Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3135372e35332e3235352e302f32342d3234203d3e203136353039.roa
File:                     3135372e35332e3235352e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier:          sJFtluFdTiykhmgKOWm7C+3vfV59rFQdIq+cXfHwT2Q=
Subject key identifier:   CF:7A:38:33:7A:37:77:FE:41:C5:03:E4:47:1A:CC:3D:E8:04:55:43
Certificate issuer:       /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial:       0C0833FC4E3DB2015CFF093C2E46B76D0A7924EE
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3135372e35332e3235352e302f32342d3234203d3e203136353039.roa
Signing time:             Thu 20 Oct 2022 18:03:41 +0000
ROA not before:           Thu 20 Oct 2022 17:58:41 +0000
ROA not after:            Thu 19 Oct 2023 18:03:41 +0000
asID:                     16509
IP address blocks:        157.53.255.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:08:33:fc:4e:3d:b2:01:5c:ff:09:3c:2e:46:b7:6d:0a:79:24:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
        Validity
            Not Before: Oct 20 17:58:41 2022 GMT
            Not After : Oct 19 18:03:41 2023 GMT
        Subject: CN=CF7A38337A3777FE41C503E4471ACC3DE8045543
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b8:3b:d0:6d:58:64:e5:81:ac:5b:c1:a0:04:
                    1f:9c:25:c3:5e:a7:3d:ec:b6:17:29:d7:2e:4c:e3:
                    94:d1:a9:83:d5:c9:6d:42:cb:8c:29:3b:49:0d:dc:
                    83:16:52:d5:1a:1b:35:52:93:1d:ed:0d:c5:8e:99:
                    03:1e:ab:8d:5b:80:40:82:c4:42:63:83:51:bf:af:
                    80:5b:c2:f9:87:7a:09:b4:8b:e6:bf:75:80:26:a0:
                    e4:f6:f1:a1:91:f7:ce:eb:d9:ac:42:c9:d7:82:1f:
                    19:70:9d:af:1a:96:bd:72:a2:37:85:22:92:6e:40:
                    d7:a2:39:3a:04:c8:43:12:cf:78:db:9e:4a:06:dd:
                    b0:af:ce:0d:c3:5c:1f:4e:5d:40:90:0b:53:7b:99:
                    5c:e8:13:32:69:03:aa:7d:63:26:dc:fc:20:1e:82:
                    90:d1:75:28:31:e6:ef:42:91:11:27:5b:d1:c7:cd:
                    44:e7:c2:9d:c5:40:d2:98:30:17:5c:d1:15:c5:49:
                    4b:bd:98:83:af:2a:94:31:45:34:7c:70:22:83:96:
                    0c:f7:53:9c:1f:70:a1:db:42:9f:e4:f0:2c:c4:9e:
                    59:dd:c3:7a:7f:28:77:13:4b:c2:e6:e0:43:d7:e1:
                    a0:f9:dc:93:da:55:fc:81:73:d5:e5:97:f0:42:2c:
                    e7:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:7A:38:33:7A:37:77:FE:41:C5:03:E4:47:1A:CC:3D:E8:04:55:43
            X509v3 Authority Key Identifier:
                keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3135372e35332e3235352e302f32342d3234203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.53.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:3a:6a:c5:64:b0:5e:6d:1e:bb:05:e7:90:c0:9a:dd:d2:a1:
         ad:41:94:20:b0:c6:0c:98:de:4b:94:d1:06:dc:64:71:f8:1f:
         40:97:15:ac:41:06:80:09:ed:bd:46:b2:f2:76:e4:e2:cb:13:
         40:1c:94:f2:93:17:51:01:cb:6e:5b:f9:e1:1c:b4:21:dd:fc:
         99:e6:d3:fc:6b:e6:68:74:ed:fe:78:f5:b4:6b:71:48:f3:f6:
         e3:01:40:84:f9:b9:2a:12:de:72:77:a5:61:fe:82:d9:b9:ba:
         f1:ba:0f:15:4a:f2:26:78:59:20:ac:60:e3:0f:9f:06:31:a4:
         7e:a8:61:66:e6:06:70:b6:3e:60:78:16:91:3e:e6:19:6c:7d:
         0a:83:9a:d0:91:50:bd:5b:b8:6a:ec:d7:f6:d5:b9:cd:34:a1:
         81:52:56:95:5d:b6:a1:0a:53:95:b2:66:2b:58:26:62:75:18:
         4f:fc:19:17:4f:f1:53:35:c7:4a:68:04:bf:0e:1d:78:6a:c1:
         75:d7:a5:c6:14:bd:6d:20:17:2e:4b:d8:69:83:86:a0:e3:5e:
         29:d9:64:bb:60:0f:73:3c:7e:7a:61:02:ec:a8:77:26:c3:5b:
         0f:7e:2e:aa:e2:38:46:c4:8b:ee:0e:78:eb:dd:f8:3b:6d:63:
         bf:e2:dc:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----