Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3137332e302f32342d3234203d3e20333936333536.roa
File:                     3135372e3235342e3137332e302f32342d3234203d3e20333936333536.roa (raw, json)
Hash identifier:          922Tz4/YG+fvcb/c0rBvTuBrCJvyzsMOe6QsQIYy3f4=
Subject key identifier:   06:69:5E:B6:CE:9E:6A:DD:4A:7F:22:DF:69:2F:80:4B:1C:EA:E6:0C
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       2ED836BD9565CEA0220C1645227D40D026255661
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3137332e302f32342d3234203d3e20333936333536.roa
Signing time:             Fri 30 Dec 2022 19:54:19 +0000
ROA not before:           Fri 30 Dec 2022 19:49:19 +0000
ROA not after:            Fri 29 Dec 2023 19:54:19 +0000
asID:                     396356
IP address blocks:        157.254.173.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:d8:36:bd:95:65:ce:a0:22:0c:16:45:22:7d:40:d0:26:25:56:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Dec 30 19:49:19 2022 GMT
            Not After : Dec 29 19:54:19 2023 GMT
        Subject: CN=06695EB6CE9E6ADD4A7F22DF692F804B1CEAE60C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:83:60:ae:b2:c1:87:02:52:63:db:72:75:3b:
                    6f:98:49:83:33:fa:b4:08:96:5e:36:26:e5:d2:b9:
                    d3:f0:98:70:7d:4b:b5:05:14:ac:ef:d2:be:93:2d:
                    d9:1b:da:eb:c9:43:f4:d8:94:f2:72:7e:ca:98:8c:
                    82:9f:3d:42:a9:cf:e4:3a:46:f8:91:f0:6e:80:ee:
                    47:2b:ba:18:cb:08:86:5f:07:31:ff:39:14:6a:43:
                    f5:a8:c9:ab:86:98:47:94:de:59:e0:b2:21:97:71:
                    06:2c:c8:60:07:be:59:0a:41:a0:85:19:54:e8:46:
                    51:15:27:a1:71:14:4f:46:26:57:1d:f8:99:cd:6a:
                    77:44:91:69:ab:75:a1:31:e8:bf:52:8d:8e:59:02:
                    de:89:a2:13:df:df:99:a8:c5:ce:ad:49:b5:2c:91:
                    62:ec:a6:a9:f2:fc:6e:82:6d:e1:ee:71:65:81:c7:
                    cf:01:c4:4b:41:07:f8:a9:00:dd:bd:d7:a8:1b:c1:
                    b0:d1:e8:ee:98:15:9e:f0:41:b4:a6:ce:0f:45:01:
                    f9:2d:44:9c:85:c1:48:fc:7a:9d:95:e7:7e:cd:5d:
                    2a:17:00:31:ba:a9:72:93:ac:98:06:de:29:d7:5f:
                    36:5c:78:a7:95:ac:35:2f:60:98:d7:99:e1:8b:b2:
                    c3:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:69:5E:B6:CE:9E:6A:DD:4A:7F:22:DF:69:2F:80:4B:1C:EA:E6:0C
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3137332e302f32342d3234203d3e20333936333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:b4:fe:1d:27:89:ff:c5:cd:07:a9:84:77:47:1b:9d:07:75:
         ff:e4:84:96:57:9c:dc:64:cb:da:91:e5:fb:0e:70:22:5a:cf:
         5a:4c:83:53:bb:77:3c:5d:d1:f2:0d:5f:bd:1c:88:b7:96:f7:
         45:54:37:ad:f4:b8:1b:88:8f:cb:a4:17:a9:53:6b:79:23:30:
         1f:d5:b1:e5:8b:f6:45:ae:8b:d2:65:68:14:47:b4:3e:03:56:
         aa:de:bc:b2:27:63:7d:1c:38:6c:76:08:79:b5:f1:8b:9f:68:
         69:11:4d:00:aa:33:1c:a0:00:59:ca:de:7f:33:56:7a:0e:54:
         8a:b3:38:3e:a3:3b:22:3c:ab:88:aa:82:93:f6:d3:7b:3e:fa:
         da:7c:47:f4:b6:14:80:f4:5d:be:27:8a:db:7f:74:22:9b:00:
         b6:35:6f:16:4d:a7:cb:c4:57:b7:c2:78:00:5c:d6:5e:3f:c8:
         16:05:c8:58:ed:db:41:f5:fb:6f:3c:41:a8:43:14:8f:83:25:
         97:df:8c:a9:29:42:16:a6:5a:a4:13:4d:3a:20:ef:49:bf:da:
         83:82:45:1b:6e:44:6c:8c:12:68:d6:b2:90:e3:29:a0:5c:f1:
         c0:30:8a:47:97:ed:59:9d:01:4e:19:a5:04:7d:cd:0d:d8:be:
         07:08:2c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----