Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3136392e302f32342d3234203d3e20343030373538.roa
File:                     3135372e3235342e3136392e302f32342d3234203d3e20343030373538.roa (raw, json)
Hash identifier:          4seWMh4EQImtLCxaoSjtIzxswy6gKn/DWYNE/U/phIA=
Subject key identifier:   BA:1D:33:54:39:01:93:B7:A8:A8:5E:AD:3D:B3:CF:73:B1:60:F2:AE
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       5F8CC740EE2D6F9443FB925979D328356A7CDB2D
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3136392e302f32342d3234203d3e20343030373538.roa
Signing time:             Fri 30 Dec 2022 19:54:18 +0000
ROA not before:           Fri 30 Dec 2022 19:49:18 +0000
ROA not after:            Fri 29 Dec 2023 19:54:18 +0000
asID:                     400758
IP address blocks:        157.254.169.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:8c:c7:40:ee:2d:6f:94:43:fb:92:59:79:d3:28:35:6a:7c:db:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Dec 30 19:49:18 2022 GMT
            Not After : Dec 29 19:54:18 2023 GMT
        Subject: CN=BA1D3354390193B7A8A85EAD3DB3CF73B160F2AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:2e:60:ae:91:a3:0e:39:f3:82:d3:a3:8a:0a:
                    5c:32:88:87:9d:b4:ef:7e:a2:63:5d:1a:56:19:8b:
                    86:6c:f4:f4:fc:5a:8a:9c:a1:3f:13:fd:dd:4f:6b:
                    74:81:d4:66:b2:16:0b:ed:dd:c0:47:fd:5c:be:c2:
                    a2:af:f5:8e:64:a5:33:c1:2f:0c:76:be:5d:09:4b:
                    82:e1:98:e1:d5:83:94:94:a9:db:13:75:62:7c:9b:
                    58:b9:87:87:cd:d5:fb:97:8a:cb:98:34:5b:f1:e2:
                    11:ff:42:5f:b0:83:14:49:da:87:a1:58:e0:f2:a7:
                    52:91:30:19:df:02:97:dd:90:55:7c:94:e8:8f:cb:
                    06:75:4c:73:c9:71:6e:44:45:0b:24:7c:86:92:41:
                    76:c4:d9:6d:58:b1:69:ac:16:55:7d:d0:ec:21:aa:
                    47:3d:d4:6f:df:d4:15:a7:fb:25:46:d0:9b:cd:e9:
                    dd:d3:33:e0:58:77:70:7e:12:ff:f2:63:04:29:95:
                    97:29:8c:16:eb:66:b1:ea:25:37:12:b9:d1:5b:14:
                    cb:c3:c5:11:13:41:6f:17:38:32:34:78:bc:05:b8:
                    20:a5:09:59:7c:e8:ec:20:14:9b:59:53:2a:a7:91:
                    08:c8:db:6f:df:94:76:bb:60:5a:4c:85:65:2d:0b:
                    87:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:1D:33:54:39:01:93:B7:A8:A8:5E:AD:3D:B3:CF:73:B1:60:F2:AE
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3136392e302f32342d3234203d3e20343030373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:37:d5:24:64:df:9d:45:26:ad:68:b9:d7:ba:bd:8a:19:5b:
         82:43:b3:a6:2e:71:db:00:3f:34:eb:81:84:c9:a9:07:7e:5c:
         0e:82:ed:be:e9:47:4c:e8:41:96:8c:d2:ea:0c:7e:67:cd:a9:
         05:27:01:8a:99:a5:ad:f5:f1:50:9b:e8:9e:ed:47:49:a6:f5:
         bc:10:a6:8b:63:79:8f:fb:6b:53:6f:a2:0d:ec:ce:ec:2f:3e:
         ec:dc:56:ef:09:09:c8:da:a4:1f:8a:4d:f0:a9:94:e2:70:d1:
         30:38:16:21:9c:a3:b9:13:7a:8d:0e:f4:8a:6c:da:c4:6c:38:
         bf:27:4f:da:9d:9f:66:01:2f:7b:7a:27:e2:a0:b1:ab:95:af:
         86:f2:32:b9:fe:1c:b8:8c:22:8b:18:18:b7:ed:42:c6:05:92:
         12:42:fc:9c:1e:b6:61:08:76:17:71:48:b4:41:b8:5c:5f:c0:
         9a:31:8d:79:f6:eb:f7:47:7e:33:6c:93:9e:8d:c9:4e:17:0f:
         6c:05:cd:af:e8:8a:ef:3d:e1:11:f1:c6:18:cd:3c:9e:6a:1f:
         ea:46:36:05:41:99:47:48:e9:1e:98:99:7b:ca:55:b3:c0:c6:
         96:12:a7:95:35:93:9f:6b:6f:da:a1:bc:4f:76:b9:98:34:90:
         1f:c4:f7:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----