Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e302e302f31372d3234203d3e2031323339.roa
File:                     3135372e3235342e302e302f31372d3234203d3e2031323339.roa (raw, json)
Hash identifier:          anfcaq9VUxBv2yegn4KMyp5dwq5PCdfBe6JzVYXGwJo=
Subject key identifier:   5C:DC:98:E2:87:6A:E3:EC:F1:07:F7:C3:65:E7:A2:F6:D6:4D:66:05
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       252B77F64512D4000F26FB4386E25522BAFD6438
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e302e302f31372d3234203d3e2031323339.roa
Signing time:             Fri 30 Dec 2022 19:54:16 +0000
ROA not before:           Fri 30 Dec 2022 19:49:16 +0000
ROA not after:            Fri 29 Dec 2023 19:54:16 +0000
asID:                     1239
IP address blocks:        157.254.0.0/17 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:2b:77:f6:45:12:d4:00:0f:26:fb:43:86:e2:55:22:ba:fd:64:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Dec 30 19:49:16 2022 GMT
            Not After : Dec 29 19:54:16 2023 GMT
        Subject: CN=5CDC98E2876AE3ECF107F7C365E7A2F6D64D6605
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:70:d4:08:05:d1:22:71:73:e4:c6:91:ec:50:
                    28:f2:1c:8a:0c:44:ff:09:6a:57:83:8f:7d:90:de:
                    a3:58:24:8e:dd:bd:7c:58:0b:9c:40:79:bd:d7:48:
                    65:12:90:62:0d:6b:53:45:7c:09:a5:7f:24:e3:58:
                    93:14:d7:07:7e:23:88:6b:ea:d1:1f:1f:b0:12:0b:
                    82:cd:13:20:73:b4:33:7e:9f:26:98:20:97:95:15:
                    46:cb:73:d8:48:d8:cc:c2:02:20:28:b7:40:d6:3f:
                    9a:8d:23:c7:ea:54:4e:e9:bf:05:39:3f:7f:07:aa:
                    25:91:c6:66:c7:94:de:a7:ac:e3:e5:72:03:6c:68:
                    6e:d5:d1:e5:c1:f1:f2:ca:b0:71:22:14:2c:33:3d:
                    33:8a:42:c3:df:22:b3:3a:19:2a:d9:36:ad:b7:a7:
                    55:7d:c9:51:28:52:99:37:96:76:ae:af:40:89:cb:
                    1e:ea:67:03:60:70:63:51:17:67:c2:d1:64:70:36:
                    74:5a:86:74:f1:95:39:1d:ef:b7:65:56:d7:87:9a:
                    4c:07:44:6d:18:d6:7c:68:98:ba:46:d0:cd:5b:0b:
                    f1:e1:27:53:7c:b2:39:b7:8e:5b:87:c7:bd:f0:61:
                    75:b8:7e:ed:46:a1:9f:ca:d0:db:79:91:f5:82:ae:
                    3d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:DC:98:E2:87:6A:E3:EC:F1:07:F7:C3:65:E7:A2:F6:D6:4D:66:05
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e302e302f31372d3234203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         49:9d:2e:85:db:cc:c9:d4:7c:8f:a9:f0:0c:d2:b4:65:ec:ec:
         a0:3e:ef:f4:03:93:98:c8:4c:bb:53:40:d3:06:c0:9f:0d:68:
         49:8d:3d:04:b4:15:4f:9b:30:ba:cb:2a:76:22:e5:42:c5:15:
         1d:79:4c:73:cd:4d:36:a2:e8:f7:51:dc:ad:01:5f:ce:02:4a:
         28:e0:2c:a2:07:08:f8:0a:a5:da:b3:4e:16:7e:cc:33:79:66:
         a8:83:1a:40:9f:ee:b2:5f:f9:75:be:99:94:82:e1:65:9e:56:
         6b:08:56:5a:d6:84:fe:d5:61:3a:f1:d1:35:07:f1:e5:08:9a:
         49:bc:04:25:c7:59:24:a2:4f:9f:1a:15:6c:99:01:99:a4:0b:
         58:13:26:6f:ae:fe:6a:f6:04:b9:0e:71:31:b0:d1:2d:54:23:
         02:43:c3:08:af:7c:87:95:fb:c2:b1:bd:b9:6c:66:f3:c4:04:
         85:cc:2d:89:0c:15:7f:09:6e:7e:fe:34:b4:a3:0f:de:1a:07:
         36:fb:f2:3a:50:01:82:ee:73:61:c0:e1:b4:9a:03:00:9d:6f:
         8d:5e:52:62:84:b9:f8:61:9d:8c:26:5b:55:b7:2b:81:18:86:
         0e:68:5a:2d:a3:17:b9:5c:62:43:c6:27:36:fc:fe:07:d3:00:
         56:03:00:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----