Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3230302e302f32322d3232203d3e203134363138.roa
File:                     3135372e3235342e3230302e302f32322d3232203d3e203134363138.roa (raw, json)
Hash identifier:          2erlv+PGOiZZqmkL1bWkY6Od0js8Nl/6uUNl2JykUls=
Subject key identifier:   48:88:2D:B0:D6:28:50:E9:D9:58:05:FF:4A:AE:55:4D:1F:C9:D8:76
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       485FD5F082DD843F22EF9113F26B984550690819
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3230302e302f32322d3232203d3e203134363138.roa
Signing time:             Mon 29 May 2023 14:39:49 +0000
ROA not before:           Mon 29 May 2023 14:34:49 +0000
ROA not after:            Mon 27 May 2024 14:39:49 +0000
asID:                     14618
IP address blocks:        157.254.200.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:5f:d5:f0:82:dd:84:3f:22:ef:91:13:f2:6b:98:45:50:69:08:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: May 29 14:34:49 2023 GMT
            Not After : May 27 14:39:49 2024 GMT
        Subject: CN=48882DB0D62850E9D95805FF4AAE554D1FC9D876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:22:d6:fd:1b:09:ff:3e:39:b3:5a:81:f0:8a:
                    36:3c:e3:2d:07:3c:99:ed:d4:78:8f:3d:99:cd:08:
                    2d:4e:45:8b:cb:f2:04:95:d5:4b:a5:78:5c:52:05:
                    25:a8:d4:3b:f6:40:94:7d:48:0d:1b:9a:91:38:49:
                    c2:92:ae:6a:55:09:f3:91:a9:53:1f:5e:e8:1d:0a:
                    ba:6c:f1:cf:e0:90:3a:fd:f7:58:01:bc:61:23:d3:
                    10:b5:d7:a0:24:49:1d:76:85:05:ff:40:e6:55:19:
                    6e:31:b8:2d:4b:54:22:06:66:04:41:0a:61:5c:9e:
                    86:05:f8:69:59:f2:a8:61:ce:75:f8:19:7b:09:2c:
                    e1:0a:c7:b7:c8:10:69:b2:f8:e6:54:8f:12:29:09:
                    e2:fb:da:78:1e:9e:9a:9d:1a:2d:4c:a2:23:69:5a:
                    8a:da:c6:a7:06:d4:76:54:78:d7:a4:7c:94:4c:67:
                    29:9b:88:9b:6e:99:8d:50:97:09:1a:36:4d:80:cf:
                    e6:d5:64:56:f0:31:85:78:9f:2a:6f:e0:5a:06:aa:
                    9c:8c:e7:64:0d:7b:83:14:47:39:02:22:65:d2:4a:
                    6b:75:2a:9e:f5:ee:23:3a:17:ec:d4:9e:ae:e7:f4:
                    b0:4f:a4:3a:8a:ab:48:d7:f1:a1:3c:ca:da:61:71:
                    91:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:88:2D:B0:D6:28:50:E9:D9:58:05:FF:4A:AE:55:4D:1F:C9:D8:76
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3230302e302f32322d3232203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:1a:e7:62:62:b6:34:85:6a:c4:7f:fc:65:09:61:30:82:ed:
         63:db:d7:a8:35:dc:62:d3:a2:ee:b8:eb:16:83:40:d9:3c:37:
         1a:22:37:da:bc:b3:1f:ee:5f:69:0e:51:50:70:4d:ad:a6:11:
         a9:52:2f:60:55:01:c3:02:04:ee:25:30:df:f1:0d:15:44:f4:
         77:dc:c8:51:b2:19:5a:f4:37:31:ac:b6:af:38:43:ab:1f:43:
         af:91:1a:94:c8:e0:85:71:ae:d9:da:77:0d:f4:e9:a8:9e:82:
         9f:af:f6:6e:81:f5:9f:ae:6d:96:e0:3a:c0:3d:d0:e2:de:13:
         85:d7:01:d6:2d:38:4f:69:71:79:05:ec:43:1f:a9:78:dd:31:
         51:9c:93:a4:3c:40:15:57:27:90:ba:3b:55:3d:fe:70:03:7d:
         f3:38:04:fe:e3:2b:b5:06:95:28:d7:1a:09:fe:04:f6:23:19:
         e2:bb:e2:90:f2:c4:74:d9:e0:f4:b3:23:b1:77:66:4a:66:54:
         2c:ad:4b:9b:b7:0a:df:1e:1c:00:3b:34:30:ac:db:6c:b4:45:
         08:48:bf:73:92:67:41:c3:9f:56:21:fb:98:98:56:e6:d4:d8:
         b3:57:c9:ed:99:cf:3b:dc:34:3c:69:92:70:4b:1d:86:a4:28:
         33:72:e4:f9
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUSF/V8ILdhD8i75ET8muYRVBpCBkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4
NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjMwNTI5MTQzNDQ5WhcNMjQwNTI3MTQzOTQ5
WjAzMTEwLwYDVQQDEyg0ODg4MkRCMEQ2Mjg1MEU5RDk1ODA1RkY0QUFFNTU0RDFG
QzlEODc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2iLW/RsJ/z45
s1qB8Io2POMtBzyZ7dR4jz2ZzQgtTkWLy/IEldVLpXhcUgUlqNQ79kCUfUgNG5qR
OEnCkq5qVQnzkalTH17oHQq6bPHP4JA6/fdYAbxhI9MQtdegJEkddoUF/0DmVRlu
MbgtS1QiBmYEQQphXJ6GBfhpWfKoYc51+Bl7CSzhCse3yBBpsvjmVI8SKQni+9p4
Hp6anRotTKIjaVqK2sanBtR2VHjXpHyUTGcpm4ibbpmNUJcJGjZNgM/m1WRW8DGF
eJ8qb+BaBqqcjOdkDXuDFEc5AiJl0kprdSqe9e4jOhfs1J6u5/SwT6Q6iqtI1/Gh
PMraYXGRrwIDAQABo4ICtDCCArAwHQYDVR0OBBYEFEiILbDWKFDp2VgF/0quVU0f
ydh2MB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv
RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3
ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTY0
OTBmNDQ1M2I3Yi8wLzMxMzUzNzJlMzIzNTM0MmUzMjMwMzAyZTMwMmYzMjMyMmQz
MjMyMjAzZDNlMjAzMTM0MzYzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnf7IMA0GCSqGSIb3DQEB
CwUAA4IBAQAIGudiYrY0hWrEf/xlCWEwgu1j29eoNdxi06LuuOsWg0DZPDcaIjfa
vLMf7l9pDlFQcE2tphGpUi9gVQHDAgTuJTDf8Q0VRPR33MhRshla9DcxrLavOEOr
H0OvkRqUyOCFca7Z2ncN9OmonoKfr/ZugfWfrm2W4DrAPdDi3hOF1wHWLThPaXF5
BexDH6l43TFRnJOkPEAVVyeQujtVPf5wA33zOAT+4yu1BpUo1xoJ/gT2Ixniu+KQ
8sR02eD0syOxd2ZKZlQsrUubtwrfHhwAOzQwrNtstEUISL9zkmdBw59WIfuYmFbm
1NizV8ntmc873DQ8aZJwSx2GpCgzcuT5
-----END CERTIFICATE-----