Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3135382e302f32342d3234203d3e203630373231.roa
File:                     3135372e3235342e3135382e302f32342d3234203d3e203630373231.roa (raw, json)
Hash identifier:          6dzUXKVnK/QZ8VrSWclx0h/pK5Bwl77QgKWPcASqK8A=
Subject key identifier:   46:13:77:23:95:7A:39:23:2B:B8:56:72:A8:BB:09:1C:13:A7:E1:9F
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       31D3325BFD293502C93C9013C78FECEEE961C745
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3135382e302f32342d3234203d3e203630373231.roa
Signing time:             Fri 30 Dec 2022 19:54:17 +0000
ROA not before:           Fri 30 Dec 2022 19:49:17 +0000
ROA not after:            Fri 29 Dec 2023 19:54:17 +0000
asID:                     60721
IP address blocks:        157.254.158.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:d3:32:5b:fd:29:35:02:c9:3c:90:13:c7:8f:ec:ee:e9:61:c7:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Dec 30 19:49:17 2022 GMT
            Not After : Dec 29 19:54:17 2023 GMT
        Subject: CN=46137723957A39232BB85672A8BB091C13A7E19F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:41:74:36:29:f1:ea:39:7b:c2:4f:8a:44:fe:
                    c7:56:e5:0c:5e:90:7d:c3:1c:e9:51:2b:46:c8:aa:
                    14:66:d9:74:81:19:aa:18:7e:35:65:65:9e:19:0a:
                    51:1a:87:15:76:49:fc:c3:7e:fe:3a:17:7a:93:18:
                    ce:52:93:89:95:ae:b7:9a:18:57:5c:c5:a0:c1:9a:
                    72:4e:d5:7b:67:93:f1:43:70:f1:d4:6e:e3:34:ec:
                    22:2c:b1:f6:1f:19:fd:ad:39:ff:a9:10:d1:52:10:
                    70:98:8c:fe:64:f8:3b:95:fe:d1:d0:f4:8d:9e:75:
                    a3:04:d1:87:93:3c:fa:9a:b8:73:06:14:6d:88:3c:
                    3e:3e:99:da:0d:78:27:9a:1f:04:fb:a0:f7:4d:67:
                    1a:3a:c2:4a:70:e9:a3:b1:71:e2:98:10:af:3a:82:
                    28:95:ba:82:4c:2b:58:52:60:0c:fe:b0:09:15:24:
                    90:26:cb:2a:21:39:d7:cd:72:de:c3:65:62:5a:c7:
                    bc:73:e7:22:81:6e:b7:b7:f5:57:28:98:3d:6c:bb:
                    8b:35:2d:24:1e:5c:91:89:df:ac:e9:14:a4:dc:eb:
                    27:ed:b5:1e:d9:88:52:e1:82:8e:09:26:73:69:3d:
                    4e:c0:fd:7e:0a:63:34:bd:1d:bc:9f:70:f4:c3:a7:
                    33:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:13:77:23:95:7A:39:23:2B:B8:56:72:A8:BB:09:1C:13:A7:E1:9F
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3135382e302f32342d3234203d3e203630373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:cc:37:26:3e:f3:9b:6b:f2:04:ac:d9:14:b6:d6:8d:cf:47:
         34:e5:32:ea:5e:8e:5f:e8:9a:1d:25:21:fe:b0:7b:5e:44:31:
         7a:ff:d1:21:f2:fc:2b:0f:59:f1:52:81:69:00:14:7a:ee:98:
         36:a7:55:ea:73:0f:fc:ba:13:80:53:a6:45:58:82:59:95:6f:
         ff:28:44:18:cc:99:40:2c:8c:56:f2:ce:8e:57:ce:d5:03:03:
         9c:ab:07:84:5f:8c:30:76:a4:9b:fd:e0:7b:bd:62:7c:f5:1f:
         e5:4f:2e:8e:16:a4:1e:9b:10:4d:b1:37:34:59:78:ea:3a:ae:
         2d:bf:84:6d:31:7b:10:29:6e:64:56:be:8f:80:d4:bc:e5:dc:
         5c:d5:91:89:32:66:6b:68:da:f9:2d:11:5c:cf:b4:63:61:64:
         12:10:79:01:2b:7b:00:54:e8:d4:70:fc:e0:48:19:fc:86:cb:
         ab:af:8d:ca:6c:c7:c0:0f:e7:4b:d3:c4:8b:07:60:45:f6:4e:
         e7:e0:c1:b2:65:c1:e8:03:ce:46:46:e5:c4:66:a7:58:58:e1:
         5b:91:63:9d:01:28:2f:4b:b3:49:1a:56:ee:f8:ef:2e:5c:5d:
         e6:04:c9:6e:1d:ed:83:51:f5:85:59:d1:a6:04:68:9c:37:bc:
         6b:e2:16:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----