Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3137302e302f32342d3234203d3e2037323234.roa
File:                     3135372e3235342e3137302e302f32342d3234203d3e2037323234.roa (raw, json)
Hash identifier:          dKB4YQd8Voec/ddgVUZzgSfYWT4X/ms58GTGl0b+LHs=
Subject key identifier:   F6:9E:09:DD:3A:5D:4A:A6:9E:54:FA:F3:0D:F8:64:88:64:1E:AF:D8
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       3B945B91C8D7A74BCB6F0E7F39176DAD8173CF40
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3137302e302f32342d3234203d3e2037323234.roa
Signing time:             Mon 30 Jan 2023 21:31:44 +0000
ROA not before:           Mon 30 Jan 2023 21:26:44 +0000
ROA not after:            Mon 29 Jan 2024 21:31:44 +0000
asID:                     7224
IP address blocks:        157.254.170.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:94:5b:91:c8:d7:a7:4b:cb:6f:0e:7f:39:17:6d:ad:81:73:cf:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Jan 30 21:26:44 2023 GMT
            Not After : Jan 29 21:31:44 2024 GMT
        Subject: CN=F69E09DD3A5D4AA69E54FAF30DF86488641EAFD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e3:a0:55:81:7d:bc:69:f3:6d:ce:ec:45:25:
                    8b:c9:d2:bd:52:18:7a:f4:7c:38:8e:e9:28:7d:cf:
                    4b:e0:c9:1b:dc:d4:52:1d:51:5f:80:db:ae:20:d1:
                    8b:8c:80:06:d9:dc:8c:f8:3d:28:e8:b6:40:8a:09:
                    2f:2a:a4:77:8f:a9:b1:9c:06:9f:56:e3:63:64:3c:
                    49:b5:ba:64:57:c9:8b:38:99:d8:2b:f7:ea:be:bf:
                    b4:2d:a2:48:7a:da:0c:93:ba:1f:a9:56:11:98:14:
                    bc:03:7e:6c:75:5e:ca:04:e9:4e:45:19:23:83:4a:
                    cb:9d:31:49:a3:19:5d:e4:74:38:1c:ad:24:64:17:
                    2d:b0:23:68:89:f5:30:66:60:dd:33:70:40:67:28:
                    66:71:0d:9c:6e:93:f1:88:36:77:b1:95:b6:11:7b:
                    05:ab:41:95:55:d4:76:48:55:03:c9:3d:91:05:35:
                    6c:de:ca:86:c1:94:cb:dd:4f:46:76:69:89:d0:9c:
                    99:f7:69:ed:e1:c9:f8:f7:53:c1:4c:96:0f:88:da:
                    ae:08:0c:54:60:79:62:6e:e7:ff:77:ae:70:d0:15:
                    c3:63:3a:7a:2f:a2:37:79:82:c3:98:df:e2:ee:48:
                    77:8c:14:bc:0c:0d:84:89:b6:6b:1c:96:c4:9f:96:
                    e5:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:9E:09:DD:3A:5D:4A:A6:9E:54:FA:F3:0D:F8:64:88:64:1E:AF:D8
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3137302e302f32342d3234203d3e2037323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:61:1d:c7:91:4c:92:80:b8:05:8a:02:f6:55:b7:24:5d:39:
         c1:98:0e:66:52:2e:de:9d:b3:e5:1f:d0:ec:78:b3:b5:60:44:
         e1:df:c4:16:69:54:ef:13:aa:eb:97:d5:59:60:1f:47:60:f7:
         ea:81:eb:af:4f:cb:99:a8:40:38:7d:95:07:79:5b:a4:5d:b4:
         04:cd:86:5e:b5:7a:ea:36:5e:8b:b4:f8:c0:46:cd:90:92:b5:
         19:3e:22:13:1a:9a:51:7b:f6:c0:fa:38:86:9e:1c:fd:c1:18:
         52:a4:8d:93:f9:e2:76:88:a2:d8:1a:3b:27:f6:71:58:3b:06:
         f0:41:95:19:bb:90:5f:60:ed:77:dc:4f:de:41:0f:61:80:6f:
         50:91:c3:64:51:17:8b:88:09:cf:72:55:62:af:88:d2:0a:c4:
         8b:dd:e3:e8:aa:2c:1e:72:bb:c1:54:94:02:f0:36:93:77:c7:
         be:7b:52:24:8c:e0:15:35:1a:4a:7c:f5:a6:30:92:f8:db:a3:
         23:98:cf:4f:cc:c2:12:8f:04:2a:1a:43:c3:54:11:aa:b6:f4:
         4d:d8:c8:04:f9:95:dd:34:4d:5d:11:15:cc:e6:dd:89:01:a9:
         a1:53:87:6c:11:e6:52:76:e2:eb:f5:89:ff:63:6d:27:94:3c:
         d9:91:da:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----