32:44:8b:a8:86:54:97:8c:
         a6:90:ca:c4:1f:23:a2:4f:d4:b7:24:b0:17:13:25:60:03:9c:
         77:2b:e8:e1:b9:57:f0:df:05:c6:11:26:76:56:75:39:68:eb:
         60:38:c6:f4:d6:d3:69:09:2d:e6:78:53:28:ac:a1:0f:c9:e4:
         e5:e2:93:c3:e1:3e:80:65:e9:2b:68:b9:76:f6:10:cf:11:da:
         c6:61:bf:eb:4e:dd:24:7b:15:3a:0e:84:9e:e1:d1:7d:33:97:
         0a:f2:e7:58:aa:5f:49:fb:5c:26:b6:6f:a1:cf:c3:de:f0:81:
         96:ed:c0:e6:83:d5:aa:0b:ba:ac:2b:e4:a7:82:5f:cb:32:4d:
         dd:10:5d:71:63:42:24:95:a2:c1:f4:c9:09:e5:84:df:28:e8:
         8e:0e:29:6e:95:77:c1:4b:4d:44:e7:e6:e0:7a:eb:e4:02:5a:
         92:04:7b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----