Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3135362e302f32342d3234203d3e20323132323338.roa
File:                     3135372e3235342e3135362e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier:          I6JndcBKQ6XVrfSda7FEM/53p6synmVE5p2SXuRtvG8=
Subject key identifier:   8D:0A:75:E2:93:27:E4:E9:18:E6:E1:5F:06:35:1E:B3:FA:34:C7:AE
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       1CBE4C80C81F3335A2A63B0E69918D45AF85CED5
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3135362e302f32342d3234203d3e20323132323338.roa
Signing time:             Fri 30 Dec 2022 19:54:17 +0000
ROA not before:           Fri 30 Dec 2022 19:49:17 +0000
ROA not after:            Fri 29 Dec 2023 19:54:17 +0000
asID:                     212238
IP address blocks:        157.254.156.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:be:4c:80:c8:1f:33:35:a2:a6:3b:0e:69:91:8d:45:af:85:ce:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Dec 30 19:49:17 2022 GMT
            Not After : Dec 29 19:54:17 2023 GMT
        Subject: CN=8D0A75E29327E4E918E6E15F06351EB3FA34C7AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:da:80:44:45:19:36:ad:25:12:82:21:77:1b:
                    6d:a3:38:f2:73:4a:be:95:ef:f5:72:8a:ff:a8:ab:
                    c7:55:cc:6e:0a:1c:7b:59:b2:1d:2c:4d:fe:41:36:
                    b9:66:e4:39:8a:bc:f2:3b:08:4c:d5:6a:24:49:75:
                    77:47:94:80:07:ca:3e:25:e5:3b:a5:41:84:74:f1:
                    42:a8:26:ac:90:85:54:cb:2b:0f:e9:a2:63:d4:42:
                    1a:e0:99:bd:03:1e:25:4e:a1:9e:2f:fa:65:25:58:
                    2e:61:64:aa:02:d7:0b:33:24:52:b2:86:67:8b:34:
                    b6:1c:f6:99:92:80:eb:96:66:e0:e6:7b:85:f5:a8:
                    cc:3f:68:9a:03:18:5e:11:57:53:52:59:16:5e:5e:
                    6b:5e:6c:41:78:e9:8b:a9:98:5b:00:df:8b:1a:fe:
                    75:6e:a5:58:c4:29:60:3e:2f:c6:0e:ef:7b:de:81:
                    3d:e4:70:f8:c8:0d:61:ab:d7:cb:b8:3b:03:1d:88:
                    04:f0:b0:da:8e:6b:29:e6:0e:45:79:5e:8e:c0:15:
                    7c:6a:e4:8d:1c:59:c0:77:b5:fc:16:3a:13:3c:81:
                    8b:3e:7c:99:12:16:83:0e:f5:8c:87:f8:f6:f6:0a:
                    4d:6e:4c:1a:10:ff:be:e3:fc:f0:04:f8:e5:2c:05:
                    c0:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:0A:75:E2:93:27:E4:E9:18:E6:E1:5F:06:35:1E:B3:FA:34:C7:AE
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3135362e302f32342d3234203d3e20323132323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:db:2e:92:06:32:b0:3a:60:8b:7d:1f:58:77:d2:05:f2:48:
         8b:df:89:62:29:a4:2d:d7:4e:8c:c5:fd:a3:e0:33:05:5d:c7:
         94:4d:2f:bf:25:80:c4:7d:e9:4d:08:d3:a2:ad:8d:fa:f7:e1:
         42:1b:e6:52:3f:d5:81:5b:26:60:e1:75:f5:ef:ec:14:c5:dd:
         2f:b8:af:b1:ac:76:bf:86:67:00:c2:ae:83:96:89:4e:78:c0:
         15:1e:3c:ea:b2:ef:95:2d:2d:cf:96:77:0a:67:52:37:51:1f:
         c4:94:d9:78:30:ab:29:39:56:99:e8:5b:77:50:1d:1b:7e:3e:
         75:31:8c:a9:f9:04:99:62:11:8f:ed:69:b2:28:90:99:9b:f1:
         db:6c:e3:98:47:6f:50:d0:13:3f:de:ab:20:e5:38:43:a2:1d:
         67:f0:87:5a:e1:76:3c:a3:56:0b:2d:9a:01:b1:21:7f:81:17:
         97:68:12:21:fb:4a:85:d5:6f:af:b6:50:b2:0e:2f:a8:70:9b:
         7b:83:4d:68:75:18:cc:b8:e3:e7:86:65:91:0c:02:fb:32:87:
         cb:f9:07:2b:eb:46:ed:0f:17:c2:44:99:8e:1b:ce:c2:f8:f0:
         ae:0c:bf:70:eb:3d:a1:c5:2d:bb:65:e3:ac:d9:84:67:aa:c5:
         f4:e5:86:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----