Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3137312e302f32342d3234203d3e203631333137.roa
File:                     3135372e3235342e3137312e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          Gtx9168nTYJOIoJS/qJ9r5sObHeOo1r3WmPzmlGnEBU=
Subject key identifier:   02:A7:89:62:CE:35:DC:C0:0F:3C:E0:A9:FC:CF:AD:CA:76:F4:9C:48
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       3D9B722FD617D3FFEE8D092FE6B3DA75A2B734CA
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3137312e302f32342d3234203d3e203631333137.roa
Signing time:             Tue 30 May 2023 16:30:21 +0000
ROA not before:           Tue 30 May 2023 16:25:21 +0000
ROA not after:            Tue 28 May 2024 16:30:21 +0000
asID:                     61317
IP address blocks:        157.254.171.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:9b:72:2f:d6:17:d3:ff:ee:8d:09:2f:e6:b3:da:75:a2:b7:34:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: May 30 16:25:21 2023 GMT
            Not After : May 28 16:30:21 2024 GMT
        Subject: CN=02A78962CE35DCC00F3CE0A9FCCFADCA76F49C48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2b:1b:78:a0:ed:79:17:26:ef:52:98:8e:38:
                    4c:d1:45:fc:1d:f2:95:d5:bf:41:69:d8:8f:f0:8d:
                    a1:0d:fa:fe:4e:35:2c:47:23:27:52:cd:3c:74:48:
                    3d:a3:c4:a6:2f:be:57:89:d3:3c:6e:60:83:a1:a6:
                    8d:bd:fb:70:13:f6:87:b7:cc:3c:fa:c4:37:7b:d5:
                    f8:52:ea:bc:e8:9f:27:42:a2:9d:9c:b6:48:0a:98:
                    48:00:ae:eb:c0:40:48:06:50:3d:67:ce:c6:49:25:
                    2f:e1:e3:e7:68:27:66:4b:7a:d2:79:a6:f8:b4:0f:
                    35:48:3f:74:b7:83:8a:19:e0:ea:67:82:f2:45:da:
                    17:b0:6a:aa:64:a1:9e:4b:08:bf:80:dd:ee:4f:01:
                    31:84:7f:41:24:b0:1e:a6:6a:83:ab:77:60:f4:fc:
                    12:70:08:f5:df:7b:a5:14:d5:ce:0c:e4:2d:36:bf:
                    8c:39:fd:02:bb:2c:b8:6b:71:c0:04:0d:b8:f8:4b:
                    ba:0d:a3:d1:56:8f:b7:fe:91:7c:b6:86:d8:98:15:
                    b5:99:1c:4a:3c:3f:33:7b:18:d7:00:1e:df:44:72:
                    6f:f4:a4:62:eb:b8:7c:9e:d5:bc:39:30:a1:25:f6:
                    50:96:d2:1a:b9:96:56:04:07:1d:f3:d2:b0:9d:8c:
                    bb:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:A7:89:62:CE:35:DC:C0:0F:3C:E0:A9:FC:CF:AD:CA:76:F4:9C:48
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3137312e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:96:e1:35:04:ad:76:7b:10:53:c6:79:fe:97:24:39:53:27:
         67:a0:e6:b1:2d:d5:56:35:ee:37:fb:a2:68:4c:4b:66:20:42:
         22:54:f5:a5:c0:ca:33:fb:03:71:77:ff:4d:b4:a9:3f:b2:4f:
         df:b5:ef:10:5e:c9:1e:f4:ea:1e:6e:32:04:76:01:55:e0:88:
         24:09:46:bb:88:fb:3a:d5:ef:9e:af:06:b7:f1:dc:a9:00:ab:
         10:ca:c1:c3:52:c9:ba:d1:2d:f7:fe:02:3f:8a:8a:d6:3c:f5:
         97:97:eb:14:42:73:20:06:c3:1f:97:05:c4:e7:ea:f5:20:28:
         ad:38:aa:c4:0b:9a:d3:9e:01:ed:cf:6a:a1:76:ae:36:b4:2e:
         1d:07:90:8b:46:cb:c7:be:29:60:0c:20:eb:02:e5:67:4b:f4:
         29:05:a3:f2:5f:6a:c0:64:e5:fb:bb:f7:45:3f:b2:9f:e3:47:
         0e:54:a5:31:82:99:7b:0e:95:6b:0f:ab:5f:58:e3:59:a3:f4:
         ac:8e:b0:8c:97:1e:70:57:fc:60:d6:cc:08:db:7b:0f:92:c3:
         8a:28:ae:a0:24:a2:4a:79:91:2e:b0:74:78:56:fd:5f:03:ba:
         b0:49:2d:d5:40:8a:e4:6f:55:ad:e6:1f:4e:69:66:1c:0b:b9:
         d4:96:2c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----