Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3132382e302f32302d3234203d3e2031323339.roa
File:                     3135372e3235342e3132382e302f32302d3234203d3e2031323339.roa (raw, json)
Hash identifier:          0i7W0EUEHGO0z0sZbdzSLdtoBQSWVXVA9qFYOISBl3I=
Subject key identifier:   70:96:13:21:8D:14:44:B6:42:E3:EC:54:AE:6D:71:ED:A6:91:35:39
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       69E5B3601F163D8DD14740CDE69DEE545DF50127
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3132382e302f32302d3234203d3e2031323339.roa
Signing time:             Fri 30 Dec 2022 19:54:16 +0000
ROA not before:           Fri 30 Dec 2022 19:49:16 +0000
ROA not after:            Fri 29 Dec 2023 19:54:16 +0000
asID:                     1239
IP address blocks:        157.254.128.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:e5:b3:60:1f:16:3d:8d:d1:47:40:cd:e6:9d:ee:54:5d:f5:01:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Dec 30 19:49:16 2022 GMT
            Not After : Dec 29 19:54:16 2023 GMT
        Subject: CN=709613218D1444B642E3EC54AE6D71EDA6913539
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:35:21:23:75:66:5a:3c:e9:bd:78:de:80:d1:
                    3e:13:1c:12:f1:7f:e5:98:cd:85:9f:b4:12:62:19:
                    3d:c0:e8:3c:21:a9:d3:ec:78:c4:03:41:87:14:01:
                    2a:1b:aa:9c:ab:01:6b:b9:d4:b8:60:50:ef:b0:24:
                    21:5c:01:d5:0c:dc:3e:7c:28:81:21:20:50:c5:10:
                    83:56:5d:7e:d3:c1:a8:a3:36:ec:1d:ea:94:cc:bb:
                    21:15:90:53:5b:cc:fa:19:d7:84:a6:cf:36:d7:09:
                    d3:14:c1:78:4a:44:a6:43:08:68:39:74:b7:b0:f9:
                    fd:cc:14:19:ab:3f:1b:44:27:4f:08:e1:37:be:09:
                    bb:63:18:d2:60:67:ba:44:a2:bd:bd:13:6a:df:ae:
                    4e:6e:aa:ac:47:0a:22:df:b1:14:95:ba:de:8c:e6:
                    be:b5:12:0b:52:ec:f6:f6:d3:7d:d6:4a:e2:f4:bb:
                    3d:7d:70:4a:e6:c0:cf:25:66:a2:b3:68:bd:c0:22:
                    46:1e:b5:ff:4b:c0:12:7a:55:71:8b:de:c1:44:5d:
                    78:61:73:f8:19:d9:b0:74:3d:79:84:98:98:45:b9:
                    60:c6:e8:1f:f3:5c:e8:0e:ec:ac:c5:79:f9:53:21:
                    58:b3:89:37:22:16:c4:50:5b:15:2e:df:b6:96:9d:
                    a8:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:96:13:21:8D:14:44:B6:42:E3:EC:54:AE:6D:71:ED:A6:91:35:39
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3132382e302f32302d3234203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         46:13:ff:ff:ab:00:ac:29:d5:7a:fe:43:bc:94:e7:bb:7a:e2:
         d8:ae:43:8f:77:8a:ee:55:33:a8:85:da:cf:b8:b8:4d:73:44:
         d9:5a:49:88:94:37:fd:03:05:2c:0a:e2:84:ad:5a:77:e6:56:
         9b:33:b1:29:a6:e9:52:9d:49:fc:8a:9e:4b:9f:a0:86:d2:a2:
         9d:fe:13:7d:f1:77:da:8d:d8:a4:67:bd:e3:e1:e1:66:15:71:
         4a:55:82:98:1d:ba:44:2b:cb:09:7b:35:07:ec:30:15:dd:4c:
         b3:68:74:61:9b:b7:ba:d3:4f:ee:73:b7:6a:d6:5a:c2:03:27:
         bf:c4:a9:6b:c9:0a:8b:c5:f8:cd:60:89:dd:b4:3a:5f:c7:fe:
         18:70:e7:8a:b0:44:db:6f:11:e0:2d:b1:79:26:bd:f9:7b:4d:
         bb:2d:de:41:cd:19:5b:9f:7b:91:a8:33:80:5c:cf:d6:2f:67:
         8f:58:f1:e2:2f:a2:ad:1f:c2:02:0a:c1:77:69:c2:cf:3f:48:
         25:91:d6:ec:56:d6:7f:af:1f:84:d5:56:fc:1d:b9:0d:0c:db:
         87:19:7d:85:35:84:05:c3:eb:c4:b8:59:0a:e7:27:cf:1e:5a:
         28:ec:20:e1:13:87:ce:e7:d2:17:9d:79:b8:56:7d:f1:92:a0:
         65:78:2a:2a
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUaeWzYB8WPY3RR0DN5p3uVF31AScwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4
NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjIxMjMwMTk0OTE2WhcNMjMxMjI5MTk1NDE2
WjAzMTEwLwYDVQQDEyg3MDk2MTMyMThEMTQ0NEI2NDJFM0VDNTRBRTZENzFFREE2
OTEzNTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzUhI3VmWjzp
vXjegNE+ExwS8X/lmM2Fn7QSYhk9wOg8IanT7HjEA0GHFAEqG6qcqwFrudS4YFDv
sCQhXAHVDNw+fCiBISBQxRCDVl1+08GoozbsHeqUzLshFZBTW8z6GdeEps821wnT
FMF4SkSmQwhoOXS3sPn9zBQZqz8bRCdPCOE3vgm7YxjSYGe6RKK9vRNq365Obqqs
Rwoi37EUlbrejOa+tRILUuz29tN91kri9Ls9fXBK5sDPJWais2i9wCJGHrX/S8AS
elVxi97BRF14YXP4GdmwdD15hJiYRblgxugf81zoDuysxXn5UyFYs4k3IhbEUFsV
Lt+2lp2oBwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFHCWEyGNFES2QuPsVK5tce2m
kTU5MB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv
RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3
ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTY0
OTBmNDQ1M2I3Yi8wLzMxMzUzNzJlMzIzNTM0MmUzMTMyMzgyZTMwMmYzMjMwMmQz
MjM0MjAzZDNlMjAzMTMyMzMzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBJ3+gDANBgkqhkiG9w0BAQsF
AAOCAQEARhP//6sArCnVev5DvJTnu3ri2K5Dj3eK7lUzqIXaz7i4TXNE2VpJiJQ3
/QMFLArihK1ad+ZWmzOxKabpUp1J/IqeS5+ghtKinf4TffF32o3YpGe94+HhZhVx
SlWCmB26RCvLCXs1B+wwFd1Ms2h0YZu3utNP7nO3atZawgMnv8Spa8kKi8X4zWCJ
3bQ6X8f+GHDnirBE228R4C2xeSa9+XtNuy3eQc0ZW597kagzgFzP1i9nj1jx4i+i
rR/CAgrBd2nCzz9IJZHW7FbWf68fhNVW/B25DQzbhxl9hTWEBcPrxLhZCucnzx5a
KOwg4ROHzufSF515uFZ98ZKgZXgqKg==
-----END CERTIFICATE-----