Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3135322e302f32342d3234203d3e20323037323739.roa
File:                     3135372e3235342e3135322e302f32342d3234203d3e20323037323739.roa (raw, json)
Hash identifier:          Odcebw7DWBLTATwAM4MCg7C9jTjIUqnZ53JtVCy/4tU=
Subject key identifier:   A4:D2:6C:0E:9F:44:CF:CA:C6:97:CA:B7:64:B6:BD:D5:46:DD:A8:31
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       24204B55125D3020E8D73A9EC97D3FBC7ECD4F8E
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3135322e302f32342d3234203d3e20323037323739.roa
Signing time:             Mon 30 Jan 2023 11:18:43 +0000
ROA not before:           Mon 30 Jan 2023 11:13:43 +0000
ROA not after:            Mon 29 Jan 2024 11:18:43 +0000
asID:                     207279
IP address blocks:        157.254.152.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:20:4b:55:12:5d:30:20:e8:d7:3a:9e:c9:7d:3f:bc:7e:cd:4f:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Jan 30 11:13:43 2023 GMT
            Not After : Jan 29 11:18:43 2024 GMT
        Subject: CN=A4D26C0E9F44CFCAC697CAB764B6BDD546DDA831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:51:4c:8c:ed:06:e3:f1:b7:0f:95:8d:d9:58:
                    7d:7a:02:eb:1d:8a:68:39:1e:3c:3a:a6:a0:94:92:
                    ce:80:bd:d4:1b:87:44:4b:ba:d0:b7:07:1a:78:c7:
                    24:72:31:06:84:cd:15:70:1a:07:97:e3:ae:ba:7a:
                    a5:01:6d:81:72:0f:00:aa:84:95:9d:78:e1:de:ed:
                    d6:27:ee:85:5d:61:57:15:48:e2:ff:c3:0c:a5:e3:
                    b3:2c:c9:47:e3:0f:ca:ca:db:07:14:41:35:5b:54:
                    a4:36:d8:02:64:17:53:2a:eb:0d:15:26:eb:5e:7c:
                    00:3f:66:1a:bd:df:e2:34:dd:e7:c7:b8:71:3e:f3:
                    c8:9d:1a:87:9b:55:fa:cb:c0:b7:f7:c1:1f:dc:d6:
                    39:a4:a5:0c:8a:3d:91:08:11:b9:fc:ae:1f:51:93:
                    ed:b3:b1:49:65:a6:fd:c6:ba:f9:10:42:82:f3:7e:
                    ad:ff:6a:96:48:2e:0c:d6:aa:60:81:07:34:17:b1:
                    91:fc:00:41:92:49:d8:8f:38:0c:59:09:4c:79:ca:
                    c8:1b:43:06:c8:59:f3:b1:51:f0:ac:a4:7d:73:68:
                    56:b4:07:4a:cb:6d:7f:00:62:8f:51:b3:b3:5a:d7:
                    9e:cb:b1:4c:65:d5:25:96:e0:79:0f:fc:fc:58:3d:
                    be:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:D2:6C:0E:9F:44:CF:CA:C6:97:CA:B7:64:B6:BD:D5:46:DD:A8:31
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3135322e302f32342d3234203d3e20323037323739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:07:0c:c7:9b:63:0d:91:5a:59:9f:5b:b7:b3:a6:f2:6c:3c:
         06:a4:30:68:95:23:52:6c:d8:39:76:a0:30:2e:82:86:a3:c6:
         e9:92:69:77:e6:6c:c8:4a:60:87:45:5f:b7:8f:ae:a8:41:fd:
         90:77:f6:5e:54:5e:d2:8c:06:59:41:40:22:0f:a9:c9:90:d0:
         8f:ea:43:b7:50:39:c6:c5:8b:97:c9:52:2c:3e:92:fc:47:5b:
         d6:24:31:56:01:bd:06:ad:a8:b1:ce:39:f9:6e:64:22:da:0e:
         a9:67:ae:c4:b9:84:e1:77:8f:14:bb:f2:90:c0:da:83:0a:2d:
         29:ce:49:b1:39:d4:09:65:2b:09:9c:6e:54:34:7d:ea:57:90:
         41:68:0b:d0:d3:b0:6e:5c:36:bd:8a:10:fb:7f:ab:88:51:7b:
         17:5e:5b:d5:2a:94:d2:7e:0c:16:37:51:96:2e:ee:b0:a2:58:
         82:ad:e8:0f:35:ec:db:9b:4a:c0:2d:a7:08:1e:02:c2:1b:2e:
         b9:3e:7f:a1:17:ba:d0:c4:00:f9:14:f5:8c:13:0d:54:1f:e3:
         74:e2:e6:46:16:b0:44:91:ae:69:b2:06:71:2a:03:a4:80:a7:
         a7:5b:75:86:73:05:32:5e:dd:55:ce:b0:47:00:6d:29:04:33:
         70:a7:76:0a
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgIUJCBLVRJdMCDo1zqeyX0/vH7NT44wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4
NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjMwMTMwMTExMzQzWhcNMjQwMTI5MTExODQz
WjAzMTEwLwYDVQQDEyhBNEQyNkMwRTlGNDRDRkNBQzY5N0NBQjc2NEI2QkRENTQ2
RERBODMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVFMjO0G4/G3
D5WN2Vh9egLrHYpoOR48OqaglJLOgL3UG4dES7rQtwcaeMckcjEGhM0VcBoHl+Ou
unqlAW2Bcg8AqoSVnXjh3u3WJ+6FXWFXFUji/8MMpeOzLMlH4w/KytsHFEE1W1Sk
NtgCZBdTKusNFSbrXnwAP2Yavd/iNN3nx7hxPvPInRqHm1X6y8C398Ef3NY5pKUM
ij2RCBG5/K4fUZPts7FJZab9xrr5EEKC836t/2qWSC4M1qpggQc0F7GR/ABBkknY
jzgMWQlMecrIG0MGyFnzsVHwrKR9c2hWtAdKy21/AGKPUbOzWteey7FMZdUlluB5
D/z8WD2++QIDAQABo4ICtjCCArIwHQYDVR0OBBYEFKTSbA6fRM/KxpfKt2S2vdVG
3agxMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv
RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3
ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTY0
OTBmNDQ1M2I3Yi8wLzMxMzUzNzJlMzIzNTM0MmUzMTM1MzIyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMjMwMzczMjM3Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACd/pgwDQYJKoZIhvcN
AQELBQADggEBAG8HDMebYw2RWlmfW7ezpvJsPAakMGiVI1Js2Dl2oDAugoajxumS
aXfmbMhKYIdFX7ePrqhB/ZB39l5UXtKMBllBQCIPqcmQ0I/qQ7dQOcbFi5fJUiw+
kvxHW9YkMVYBvQatqLHOOfluZCLaDqlnrsS5hOF3jxS78pDA2oMKLSnOSbE51All
KwmcblQ0fepXkEFoC9DTsG5cNr2KEPt/q4hRexdeW9UqlNJ+DBY3UZYu7rCiWIKt
6A817NubSsAtpwgeAsIbLrk+f6EXutDEAPkU9YwTDVQf43Ti5kYWsESRrmmyBnEq
A6SAp6dbdYZzBTJe3VXOsEcAbSkEM3Cndgo=
-----END CERTIFICATE-----