Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3135342e302f32342d3234203d3e20323132323338.roa
File:                     3135372e3235342e3135342e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier:          N1J7jGRKOPhgrdliEGRKBRg8g5XN5R2dTE7oxaWluHA=
Subject key identifier:   06:ED:CB:2E:67:15:35:D3:F4:F9:52:88:53:EC:D3:E9:AE:DE:B3:93
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       2691E92DE91F51F53AEE1381F48458E8DE3B75C4
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3135342e302f32342d3234203d3e20323132323338.roa
Signing time:             Fri 30 Dec 2022 19:54:17 +0000
ROA not before:           Fri 30 Dec 2022 19:49:17 +0000
ROA not after:            Fri 29 Dec 2023 19:54:17 +0000
asID:                     212238
IP address blocks:        157.254.154.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:91:e9:2d:e9:1f:51:f5:3a:ee:13:81:f4:84:58:e8:de:3b:75:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Dec 30 19:49:17 2022 GMT
            Not After : Dec 29 19:54:17 2023 GMT
        Subject: CN=06EDCB2E671535D3F4F9528853ECD3E9AEDEB393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:47:67:cd:df:81:1c:d7:cd:50:61:21:f3:19:
                    46:f2:54:36:7b:0f:35:6f:69:09:ea:dc:ff:57:97:
                    a4:80:71:b6:04:f1:fb:0d:4e:df:79:3a:62:a5:e8:
                    20:b7:99:46:11:93:8d:2a:d2:fd:1f:0f:bb:fc:de:
                    ba:b1:96:54:6a:71:af:7d:88:d7:84:96:74:0a:06:
                    2b:3c:2c:9c:3a:d3:12:29:8b:ad:3b:0c:04:00:14:
                    e2:69:80:b3:85:8f:83:9c:d3:c0:91:0f:63:e7:9d:
                    3c:e2:65:7a:a5:6b:f1:ac:63:65:b4:88:13:93:29:
                    16:a3:b1:48:74:a5:47:f4:27:5a:df:53:5a:b0:e6:
                    ba:c5:bd:a2:2a:e7:f2:02:86:46:79:f9:ed:d7:32:
                    7a:c8:be:fd:55:94:ab:6f:51:97:7d:73:1f:b9:5d:
                    7b:38:a3:0d:2c:39:53:ba:ad:ec:20:4e:e1:eb:bc:
                    da:f4:4e:54:4f:6f:82:cf:70:23:6e:52:a8:44:5d:
                    37:bd:b1:0d:3d:c4:db:50:39:b0:d9:7c:e6:d5:45:
                    91:d0:b1:75:94:62:8a:e9:f8:60:da:7e:56:5c:ef:
                    55:24:e2:62:74:1a:db:44:4b:70:7e:98:41:ff:dd:
                    2f:d3:4e:53:d5:26:fb:11:75:f1:5d:30:d4:e1:77:
                    d3:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:ED:CB:2E:67:15:35:D3:F4:F9:52:88:53:EC:D3:E9:AE:DE:B3:93
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3135342e302f32342d3234203d3e20323132323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:1e:c0:9f:d3:28:ac:24:66:2f:31:64:c5:54:fe:02:05:d2:
         dd:a9:2a:f8:9c:f7:8f:c3:e3:df:ab:7f:ed:03:ad:13:80:19:
         3a:69:af:f2:fa:f7:7c:5d:e6:21:14:36:55:a9:1d:1a:d6:33:
         81:0e:c5:64:25:3b:f0:be:f0:61:f9:a3:60:32:41:2d:a3:27:
         21:2e:24:01:e0:e9:1f:a6:b6:0b:45:68:4b:e3:8f:83:16:75:
         7b:b0:5a:a4:d2:33:25:5a:32:82:dd:2b:02:01:b2:57:c2:de:
         9d:f6:1b:73:8d:87:b6:90:e5:76:16:72:78:f1:b8:5b:0a:44:
         01:9a:52:c7:f9:72:0d:3a:d4:0b:06:4e:6f:a7:62:c8:a3:5b:
         4b:37:5f:b2:cc:fc:84:8d:01:fd:09:4d:18:46:81:88:3e:5c:
         d0:5c:6a:bf:7a:fb:db:24:b5:2f:7e:93:a9:4a:b7:d2:dc:9e:
         c3:02:e3:4f:a5:ec:41:fc:3f:b8:17:4c:49:14:54:7c:7c:53:
         ae:2f:9d:c2:8b:65:f9:f8:10:43:ff:e0:2d:98:90:16:62:16:
         1b:87:6a:fb:c7:8f:07:58:f2:08:83:d2:91:ee:ff:84:22:de:
         c1:f0:5a:ba:d5:68:24:15:92:4b:f5:a3:42:e5:be:c1:c1:2f:
         84:2a:89:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----