Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3139342e302f32332d3234203d3e20393936.roa
File:                     3135372e3235342e3139342e302f32332d3234203d3e20393936.roa (raw, json)
Hash identifier:          2V+Ew75RWc+/iiElUZGOi/P2euykDaatbc+0TPKUcOw=
Subject key identifier:   94:66:02:36:59:C0:51:98:7A:CF:A3:F4:DF:5C:5E:27:C8:DB:81:D1
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       0390AB4731C2A34B78838C5D5B404E99872BB879
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3139342e302f32332d3234203d3e20393936.roa
Signing time:             Fri 30 Dec 2022 19:54:19 +0000
ROA not before:           Fri 30 Dec 2022 19:49:19 +0000
ROA not after:            Fri 29 Dec 2023 19:54:19 +0000
asID:                     996
IP address blocks:        157.254.194.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:90:ab:47:31:c2:a3:4b:78:83:8c:5d:5b:40:4e:99:87:2b:b8:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Dec 30 19:49:19 2022 GMT
            Not After : Dec 29 19:54:19 2023 GMT
        Subject: CN=9466023659C051987ACFA3F4DF5C5E27C8DB81D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1b:1d:f4:29:08:7a:42:c3:b4:c4:d2:e7:bc:
                    5b:cb:18:b7:39:99:1e:db:08:f1:63:e6:dc:61:8c:
                    4e:ac:8e:3e:11:1d:43:4b:67:42:41:2e:03:50:61:
                    01:d5:46:d7:21:c5:50:ed:f3:d5:c4:f4:a0:bb:1c:
                    f3:63:ff:1e:d8:ba:8e:92:f6:c8:84:00:af:8e:13:
                    2f:e2:2b:87:00:cb:94:b4:f8:42:33:62:bf:4b:11:
                    5e:91:42:e2:4f:9e:54:0e:b5:de:83:a1:66:a9:29:
                    cb:20:4d:ca:71:f0:93:12:a2:dd:94:8c:c7:68:0b:
                    47:ac:91:99:b3:7f:18:cd:03:5c:b7:1b:48:e6:0d:
                    49:30:d5:0a:77:4d:bb:85:fc:9f:7d:00:dc:67:d6:
                    11:ac:ee:1c:c4:4e:8b:df:69:fb:0f:51:3c:6f:be:
                    ad:ea:b3:c2:9a:c1:19:5f:e1:c1:47:b2:4a:28:5b:
                    a8:1f:68:b9:cb:1d:49:3f:4e:7a:2a:13:41:ad:82:
                    bc:7a:6e:3b:17:8a:c9:25:8a:3e:ce:28:81:fe:c0:
                    ac:4e:cc:02:dc:ba:59:c8:4b:cf:86:2c:73:da:f1:
                    22:de:31:9b:ca:cf:24:47:91:55:b6:c2:bc:95:e9:
                    0a:cf:91:68:e5:5b:41:16:78:59:12:e6:d9:78:b1:
                    24:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:66:02:36:59:C0:51:98:7A:CF:A3:F4:DF:5C:5E:27:C8:DB:81:D1
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3139342e302f32332d3234203d3e20393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:a3:60:f0:94:23:f7:7f:18:28:9a:8e:06:cf:4a:2b:e9:c0:
         10:f6:04:16:67:fc:2b:1e:e5:e9:41:01:fa:8f:54:69:26:bd:
         12:23:55:a6:27:b8:ba:36:e5:5d:34:bc:a7:c7:8b:ca:a0:e0:
         a3:08:bc:b1:20:dd:93:b6:19:de:5b:fd:65:6a:05:43:6d:35:
         67:48:17:59:c2:86:bb:12:02:09:96:44:b3:a4:c4:e9:36:14:
         85:a6:9c:20:61:f6:7a:5f:df:9b:ad:88:86:a8:7b:9e:39:45:
         4a:ce:d5:7a:17:5a:ac:ce:61:95:aa:0c:1a:10:01:4a:d8:6e:
         1c:0c:e7:fb:e5:ad:a8:7c:1f:34:b5:dd:cb:ce:5b:88:04:d8:
         c8:51:ab:78:61:48:62:13:43:e0:78:c5:d6:ac:8b:2c:09:fa:
         32:4e:8f:90:10:68:0a:8d:ee:80:52:11:14:aa:13:34:51:1f:
         3c:fa:5a:7c:fc:b1:8c:d5:79:07:d8:74:06:85:28:29:30:70:
         25:90:06:a1:2a:01:39:40:00:89:6b:aa:71:4a:03:e0:91:70:
         08:8d:0c:55:91:d7:e5:b1:28:2b:57:54:48:48:bc:74:ce:cf:
         4d:d7:03:20:a2:7e:01:97:cc:48:e1:7b:7e:7b:0e:63:20:11:
         74:1f:bc:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----