Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3230322e302f32342d3234203d3e20323036303932.roa
File:                     3135372e3235342e3230322e302f32342d3234203d3e20323036303932.roa (raw, json)
Hash identifier:          ByHjCmMplZ5XT5I8h1qHcdkdYjg55+Yq0cSzzOjhnkw=
Subject key identifier:   52:66:B9:A3:5C:97:8D:01:87:31:1B:C2:BD:BD:F6:F2:78:9D:BD:7C
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       3BEE6A9895025C6A6EBEEABE1C934C67C9ACAD23
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3230322e302f32342d3234203d3e20323036303932.roa
Signing time:             Fri 30 Dec 2022 19:54:19 +0000
ROA not before:           Fri 30 Dec 2022 19:49:19 +0000
ROA not after:            Fri 29 Dec 2023 19:54:19 +0000
asID:                     206092
IP address blocks:        157.254.202.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:ee:6a:98:95:02:5c:6a:6e:be:ea:be:1c:93:4c:67:c9:ac:ad:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Dec 30 19:49:19 2022 GMT
            Not After : Dec 29 19:54:19 2023 GMT
        Subject: CN=5266B9A35C978D0187311BC2BDBDF6F2789DBD7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3f:55:8a:fd:9f:d9:4e:52:02:b0:d6:88:8b:
                    3c:c8:da:ef:4b:d9:2f:92:8f:5e:fc:44:b4:25:26:
                    fd:dd:80:b9:c3:da:b5:54:3d:ed:43:b5:ea:b4:b2:
                    29:b0:2a:fa:56:3d:86:41:ef:82:07:cb:4d:5d:aa:
                    d0:18:ce:19:a8:3b:81:be:75:be:82:8f:98:9f:9b:
                    84:79:42:48:d1:16:40:02:4e:c3:f1:85:53:cf:1b:
                    cb:04:4c:2e:1f:cb:71:38:fe:1c:e5:85:f5:50:d1:
                    be:44:eb:f4:d5:78:19:f4:2f:ec:fa:08:9a:03:12:
                    42:47:8c:19:9c:06:f9:f1:75:54:fe:fb:42:d4:fc:
                    b0:a1:69:03:1d:4c:eb:fa:0d:24:ac:f2:76:17:22:
                    b5:5d:87:19:a4:0d:00:96:b4:6a:d2:ee:b5:f3:46:
                    c8:1c:7a:da:73:77:6f:40:3d:da:6f:be:57:59:69:
                    4e:00:97:cc:e2:39:b8:cb:ba:75:da:d7:bb:a5:22:
                    ee:60:ac:2d:f9:ff:38:35:43:42:37:0e:9d:6c:25:
                    8c:20:17:db:7e:86:4b:d9:63:a6:d1:c8:ac:7e:2c:
                    eb:3e:70:fa:89:e4:a3:5f:f2:b5:24:ec:0b:10:37:
                    6d:89:ce:81:a3:2d:56:91:f6:89:0e:a7:10:4a:5d:
                    b4:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:66:B9:A3:5C:97:8D:01:87:31:1B:C2:BD:BD:F6:F2:78:9D:BD:7C
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3230322e302f32342d3234203d3e20323036303932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:89:60:94:75:9c:7a:c3:1b:07:d4:c9:cf:80:7b:83:ee:32:
         b9:cf:ad:e1:7c:e9:e0:81:b4:39:67:d6:76:2e:20:d3:a9:17:
         7a:f7:e3:03:5c:a6:d3:4f:fa:f1:8c:b1:d9:d6:2c:5a:8d:0a:
         1f:cc:0e:a2:b8:b3:21:c5:bb:66:65:91:6a:5d:5a:14:be:fd:
         10:ce:34:ae:8d:38:0b:7d:3a:cc:62:df:61:ee:12:44:97:f8:
         9d:e4:45:d5:20:05:5d:d6:1e:22:9e:4d:1d:f4:b7:16:0e:2b:
         8f:f7:43:25:08:c7:6b:f0:7c:4d:9e:d6:df:5d:b6:26:19:d4:
         f7:83:21:22:80:15:0f:31:a5:8d:57:56:a5:ff:10:62:ac:01:
         54:c0:19:03:1b:f1:b1:8e:37:81:de:d9:60:8d:27:49:f5:56:
         98:5c:f6:a2:b6:a4:aa:c3:37:d1:a7:d7:41:84:4d:c7:70:9f:
         a0:cf:48:40:54:77:92:de:8a:29:20:af:ba:63:ca:0a:dc:4c:
         7d:a0:6b:0f:e9:f0:ef:54:82:5e:65:21:4b:b7:fd:c2:87:8b:
         fe:e1:02:a1:ce:cd:ce:da:65:be:a7:ef:a7:92:c6:55:78:c6:
         71:f5:28:c9:20:0a:59:b7:ba:dd:85:57:cc:93:5e:c0:15:f7:
         2a:eb:9e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----