Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3136382e302f32342d3234203d3e203533333536.roa
File:                     3135372e3235342e3136382e302f32342d3234203d3e203533333536.roa (raw, json)
Hash identifier:          ilf4y7m7J1KvNK7N6jzVqFZ1O0yhbN2VfBqsvOsc5h4=
Subject key identifier:   A5:99:5E:6E:88:BC:3F:F6:E9:C8:40:FA:84:03:04:61:80:6A:99:3C
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       1EB0774407447EC4A47AB0C62E96AEC8CCFC978D
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3136382e302f32342d3234203d3e203533333536.roa
Signing time:             Fri 30 Dec 2022 19:54:18 +0000
ROA not before:           Fri 30 Dec 2022 19:49:18 +0000
ROA not after:            Fri 29 Dec 2023 19:54:18 +0000
asID:                     53356
IP address blocks:        157.254.168.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:b0:77:44:07:44:7e:c4:a4:7a:b0:c6:2e:96:ae:c8:cc:fc:97:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Dec 30 19:49:18 2022 GMT
            Not After : Dec 29 19:54:18 2023 GMT
        Subject: CN=A5995E6E88BC3FF6E9C840FA84030461806A993C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c1:60:e7:e0:08:a4:dd:7a:89:a3:21:ea:4c:
                    8a:b6:dd:31:d7:a0:7d:c4:84:40:d2:2b:4c:ef:ae:
                    15:9b:3d:82:94:07:23:28:4b:46:32:0d:6e:3b:fe:
                    c3:b3:d7:5b:38:7b:b4:8e:6d:7a:53:4c:6b:f7:13:
                    26:0d:95:98:97:e2:bf:69:ee:10:dd:fc:31:d1:9e:
                    58:89:60:38:8b:6e:cd:f7:17:85:d8:6f:19:d6:cc:
                    a1:1a:fe:4f:c7:22:9b:ed:9e:5d:bd:ae:83:bf:70:
                    5e:a3:22:f6:48:41:84:aa:a6:28:45:d3:ba:a3:e1:
                    86:eb:06:63:16:9e:79:13:80:9f:11:58:6a:99:6d:
                    1f:ce:bf:5d:8d:82:d8:37:b8:5d:8b:d9:c6:ac:aa:
                    d2:be:56:5a:c7:bd:73:9e:fd:b4:cb:30:a4:29:eb:
                    8f:30:3d:83:bb:8a:5d:a7:8d:50:9f:78:e9:8d:fb:
                    93:4d:8d:93:f8:04:cc:fe:b7:ac:62:2a:06:32:4a:
                    03:7a:79:74:00:0d:fe:9c:39:59:24:5b:bc:f1:13:
                    2d:bf:7b:7d:3c:ea:e2:ba:15:a4:95:fa:98:e8:7b:
                    ca:b3:21:8e:1d:46:21:28:14:80:68:15:42:1c:9b:
                    1c:c9:69:67:09:36:6e:e4:98:80:1c:15:f9:59:4e:
                    22:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:99:5E:6E:88:BC:3F:F6:E9:C8:40:FA:84:03:04:61:80:6A:99:3C
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3136382e302f32342d3234203d3e203533333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:e7:0e:66:bf:f2:26:55:8b:31:43:54:5f:0b:62:17:9d:48:
         24:d5:85:4b:64:02:c4:cb:37:04:5f:7d:f2:0b:08:6b:3a:2c:
         8f:34:f3:0a:6c:ba:e7:05:92:31:76:39:6e:dc:be:e1:d4:84:
         27:45:c4:58:1a:c0:8c:f3:ba:fb:5f:72:7d:ba:4d:4f:08:4b:
         97:8d:e7:ae:a8:ff:7b:31:13:5b:fe:a8:e8:b5:18:64:f4:96:
         17:bc:0d:3a:c2:ce:46:05:ff:90:27:84:b5:1f:ce:b3:0d:4b:
         95:fd:1d:49:a7:5d:4f:fd:0d:a2:69:37:63:ab:0d:80:63:3f:
         45:53:07:00:a9:78:bc:ae:0f:55:8d:0d:cf:d5:15:fe:26:f0:
         16:d3:81:ab:df:2e:25:6b:c8:24:d1:c8:a3:f9:7b:83:b2:c9:
         22:a6:cc:b2:ac:ab:fd:ef:5b:5d:de:3a:82:f6:7e:fe:90:3a:
         83:6f:7d:9b:5c:12:a5:67:a8:fc:ef:dc:9c:71:86:7c:6e:30:
         54:72:56:08:da:5d:e5:4e:ef:14:a7:54:6d:a5:5f:ec:bb:4b:
         e8:ad:73:35:9b:66:3a:85:f9:e6:5d:4c:d5:55:8a:74:5d:47:
         40:f1:65:24:ff:1c:45:8d:b1:cb:4f:0e:c2:4e:1c:8d:3e:aa:
         7d:3e:92:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----