Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3135362e302f32342d3234203d3e20383334.roa
File:                     3135372e3235342e3135362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          q4/UFxuvYY7r68QHkplx/8hisK7MAfelj5DghCsj1tA=
Subject key identifier:   EA:9C:8F:6A:03:4D:B2:29:1D:83:62:45:A3:F1:5C:B0:C4:84:24:B1
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       15A1C15BFA39D104F1AD4D4CEE8D351DF820E4E1
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3135362e302f32342d3234203d3e20383334.roa
Signing time:             Mon 01 May 2023 00:00:13 +0000
ROA not before:           Sun 30 Apr 2023 23:55:13 +0000
ROA not after:            Mon 29 Apr 2024 00:00:13 +0000
asID:                     834
IP address blocks:        157.254.156.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:a1:c1:5b:fa:39:d1:04:f1:ad:4d:4c:ee:8d:35:1d:f8:20:e4:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Apr 30 23:55:13 2023 GMT
            Not After : Apr 29 00:00:13 2024 GMT
        Subject: CN=EA9C8F6A034DB2291D836245A3F15CB0C48424B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b9:6c:36:31:71:fc:83:f2:75:35:af:c3:f1:
                    f5:0d:59:7f:89:93:a1:64:db:ed:20:59:d8:cd:cf:
                    98:02:52:14:f8:da:2c:44:6d:09:d1:f5:cb:cc:5d:
                    e8:4c:af:b5:de:82:89:1a:50:b0:eb:88:7b:8b:bc:
                    7d:b9:31:ff:7a:f8:2f:0e:ae:ee:0e:3f:00:e8:40:
                    03:ee:15:f7:cc:f8:30:c1:9e:55:a2:75:ca:7a:dc:
                    d2:82:51:2a:7c:39:7d:0d:32:67:a0:b2:96:52:08:
                    f9:37:e6:3f:f2:37:54:5b:2b:8c:0e:c3:20:40:45:
                    d5:22:59:ff:e8:73:f0:8f:25:fa:67:ee:53:5a:c3:
                    90:3e:55:61:70:13:d7:22:83:06:97:d3:c5:1c:e1:
                    17:00:9c:01:ae:a4:61:92:c6:f1:92:6e:9e:c1:14:
                    a2:81:ed:97:21:98:a2:9b:54:4c:6c:2e:f6:6e:f9:
                    66:7e:6e:8c:9b:64:4e:a0:3e:fb:fc:9b:02:3b:c3:
                    a0:75:2a:31:26:5e:b3:f7:cc:0b:72:17:34:b1:76:
                    4a:02:e9:56:fb:f3:95:57:87:15:37:54:83:a6:1d:
                    9f:47:40:22:66:df:3e:fb:b5:bc:1e:44:87:e7:7a:
                    aa:30:7e:99:40:46:de:d8:c8:99:c4:d8:43:69:0c:
                    6c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:9C:8F:6A:03:4D:B2:29:1D:83:62:45:A3:F1:5C:B0:C4:84:24:B1
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3135362e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:bc:f7:64:08:6f:65:17:17:db:0f:6a:d9:3d:26:dc:0f:35:
         68:73:29:23:96:d8:f4:78:35:b5:be:a5:59:73:15:4a:fc:0b:
         b0:51:14:af:19:74:b8:78:03:92:89:4b:b1:0b:9d:2e:6f:b7:
         26:d2:22:b5:97:e4:b6:b1:5d:7c:41:5b:df:c1:11:dd:81:f4:
         15:f1:e0:01:a2:1b:33:a0:70:a8:a0:bc:85:07:43:ee:20:28:
         a0:f8:ec:f4:8b:bc:9d:9e:52:44:05:5e:65:1a:22:a9:6c:de:
         7d:7b:d5:94:5b:a0:13:9c:4b:33:70:49:00:49:3c:44:24:5e:
         6a:23:2a:58:91:59:aa:cf:16:5d:91:56:4e:78:e9:08:a3:16:
         4f:18:5e:1b:2f:e1:b1:bc:7d:ea:fc:cb:6d:7a:95:ec:36:42:
         be:a2:69:cf:b7:94:d1:8e:c6:57:7b:0e:fd:6d:14:53:61:f6:
         57:eb:0a:e3:b0:ce:e6:38:d3:bb:ee:d2:4b:4c:44:1e:dc:82:
         2b:b9:a2:b0:3d:4d:bc:68:82:9d:85:34:36:6a:4a:29:70:21:
         05:1c:1c:d0:89:5f:d4:5a:be:1e:91:0b:71:61:54:e7:85:a7:
         ca:b1:7f:65:c8:81:9d:5d:dc:57:08:13:e2:d7:2d:45:f0:85:
         eb:cc:ae:55
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUFaHBW/o50QTxrU1M7o01Hfgg5OEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4
NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjMwNDMwMjM1NTEzWhcNMjQwNDI5MDAwMDEz
WjAzMTEwLwYDVQQDEyhFQTlDOEY2QTAzNERCMjI5MUQ4MzYyNDVBM0YxNUNCMEM0
ODQyNEIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAublsNjFx/IPy
dTWvw/H1DVl/iZOhZNvtIFnYzc+YAlIU+NosRG0J0fXLzF3oTK+13oKJGlCw64h7
i7x9uTH/evgvDq7uDj8A6EAD7hX3zPgwwZ5VonXKetzSglEqfDl9DTJnoLKWUgj5
N+Y/8jdUWyuMDsMgQEXVIln/6HPwjyX6Z+5TWsOQPlVhcBPXIoMGl9PFHOEXAJwB
rqRhksbxkm6ewRSige2XIZiim1RMbC72bvlmfm6Mm2ROoD77/JsCO8OgdSoxJl6z
98wLchc0sXZKAulW+/OVV4cVN1SDph2fR0AiZt8++7W8HkSH53qqMH6ZQEbe2MiZ
xNhDaQxsdQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFOqcj2oDTbIpHYNiRaPxXLDE
hCSxMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv
RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3
ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTY0
OTBmNDQ1M2I3Yi8wLzMxMzUzNzJlMzIzNTM0MmUzMTM1MzYyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACd/pwwDQYJKoZIhvcNAQELBQAD
ggEBAC2892QIb2UXF9sPatk9JtwPNWhzKSOW2PR4NbW+pVlzFUr8C7BRFK8ZdLh4
A5KJS7ELnS5vtybSIrWX5LaxXXxBW9/BEd2B9BXx4AGiGzOgcKigvIUHQ+4gKKD4
7PSLvJ2eUkQFXmUaIqls3n171ZRboBOcSzNwSQBJPEQkXmojKliRWarPFl2RVk54
6QijFk8YXhsv4bG8fer8y216lew2Qr6iac+3lNGOxld7Dv1tFFNh9lfrCuOwzuY4
07vu0ktMRB7cgiu5orA9Tbxogp2FNDZqSilwIQUcHNCJX9Ravh6RC3FhVOeFp8qx
f2XIgZ1d3FcIE+LXLUXwhevMrlU=
-----END CERTIFICATE-----