Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3139372e302f32342d3234203d3e20323036303932.roa
File:                     3135372e3235342e3139372e302f32342d3234203d3e20323036303932.roa (raw, json)
Hash identifier:          YPwCpjX8ce2x5acQKqIIFDnotePM2RiOyF4Fg8mdQxI=
Subject key identifier:   C6:64:B4:F2:0A:59:B6:07:B5:A4:F1:22:5D:71:24:14:BC:77:95:B1
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       1FFBD155184CBD94E734FC47D2C9611D7C39E82F
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3139372e302f32342d3234203d3e20323036303932.roa
Signing time:             Fri 30 Dec 2022 19:54:19 +0000
ROA not before:           Fri 30 Dec 2022 19:49:19 +0000
ROA not after:            Fri 29 Dec 2023 19:54:19 +0000
asID:                     206092
IP address blocks:        157.254.197.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:fb:d1:55:18:4c:bd:94:e7:34:fc:47:d2:c9:61:1d:7c:39:e8:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Dec 30 19:49:19 2022 GMT
            Not After : Dec 29 19:54:19 2023 GMT
        Subject: CN=C664B4F20A59B607B5A4F1225D712414BC7795B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:82:f8:f8:78:fc:17:89:28:d8:1b:25:3a:5d:
                    ea:01:61:10:7b:93:03:75:01:33:75:47:fc:cd:1b:
                    10:71:7e:dc:e0:a6:42:f9:61:18:69:85:de:0b:2d:
                    85:a4:a0:dc:5d:2a:37:2d:6f:95:e6:40:00:42:3d:
                    4e:8c:ea:4b:aa:5e:69:23:b0:15:c0:1c:d4:70:9b:
                    50:15:3d:cc:f3:12:b3:b7:6b:63:c3:7b:68:aa:22:
                    fc:c4:51:ac:4f:0e:b0:9b:a4:b3:c2:35:5d:82:ba:
                    0b:d8:87:69:df:d3:de:a3:73:fe:4a:b3:3b:fb:de:
                    52:ae:60:9b:35:de:33:b7:09:9f:85:af:25:08:e9:
                    3f:5c:43:d8:39:51:57:da:46:0c:cc:ef:74:07:1d:
                    e1:78:38:91:50:6b:ed:4c:f7:d2:58:0c:a9:9f:18:
                    35:46:44:e2:19:f8:4b:b6:94:37:61:4f:30:b0:8c:
                    7d:c9:51:2d:4c:fb:5a:92:5d:af:a2:f3:d1:79:9f:
                    6c:52:3e:fe:49:b4:76:bf:4b:de:d1:6e:69:ea:3d:
                    9d:43:b8:93:66:3e:11:80:5c:ff:75:a5:19:5c:85:
                    b8:2e:3e:76:8e:02:f6:63:ee:d0:9a:e4:e0:5c:54:
                    3e:e4:00:5e:e7:53:00:78:0d:3c:17:25:37:97:d1:
                    a6:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:64:B4:F2:0A:59:B6:07:B5:A4:F1:22:5D:71:24:14:BC:77:95:B1
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3139372e302f32342d3234203d3e20323036303932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:e8:ee:e1:b0:a8:ac:1e:91:75:7c:35:c2:e9:0e:bc:e7:18:
         68:b9:30:61:ab:a2:2b:ad:3e:17:64:00:3b:34:41:9e:c7:c9:
         06:d9:a6:9c:89:bf:c9:43:ca:e6:c9:08:ba:33:f9:6c:7d:69:
         a3:09:af:cc:79:ea:e0:be:c0:26:04:88:6f:36:7a:b0:72:55:
         f7:1c:37:1b:1c:dd:2d:e8:97:1d:df:90:22:7a:f9:48:fa:92:
         8f:f6:4d:93:e9:a1:fc:60:50:b3:c8:37:2a:f3:1f:0c:f6:6d:
         8e:99:0b:9c:19:ab:29:f4:2d:c5:fb:8e:64:00:d2:2d:a9:b8:
         cf:43:60:9b:9f:65:e8:9b:0d:c4:12:62:fd:70:08:cd:b0:41:
         80:5b:28:3e:08:9f:61:ca:53:d7:fe:13:f9:a5:d4:1f:23:ec:
         97:15:bd:f9:13:05:b9:f9:b3:9c:d5:6c:f9:ea:e2:96:a8:fb:
         c4:54:43:4c:d6:ab:29:ef:c4:15:05:d2:99:89:36:44:e1:df:
         fe:88:5c:4a:c1:40:e2:81:aa:61:ba:48:e0:af:8d:83:b6:e2:
         20:24:b1:c4:fd:5c:55:5c:13:5e:6f:d9:50:b4:ac:a7:8c:a9:
         22:e0:2e:ef:40:28:af:73:ce:8c:03:ef:bd:c3:8c:cb:5b:d0:
         b1:dd:58:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----