Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3137312e302f32342d3234203d3e20323132323338.roa
File:                     3135372e3235342e3137312e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier:          DbNhmSQTdtY8HehpQqieJeu/v2ST9Gnta7dulDJlsxI=
Subject key identifier:   E5:2B:3D:C4:68:0B:BA:43:C1:F1:98:DC:C7:2E:83:7F:B8:89:C5:58
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       1E601B8CA926C19A566FA714349F8C077A39A55A
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3137312e302f32342d3234203d3e20323132323338.roa
Signing time:             Fri 30 Dec 2022 19:54:18 +0000
ROA not before:           Fri 30 Dec 2022 19:49:18 +0000
ROA not after:            Fri 29 Dec 2023 19:54:18 +0000
asID:                     212238
IP address blocks:        157.254.171.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:60:1b:8c:a9:26:c1:9a:56:6f:a7:14:34:9f:8c:07:7a:39:a5:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Dec 30 19:49:18 2022 GMT
            Not After : Dec 29 19:54:18 2023 GMT
        Subject: CN=E52B3DC4680BBA43C1F198DCC72E837FB889C558
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:db:f6:4c:1c:59:0a:d5:43:ba:f8:1c:38:40:
                    4d:fa:9f:cd:04:89:a7:4b:9e:27:d4:7a:d3:39:30:
                    eb:23:77:4b:01:25:cf:0b:1a:b3:a9:f1:84:72:39:
                    78:de:7f:e4:a2:a4:5a:6c:86:79:c8:53:f0:88:54:
                    7e:ff:0b:fc:fd:56:8d:3d:48:7f:5c:15:d4:32:88:
                    ed:f9:4e:ec:05:51:5c:e7:66:bd:3d:13:22:0a:a3:
                    29:5e:1a:72:1a:aa:e1:ba:de:92:03:91:0b:0f:d4:
                    15:70:38:83:69:d5:82:79:2c:48:a6:59:9d:11:5e:
                    42:d2:9c:53:b8:fa:fb:c4:49:eb:4a:fd:27:a9:b3:
                    d2:3f:d0:3f:8e:19:61:66:89:ee:c7:fd:ec:ce:83:
                    6a:3a:9b:b8:5d:63:74:01:1f:e8:34:3f:a6:33:c2:
                    e9:f9:ad:4f:9d:b6:fe:01:8f:1d:3b:37:b4:3a:2f:
                    a2:1c:74:56:61:6d:89:4b:35:c4:ec:74:f2:58:23:
                    f1:cc:0d:38:64:6b:40:32:f9:3c:46:32:ff:40:dc:
                    48:28:8b:78:7e:78:85:22:ce:19:b7:e8:4e:4a:7a:
                    13:e8:f1:6c:5c:d0:b5:6c:30:99:45:ef:17:a4:2a:
                    2a:e7:5d:b5:6a:7d:77:1c:05:e8:4f:9d:b1:2c:a8:
                    9e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:2B:3D:C4:68:0B:BA:43:C1:F1:98:DC:C7:2E:83:7F:B8:89:C5:58
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3137312e302f32342d3234203d3e20323132323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:d8:a6:c3:e2:0f:89:df:26:9e:71:02:69:90:08:9d:4d:78:
         dc:e0:88:dd:f1:ba:a0:90:25:aa:f8:4a:b1:94:9f:74:87:66:
         03:9d:78:02:51:ff:7e:67:a7:32:41:03:9f:4d:79:1d:96:82:
         87:97:dd:77:77:d8:6d:22:3b:57:1c:87:a6:d9:8b:1c:e4:c9:
         51:32:a2:a1:fe:8d:9d:b2:29:d4:68:ea:a1:6f:29:40:d4:2d:
         33:67:b0:19:8e:13:aa:28:8f:d9:bc:8f:ec:fc:1c:fd:d6:8b:
         b8:c1:7e:b8:8c:e0:ac:d0:c3:57:ec:4c:3e:4f:a6:55:c5:e4:
         77:b1:5c:05:45:f4:b6:f0:74:1f:2a:c4:f4:11:87:7b:95:ae:
         d6:79:a7:10:16:4c:64:c9:d7:34:76:18:55:c6:66:16:6e:c5:
         c1:28:6c:e0:2a:86:f4:e6:4f:64:eb:9b:77:47:78:cd:7d:3c:
         98:8f:2e:ff:8a:2d:ff:d9:2a:3f:9e:8b:67:13:ea:22:6a:8b:
         2b:eb:c5:69:05:c7:a1:a1:0b:7e:c8:8f:ce:bc:b8:66:d8:53:
         73:a1:d4:7f:19:ca:ee:81:79:7a:41:96:21:67:be:8a:64:0a:
         77:c5:a5:8e:02:e0:5f:f0:de:01:aa:79:69:d1:43:7f:8e:9a:
         80:8b:28:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----