Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3135332e302f32342d3234203d3e203631333137.roa
File:                     3135372e3235342e3135332e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          +cPS6x1S4gFgerB79gzJtH1/H1RfQRfZ99mObiqGweM=
Subject key identifier:   A7:B2:73:ED:EE:68:0B:2B:40:0C:9A:6B:2E:B3:64:0E:D3:56:4A:99
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       1D119ED7F3834507C6BF9D0B7D4F5091306B5586
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3135332e302f32342d3234203d3e203631333137.roa
Signing time:             Fri 30 Dec 2022 19:54:17 +0000
ROA not before:           Fri 30 Dec 2022 19:49:17 +0000
ROA not after:            Fri 29 Dec 2023 19:54:17 +0000
asID:                     61317
IP address blocks:        157.254.153.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:11:9e:d7:f3:83:45:07:c6:bf:9d:0b:7d:4f:50:91:30:6b:55:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Dec 30 19:49:17 2022 GMT
            Not After : Dec 29 19:54:17 2023 GMT
        Subject: CN=A7B273EDEE680B2B400C9A6B2EB3640ED3564A99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3c:93:83:54:ed:6b:1b:d0:52:cc:9c:52:4b:
                    07:57:f1:bd:11:56:2a:27:75:db:80:12:14:88:14:
                    1a:c7:a0:b9:83:e9:ae:7f:e2:53:7e:e1:2c:fb:ac:
                    07:9b:11:ec:86:fb:7b:c5:37:59:a8:98:3d:8c:cc:
                    ad:18:fa:1f:1e:8f:0f:93:d1:5b:64:c0:71:1d:f5:
                    f9:e2:63:55:c6:48:6b:62:87:35:60:10:5d:c8:37:
                    b8:9a:e9:dd:8e:f0:45:76:e2:2a:c6:8e:d2:81:36:
                    0d:ad:8d:d1:75:42:16:e4:e6:b4:72:33:4f:f3:8e:
                    e6:ce:56:01:34:6c:d5:0e:44:ec:04:86:82:a0:88:
                    7c:d0:08:df:26:13:69:79:33:ef:c9:a6:ed:48:3d:
                    bf:41:b2:4d:4d:ef:50:c8:0d:85:b6:9f:d5:f8:f0:
                    94:98:56:6f:95:3c:bf:a7:23:bd:1e:e8:f7:90:b6:
                    e7:38:92:58:23:8f:c2:c0:9a:0a:18:e5:35:9a:b6:
                    1f:63:d9:e8:a0:c1:5c:e3:d5:5f:5f:46:84:5d:14:
                    e6:78:5d:99:3f:e3:13:60:c1:73:69:db:c4:b3:f6:
                    1b:ea:c3:06:fa:20:ff:ae:2f:c4:06:47:aa:87:50:
                    b3:22:b5:e3:2e:c4:3f:1a:e9:8f:70:d7:d4:b3:d1:
                    81:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:B2:73:ED:EE:68:0B:2B:40:0C:9A:6B:2E:B3:64:0E:D3:56:4A:99
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3135332e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:bc:7d:b4:99:33:bf:35:1e:5e:61:ac:43:13:14:cb:62:dc:
         b7:3c:8a:d5:9e:7b:5f:d1:87:ca:55:85:98:b4:0a:f0:90:36:
         4b:c0:d2:4b:c8:c0:9c:f3:04:0d:12:1c:80:67:ee:3c:3f:66:
         31:83:83:dd:30:f4:5e:8c:ec:d7:71:66:7f:d0:d1:cf:1a:62:
         88:0a:6f:f2:ca:dc:4a:78:b5:26:66:1c:7e:8c:9b:6e:2e:aa:
         a1:7b:14:58:7a:91:62:14:40:35:d2:b6:94:1f:a8:ce:96:f9:
         b5:55:00:07:a1:94:4a:cb:1a:ed:ef:92:6d:83:6c:a0:85:dc:
         d4:d7:ef:42:dc:a8:24:f1:1c:8a:70:cd:6e:86:75:35:3b:ff:
         e3:eb:a1:b0:3a:9f:b1:b1:de:ae:69:94:b4:27:df:15:21:76:
         1d:f2:fa:e8:17:dc:a2:79:ed:1a:cc:9d:c8:09:08:00:f8:b6:
         8a:43:63:10:7c:38:c7:d4:72:83:c4:20:a2:b8:a7:36:42:89:
         94:a3:fe:ec:cd:c1:e4:db:d6:63:35:7f:0b:3e:f3:80:46:66:
         7e:4f:86:ad:73:92:d4:ec:0d:25:00:74:7c:1f:01:b8:71:5d:
         92:9b:c7:4a:06:6d:dc:f0:66:83:0f:c9:6d:bd:ff:24:f9:ec:
         4b:10:55:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----