Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3137322e302f32342d3234203d3e20323130373033.roa
File:                     3135372e3235342e3137322e302f32342d3234203d3e20323130373033.roa (raw, json)
Hash identifier:          sdiJ1Q4Fo+e6JvBUOJzX+Aw3WLnymuE8kp6S1O3B/n4=
Subject key identifier:   C9:0D:B0:1F:A8:7D:3A:CC:67:88:BE:38:70:07:AD:85:14:62:B2:CC
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       4C16BEC040B48A674940BFF6155F5D87BF3E93EA
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3137322e302f32342d3234203d3e20323130373033.roa
Signing time:             Fri 30 Dec 2022 19:54:19 +0000
ROA not before:           Fri 30 Dec 2022 19:49:19 +0000
ROA not after:            Fri 29 Dec 2023 19:54:19 +0000
asID:                     210703
IP address blocks:        157.254.172.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:16:be:c0:40:b4:8a:67:49:40:bf:f6:15:5f:5d:87:bf:3e:93:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Dec 30 19:49:19 2022 GMT
            Not After : Dec 29 19:54:19 2023 GMT
        Subject: CN=C90DB01FA87D3ACC6788BE387007AD851462B2CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:27:72:71:af:e4:f7:1f:4a:fb:ff:74:91:ce:
                    09:cc:36:4b:7a:2b:ec:6e:41:e6:b0:0d:8d:35:7c:
                    ee:49:5b:65:33:fd:67:63:10:69:23:d5:17:6f:54:
                    14:26:b4:42:3c:bd:3b:a9:4b:b8:ce:3e:51:a8:97:
                    48:a7:6a:9b:d6:d1:fa:34:71:e0:28:67:a5:b2:1e:
                    4f:03:79:0d:62:cd:79:d6:4e:aa:ae:52:eb:e4:f4:
                    02:a5:d9:a2:e4:dd:31:6f:d4:92:aa:e8:11:8d:ae:
                    da:ae:57:29:4d:07:79:3e:78:54:55:3c:8a:bb:a7:
                    c5:f4:c4:a4:dc:bd:18:0a:ff:03:66:bf:d1:b8:9f:
                    f8:7f:b1:72:3a:12:af:d0:b8:75:0b:b9:12:ab:48:
                    94:9d:ee:a4:24:90:e0:eb:38:76:14:9c:a1:78:6f:
                    e2:95:0b:49:2e:46:d9:47:24:56:82:5b:1b:ed:ec:
                    4a:69:15:89:90:19:fe:ab:b9:fc:3b:e1:ca:9c:f1:
                    0e:09:a4:ea:c4:eb:e0:32:62:7d:6f:28:1b:8c:69:
                    2f:0f:23:35:e6:4b:c1:04:79:15:ea:1f:01:d2:a7:
                    aa:80:7c:a3:4d:01:2e:66:55:7d:4f:17:22:29:90:
                    ab:ce:c0:7b:43:34:eb:1d:71:ca:f1:ef:67:71:b9:
                    3e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:0D:B0:1F:A8:7D:3A:CC:67:88:BE:38:70:07:AD:85:14:62:B2:CC
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3137322e302f32342d3234203d3e20323130373033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:42:f0:1a:14:c5:37:be:da:76:d9:82:11:29:ef:14:c7:57:
         fb:0e:2c:3d:d1:ac:96:03:5e:2b:46:f6:c2:d4:81:33:e7:12:
         14:63:05:5b:fd:85:30:de:78:34:05:eb:c0:06:60:bd:13:28:
         fd:55:ec:80:82:96:7a:8f:31:f7:ad:2f:e6:a1:5b:e8:1d:21:
         20:df:f0:ad:62:75:18:54:43:aa:b0:c6:48:d8:d1:26:cb:13:
         09:f4:1c:9b:9f:80:48:83:76:f4:e7:4a:6d:27:bc:8f:38:3f:
         97:55:0d:8e:93:f8:ba:61:f8:1a:c8:8a:76:bc:ee:fa:f7:ad:
         c8:68:53:77:4b:cf:73:21:a7:4f:ac:fd:ef:19:9b:60:4e:ad:
         29:cf:0e:33:3d:81:4a:db:8a:31:0f:fb:0d:83:70:be:6d:42:
         7b:d6:27:6a:46:94:b9:a6:38:bc:60:fe:35:b0:b0:39:d4:f3:
         59:78:78:4d:ee:1a:87:e2:7d:b5:b2:ce:37:b3:60:fd:74:bb:
         6f:55:d6:18:b7:7c:89:18:40:5e:45:cc:fa:0c:29:9a:7b:0e:
         97:ac:5f:02:ae:9a:b2:68:e9:c5:6c:89:89:69:39:e6:d6:e7:
         8b:b5:12:4c:98:1b:36:a6:97:c2:f6:f0:aa:22:9d:06:5f:8e:
         b9:9a:a0:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----