Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3135332e302f32342d3234203d3e203233343730.roa
File:                     3135372e3235342e3135332e302f32342d3234203d3e203233343730.roa (raw, json)
Hash identifier:          Kw/8MbXdgfE/VHA4bI9KFLu/2dg8J+bWBNtO1vDDlwk=
Subject key identifier:   32:CF:A4:AB:63:03:B4:BC:85:CB:3F:98:3A:58:10:82:1A:AE:98:54
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       23E0B1D45B108EE41818EDFE0BD6FE5B6F16100C
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3135332e302f32342d3234203d3e203233343730.roa
Signing time:             Fri 30 Dec 2022 19:54:16 +0000
ROA not before:           Fri 30 Dec 2022 19:49:16 +0000
ROA not after:            Fri 29 Dec 2023 19:54:16 +0000
asID:                     23470
IP address blocks:        157.254.153.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:e0:b1:d4:5b:10:8e:e4:18:18:ed:fe:0b:d6:fe:5b:6f:16:10:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Dec 30 19:49:16 2022 GMT
            Not After : Dec 29 19:54:16 2023 GMT
        Subject: CN=32CFA4AB6303B4BC85CB3F983A5810821AAE9854
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9c:18:ee:80:51:5c:8e:f1:27:69:ee:98:60:
                    09:21:3c:c6:4b:56:2b:a9:f4:32:33:e5:8f:be:2d:
                    0f:08:04:fb:17:0e:b3:a3:ee:b7:e2:ad:2a:74:e7:
                    1e:47:93:78:d5:23:6e:a2:3e:a1:93:03:ff:fa:b6:
                    bc:9b:df:b8:6f:0f:d6:8f:79:a2:95:4a:04:a9:ed:
                    36:b5:a2:53:26:00:e9:45:f4:f2:8c:61:b7:4b:ff:
                    49:64:b3:bb:fe:3d:b8:d0:13:30:1b:98:5c:eb:3f:
                    37:a0:b6:d7:2c:7c:f7:ae:9c:09:33:8a:1a:d5:4c:
                    5b:1c:26:ba:33:2f:55:be:14:7b:ac:39:8c:3c:b5:
                    68:b6:29:ae:d5:6c:4a:1e:8a:3a:75:63:0b:19:a8:
                    34:08:72:9d:7f:56:04:24:06:45:1c:14:12:dc:dd:
                    12:2a:24:08:e9:48:ff:0b:bb:77:78:ef:20:b5:4a:
                    d0:54:a0:77:2b:9a:f0:25:cf:ca:d7:2c:2e:e9:05:
                    86:4a:c3:2c:23:58:1d:0d:e6:9d:ae:79:ea:fa:c9:
                    1b:60:a3:a6:15:de:92:44:59:11:4f:f7:89:16:9b:
                    1b:0c:18:9b:a1:74:c1:18:b4:42:45:0d:66:89:4c:
                    f9:64:f5:2f:bc:b7:24:64:d9:6e:75:17:b6:da:c1:
                    c0:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:CF:A4:AB:63:03:B4:BC:85:CB:3F:98:3A:58:10:82:1A:AE:98:54
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3135332e302f32342d3234203d3e203233343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:e5:a9:d7:85:b3:99:ec:61:d1:20:e5:4f:81:9a:fa:a4:8f:
         ce:d2:cf:47:ae:06:c3:aa:3c:50:81:9d:60:69:c9:03:15:bf:
         bb:86:96:5c:4e:f3:11:ef:00:ab:11:cd:37:67:24:cc:90:1e:
         71:1c:0a:18:2b:cf:d9:e2:b8:72:bb:86:b5:cc:8f:0d:d4:8e:
         53:d2:4c:aa:8a:c9:2b:b1:30:e4:ab:1a:fb:92:49:88:42:47:
         bb:ed:9b:11:87:38:18:13:d6:c4:09:76:df:72:c0:fd:11:4d:
         78:2f:cd:cb:b4:4e:bd:af:c2:e2:63:98:84:ce:9f:06:03:80:
         fc:9c:5b:6e:a4:a5:86:6c:62:39:de:d7:14:12:e2:c8:cd:a6:
         77:a2:bd:2f:03:46:77:45:c4:e0:b5:22:2f:11:d3:d3:d6:eb:
         ac:93:76:21:ca:16:8c:76:a5:73:28:29:90:2d:c5:75:2c:3e:
         6d:36:12:0f:0e:1d:75:47:18:92:75:42:71:74:49:f7:13:ff:
         c6:42:98:ed:ff:a7:a6:de:3a:89:de:4b:1b:ce:f3:c3:47:af:
         1e:56:86:b9:50:95:57:97:1e:8b:9d:63:bc:26:b3:6d:50:ce:
         ad:a3:92:0f:77:56:7b:78:92:71:18:87:4c:2d:c2:2c:02:05:
         a5:a9:1f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----