Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3135322e302f32342d3234203d3e20383334.roa
File:                     3135372e3235342e3135322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          2A0TR1PCYWJhtKWD61hP27HC8QI4jtcFqGVCQrJpfHs=
Subject key identifier:   74:D5:10:68:32:E6:6F:41:86:A2:BD:8A:6F:01:2B:C5:A6:74:BD:DD
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       03F0E12A990ADFA15A1B05F3C19911A31CB1348F
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3135322e302f32342d3234203d3e20383334.roa
Signing time:             Thu 26 Jan 2023 13:14:55 +0000
ROA not before:           Thu 26 Jan 2023 13:09:55 +0000
ROA not after:            Thu 25 Jan 2024 13:14:55 +0000
asID:                     834
IP address blocks:        157.254.152.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:f0:e1:2a:99:0a:df:a1:5a:1b:05:f3:c1:99:11:a3:1c:b1:34:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Jan 26 13:09:55 2023 GMT
            Not After : Jan 25 13:14:55 2024 GMT
        Subject: CN=74D5106832E66F4186A2BD8A6F012BC5A674BDDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:0d:c4:90:27:ca:ca:39:55:87:ef:9a:73:2d:
                    20:4d:58:d8:2d:a8:80:47:76:d2:1d:98:77:f3:ba:
                    a7:af:47:9b:36:8b:3d:2b:cd:88:19:41:7e:36:81:
                    93:ca:45:72:1d:1b:f6:b9:3b:36:a7:e3:f9:75:e3:
                    c9:ed:59:49:89:31:ff:be:81:bd:86:0d:f2:10:48:
                    93:22:6e:43:47:03:35:5e:f6:a8:6d:f5:26:38:c4:
                    b2:1e:4f:ff:20:9d:2e:7d:8b:c9:aa:c4:5c:7c:99:
                    72:65:12:f1:10:a8:2d:f1:9c:d4:a3:07:3a:a0:d1:
                    eb:ec:71:63:b8:43:d1:ea:e5:62:28:c7:be:d4:a0:
                    fb:57:a0:d8:9c:f1:f0:c3:6d:dc:0b:ea:74:d7:3c:
                    bb:96:29:1b:be:d5:2b:c9:c1:27:89:8a:0b:31:ef:
                    1a:ef:70:6d:00:ef:2a:cf:14:df:d1:ed:39:e7:44:
                    18:7f:c4:d7:56:2d:23:19:37:64:ef:de:2b:a1:29:
                    d8:99:52:9d:f6:8f:c1:eb:18:aa:9d:5d:df:64:48:
                    db:2b:5b:60:c0:fb:2c:16:ce:ae:a2:93:0b:68:4c:
                    f7:fa:74:46:54:bf:bc:5a:ca:5f:ec:a5:49:41:91:
                    9e:fa:03:a9:9f:02:03:15:5b:93:ce:22:cf:f1:be:
                    d9:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:D5:10:68:32:E6:6F:41:86:A2:BD:8A:6F:01:2B:C5:A6:74:BD:DD
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3135322e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:7d:b3:f5:73:3f:58:7a:87:cd:2a:aa:90:1c:0b:20:b8:4d:
         34:8e:8d:0e:d7:c9:dc:5f:2a:cb:fb:0b:d4:4f:4a:8d:7e:6e:
         5b:72:af:99:4a:05:20:f0:a3:0e:dd:eb:1a:35:0f:22:22:49:
         04:48:4d:c7:94:92:81:b2:37:01:38:eb:06:14:a6:25:50:f8:
         3b:54:f9:fa:7d:68:66:d9:28:79:d2:db:30:67:9c:21:24:03:
         32:0d:c3:43:8c:96:7f:24:bc:20:f9:56:f9:20:64:69:57:58:
         44:d0:e6:da:bc:a3:c2:c2:85:8f:76:1a:a5:10:8e:4a:5b:7e:
         a3:b9:96:b6:23:9c:2f:e1:07:04:50:4b:cc:7a:13:43:0e:bf:
         e8:54:37:04:15:0e:09:7a:1b:2e:de:d1:e9:f7:70:92:4c:38:
         82:3b:d1:3f:7f:5d:c2:79:2b:00:a8:2a:1e:ce:be:df:cb:33:
         0c:f2:b9:c5:a9:09:a2:1b:14:a9:ff:d0:ae:a5:98:7f:49:3f:
         70:b2:2f:66:a9:dc:3f:fc:e9:91:51:ea:40:db:b7:4d:e7:1f:
         e1:08:fa:66:4f:d1:52:37:16:e3:c2:df:0f:bb:8a:03:de:5b:
         bb:2f:6e:92:1b:cf:56:20:27:8e:10:3d:68:88:07:fa:8d:80:
         f0:f7:05:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----