Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e302e302f31372d3234203d3e20383334.roa
File:                     3135372e3235342e302e302f31372d3234203d3e20383334.roa (raw, json)
Hash identifier:          q+2rec3BhUc3z2dj+v3HHcxgiqKETVRh7xNXvaFeMPo=
Subject key identifier:   C6:C1:D2:96:1C:78:26:B5:39:11:CE:F7:85:C3:98:BA:3C:E2:16:90
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       0B0017FB72AF9B893B54B35C4766C0D657409456
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e302e302f31372d3234203d3e20383334.roa
Signing time:             Fri 28 Apr 2023 00:00:05 +0000
ROA not before:           Thu 27 Apr 2023 23:55:05 +0000
ROA not after:            Fri 26 Apr 2024 00:00:05 +0000
asID:                     834
IP address blocks:        157.254.0.0/17 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:00:17:fb:72:af:9b:89:3b:54:b3:5c:47:66:c0:d6:57:40:94:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Apr 27 23:55:05 2023 GMT
            Not After : Apr 26 00:00:05 2024 GMT
        Subject: CN=C6C1D2961C7826B53911CEF785C398BA3CE21690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:cb:a6:97:d5:b4:6a:ad:12:50:90:0a:95:6e:
                    b1:cb:53:bb:b7:72:3d:12:7b:7f:c5:ff:05:d5:9b:
                    d9:11:27:89:97:25:cd:d1:6c:3d:66:de:7c:01:60:
                    58:fe:28:56:4e:82:69:ae:7b:d3:a6:95:73:11:e4:
                    24:7d:1a:2c:d5:c9:c0:41:e7:36:80:f3:98:d3:ca:
                    c5:ad:8f:f5:62:b4:fd:35:c6:6d:2b:35:55:55:8f:
                    cd:8d:44:73:44:8b:40:79:85:fe:c8:f2:fe:31:52:
                    21:fa:d5:74:5a:f8:af:7d:a9:50:ac:29:dd:06:1d:
                    de:1f:c4:57:33:29:63:b5:4a:13:b5:f9:45:67:05:
                    a1:5a:9f:9a:cc:d7:62:a0:55:59:8f:aa:5c:3b:2b:
                    a2:6f:a0:36:b2:40:8d:61:54:78:5b:a9:de:8e:37:
                    64:a3:8d:56:cb:17:8c:5b:b7:ce:e4:d6:9d:c0:27:
                    48:ea:39:1d:98:1e:63:f4:df:f4:00:11:48:8d:bc:
                    57:14:94:41:d0:9b:b0:8f:46:5b:db:62:d0:ff:f2:
                    81:08:e2:a4:77:01:7a:20:f3:f7:5d:c0:3d:bd:9d:
                    00:4d:e0:1c:7f:9b:70:00:68:c6:e1:b0:ba:ec:db:
                    67:f8:c3:6c:c3:61:7e:23:89:04:d1:8b:fb:0b:df:
                    6d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:C1:D2:96:1C:78:26:B5:39:11:CE:F7:85:C3:98:BA:3C:E2:16:90
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e302e302f31372d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         38:a3:36:b9:44:77:ef:69:70:04:1b:20:d6:2c:25:f1:15:77:
         ad:15:6f:95:9a:65:e2:de:c9:d2:20:df:ab:b7:2a:dc:66:fb:
         8b:ba:e9:97:75:24:48:16:79:5b:ed:b6:b6:30:c9:46:9e:e4:
         97:a6:b3:d0:73:41:ac:3c:7b:3a:c8:18:51:64:4a:72:a7:66:
         79:c0:f7:95:6f:f7:66:c3:92:c4:d6:ab:c8:5a:c3:3f:2d:73:
         12:e3:4a:39:d7:e2:18:75:d0:63:2a:d3:01:0e:b9:0a:98:3a:
         e9:ba:4f:21:2b:ec:07:c0:00:99:6b:87:fe:0c:94:de:44:98:
         f0:8f:89:33:97:35:e8:bc:a0:79:d2:d7:66:9d:0b:f2:81:b7:
         0e:5c:d0:85:cc:23:fe:5e:f0:04:d9:a5:6e:14:9f:e8:ca:4a:
         60:65:7b:0a:7f:04:50:fd:54:5e:c9:4f:c5:66:46:87:cc:ff:
         d5:aa:62:f8:3c:d5:cb:fd:98:1d:20:cb:42:f1:83:32:f6:87:
         4a:0a:41:05:8b:c8:17:f4:b5:23:91:3c:3d:92:c3:5c:7a:31:
         29:fa:d9:d2:2e:88:dd:fa:b3:92:71:ab:0f:00:c2:17:3a:31:
         a4:74:3f:46:8f:7c:bc:2e:72:21:a7:47:99:69:76:d1:f9:4d:
         f9:6f:db:03
-----BEGIN CERTIFICATE-----
MIIFqzCCBJOgAwIBAgIUCwAX+3Kvm4k7VLNcR2bA1ldAlFYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4
NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjMwNDI3MjM1NTA1WhcNMjQwNDI2MDAwMDA1
WjAzMTEwLwYDVQQDEyhDNkMxRDI5NjFDNzgyNkI1MzkxMUNFRjc4NUMzOThCQTND
RTIxNjkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncuml9W0aq0S
UJAKlW6xy1O7t3I9Ent/xf8F1ZvZESeJlyXN0Ww9Zt58AWBY/ihWToJprnvTppVz
EeQkfRos1cnAQec2gPOY08rFrY/1YrT9NcZtKzVVVY/NjURzRItAeYX+yPL+MVIh
+tV0WvivfalQrCndBh3eH8RXMyljtUoTtflFZwWhWp+azNdioFVZj6pcOyuib6A2
skCNYVR4W6nejjdko41WyxeMW7fO5NadwCdI6jkdmB5j9N/0ABFIjbxXFJRB0Juw
j0Zb22LQ//KBCOKkdwF6IPP3XcA9vZ0ATeAcf5twAGjG4bC67Ntn+MNsw2F+I4kE
0Yv7C99t3QIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFMbB0pYceCa1ORHO94XDmLo8
4haQMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv
RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3
ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j
ZXIwgZsGCCsGAQUFBwELBIGOMIGLMIGIBggrBgEFBQcwC4Z8cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5
MGY0NDUzYjdiLzAvMzEzNTM3MmUzMjM1MzQyZTMwMmUzMDJmMzEzNzJkMzIzNDIw
M2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHnf4AMA0GCSqGSIb3DQEBCwUAA4IBAQA4
oza5RHfvaXAEGyDWLCXxFXetFW+VmmXi3snSIN+rtyrcZvuLuumXdSRIFnlb7ba2
MMlGnuSXprPQc0GsPHs6yBhRZEpyp2Z5wPeVb/dmw5LE1qvIWsM/LXMS40o51+IY
ddBjKtMBDrkKmDrpuk8hK+wHwACZa4f+DJTeRJjwj4kzlzXovKB50tdmnQvygbcO
XNCFzCP+XvAE2aVuFJ/oykpgZXsKfwRQ/VReyU/FZkaHzP/VqmL4PNXL/ZgdIMtC
8YMy9odKCkEFi8gX9LUjkTw9ksNcejEp+tnSLojd+rOScasPAMIXOjGkdD9Gj3y8
LnIhp0eZaXbR+U35b9sD
-----END CERTIFICATE-----