Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3136362e302f32342d3234203d3e20323036303932.roa
File:                     3135372e3235342e3136362e302f32342d3234203d3e20323036303932.roa (raw, json)
Hash identifier:          DaMAZC7RRaWoL79UVECjwl14xBcS/MRHWgJ3Q+lfPbI=
Subject key identifier:   9B:01:E9:8E:95:79:96:F7:7F:AB:96:B2:86:17:57:9B:79:E2:2A:4D
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       08698BE89E5CDFC7E050A64998A4355FB052A0F5
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3136362e302f32342d3234203d3e20323036303932.roa
Signing time:             Fri 30 Dec 2022 19:54:18 +0000
ROA not before:           Fri 30 Dec 2022 19:49:18 +0000
ROA not after:            Fri 29 Dec 2023 19:54:18 +0000
asID:                     206092
IP address blocks:        157.254.166.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:69:8b:e8:9e:5c:df:c7:e0:50:a6:49:98:a4:35:5f:b0:52:a0:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Dec 30 19:49:18 2022 GMT
            Not After : Dec 29 19:54:18 2023 GMT
        Subject: CN=9B01E98E957996F77FAB96B28617579B79E22A4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:fc:9d:4f:5b:9a:fe:2f:7d:1a:6e:ab:c0:ea:
                    66:55:b4:ca:62:a8:cd:2b:f2:42:ce:62:cb:c0:e7:
                    40:65:8b:28:82:c4:04:41:de:0c:84:c7:91:5a:0f:
                    68:73:1d:2d:ae:a1:29:32:00:e2:2f:e0:7f:5a:d7:
                    69:4f:ee:2b:43:1a:c6:5c:d6:76:08:bd:c4:66:c6:
                    02:59:bc:c8:43:0e:7c:ec:7c:f7:ac:0c:ac:45:34:
                    fe:c4:06:fa:24:ae:79:76:2b:6c:ba:dc:12:0d:9f:
                    77:e0:5d:cf:15:a0:43:f1:94:ff:9b:4b:3f:39:d2:
                    d9:1c:bc:cf:8a:18:30:04:13:fa:41:fb:d1:46:58:
                    73:48:40:d9:2d:75:50:85:4a:4a:cd:bc:35:02:14:
                    39:0f:ad:2b:ee:80:3f:bd:b6:4c:da:81:d6:e0:7e:
                    c8:9a:08:89:a1:6f:be:da:d4:e6:10:aa:26:c2:13:
                    e7:b2:a9:4a:ad:ab:87:99:eb:a5:4d:57:b1:7a:19:
                    0c:f6:7a:8d:87:3d:12:6e:80:3c:8b:f9:6a:7c:4f:
                    0f:a7:cb:7c:66:c8:2b:d1:28:1c:71:90:a1:d1:bd:
                    85:63:ee:e1:d6:d3:73:86:21:a4:63:32:8d:3d:8d:
                    ce:5f:a1:b4:35:81:f6:29:80:03:98:04:33:89:2f:
                    8a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:01:E9:8E:95:79:96:F7:7F:AB:96:B2:86:17:57:9B:79:E2:2A:4D
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3136362e302f32342d3234203d3e20323036303932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:02:e9:93:f2:4c:c3:ea:1b:fd:e6:e0:db:a5:ab:f7:69:fc:
         db:a5:55:6f:5e:25:94:4c:0c:96:3e:08:1a:03:b5:aa:af:2f:
         00:fc:76:c7:ed:56:07:1d:5c:e5:f9:25:bf:66:5b:ea:56:34:
         b6:04:d9:30:fd:3f:d6:45:20:18:b1:dc:48:03:f3:56:a4:ce:
         2b:ea:16:a1:e0:64:0f:d0:4b:7e:fb:74:86:5b:ff:7e:7f:4d:
         3c:0e:c4:b8:a0:56:74:71:f1:d0:b0:e1:90:98:a5:38:ee:8e:
         67:24:60:41:2c:cc:a5:c3:3a:41:b7:1f:ef:7a:26:75:49:3b:
         e7:5f:44:8b:a9:a3:ec:c1:af:eb:3a:cb:5a:76:31:04:15:3a:
         c9:89:0b:80:53:3a:58:fc:d3:ad:2f:86:ae:54:4c:40:06:9d:
         cc:4c:da:b3:a1:9d:94:37:99:51:de:9f:6a:6c:c9:8c:6a:1d:
         fb:1a:7a:7e:43:d4:c4:30:35:a9:bd:e6:d9:ab:68:ff:30:88:
         5a:11:c2:fd:ec:08:96:af:e5:58:d0:9e:ac:99:fa:c0:9c:c6:
         bd:d3:37:f8:2f:04:ed:24:96:3c:b5:66:1e:c7:fd:6e:1a:2a:
         1a:fd:0a:40:62:be:0d:d1:b2:f0:43:49:fa:34:a7:b2:40:7a:
         4c:a6:4a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----