Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3139342e302f32332d3234203d3e203239383032.roa
File:                     3135372e3235342e3139342e302f32332d3234203d3e203239383032.roa (raw, json)
Hash identifier:          F3b8u+I09RdLgZKG5m+5bKvQ1wu3Ygh4dV/YMXyIV6c=
Subject key identifier:   90:F5:6B:46:D6:A8:DD:82:65:35:F3:89:B5:2F:E4:6C:89:69:AA:1C
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       0F7FEC7FDA64D52583F0BA87F64982FCAD4BE640
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3139342e302f32332d3234203d3e203239383032.roa
Signing time:             Fri 30 Dec 2022 19:54:19 +0000
ROA not before:           Fri 30 Dec 2022 19:49:19 +0000
ROA not after:            Fri 29 Dec 2023 19:54:19 +0000
asID:                     29802
IP address blocks:        157.254.194.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:7f:ec:7f:da:64:d5:25:83:f0:ba:87:f6:49:82:fc:ad:4b:e6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Dec 30 19:49:19 2022 GMT
            Not After : Dec 29 19:54:19 2023 GMT
        Subject: CN=90F56B46D6A8DD826535F389B52FE46C8969AA1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b4:37:42:a3:cd:a2:2e:1e:e8:96:52:bc:41:
                    1d:a2:85:0d:74:6f:f2:58:f4:e9:52:e0:b1:e5:47:
                    ce:45:43:ba:d6:c8:75:41:7b:45:0d:ba:11:b0:cc:
                    70:37:37:6d:c6:5b:65:e5:3d:c5:46:31:f3:3e:38:
                    23:03:40:6d:2a:8e:87:87:1f:58:74:4e:cc:a7:93:
                    ae:82:49:f1:79:e8:af:15:6d:30:8d:3c:ed:e1:59:
                    0b:df:77:49:b0:15:43:9c:82:62:2c:8f:44:a3:4d:
                    f7:67:d0:9c:cc:7f:36:ec:c3:fc:eb:0c:8b:34:28:
                    7e:80:24:14:c5:9a:c4:b6:88:f3:08:7f:1c:3e:d5:
                    0f:bd:31:a5:3e:2b:54:22:a9:32:14:ec:8a:3b:e1:
                    3d:05:a1:a7:0d:50:3b:10:31:4e:1f:3f:9d:2e:44:
                    66:42:14:9e:3a:d1:8f:88:25:1f:84:28:c0:42:d3:
                    d9:35:fe:da:8e:c9:c3:59:97:68:2f:5e:78:c6:9e:
                    38:a3:46:35:88:71:23:84:ec:f7:92:be:5e:ba:3b:
                    3c:18:d6:13:40:1b:b6:c6:9c:f9:b4:e3:4c:27:f4:
                    c3:65:9d:6c:bd:ab:fd:ce:6f:59:e9:b8:c1:e0:b6:
                    96:24:fd:3f:c4:61:62:f3:57:00:5c:24:22:4f:f0:
                    f4:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:F5:6B:46:D6:A8:DD:82:65:35:F3:89:B5:2F:E4:6C:89:69:AA:1C
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3139342e302f32332d3234203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         57:e8:29:30:57:5c:cf:1c:bd:88:83:96:1e:d7:a6:14:82:e3:
         41:a1:73:c4:bf:bf:85:dd:65:07:51:79:07:f9:7e:6e:36:18:
         2a:3b:ab:06:b7:60:19:6c:f7:30:4b:51:c4:58:b8:17:0f:ad:
         32:89:fc:bb:46:a4:0f:c9:9e:a7:91:2e:dc:6e:5f:b9:d2:a6:
         ae:da:51:ba:6b:93:16:73:81:4c:fd:2a:19:6a:97:5a:62:54:
         41:75:88:c7:bf:f2:71:3a:fa:09:db:78:6c:ff:6f:37:82:d5:
         46:4a:95:ba:8d:3b:dc:ea:08:f2:d0:4d:81:75:b5:0e:d1:57:
         09:de:af:b4:ff:1f:65:49:f6:70:22:1e:1b:55:6b:65:68:0b:
         58:7a:c7:7c:3f:05:ca:6e:07:a1:b2:50:2f:bc:03:7a:78:6b:
         62:47:7e:06:49:7d:c3:a5:f5:06:33:66:15:af:19:e4:02:ec:
         49:45:42:1a:a3:50:15:1a:cc:3a:49:ed:4a:3c:18:2f:0b:f8:
         04:be:91:ae:d8:75:fb:98:07:34:1b:5e:1f:1d:58:a8:0a:d7:
         a3:4f:d2:50:5f:21:54:8f:98:93:c9:f3:08:d7:d0:01:ec:1a:
         84:50:bc:45:56:a4:0f:e8:5e:c7:c5:3f:21:95:de:26:27:a4:
         db:50:38:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----