Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3230332e302f32342d3234203d3e20323036303932.roa
File:                     3135372e3235342e3230332e302f32342d3234203d3e20323036303932.roa (raw, json)
Hash identifier:          WNO9CASiJ789kYfsA1dJJypmi+n8LBPwhna+f+XNRHA=
Subject key identifier:   F0:CB:53:5F:22:BB:64:EC:49:E0:AE:9B:A9:15:5B:8E:87:A7:11:BF
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       1B11B8CA6E2D5D4D2C1CF626DCD35DD2F9E0D5C5
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3230332e302f32342d3234203d3e20323036303932.roa
Signing time:             Fri 30 Dec 2022 19:54:20 +0000
ROA not before:           Fri 30 Dec 2022 19:49:20 +0000
ROA not after:            Fri 29 Dec 2023 19:54:20 +0000
asID:                     206092
IP address blocks:        157.254.203.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:11:b8:ca:6e:2d:5d:4d:2c:1c:f6:26:dc:d3:5d:d2:f9:e0:d5:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Dec 30 19:49:20 2022 GMT
            Not After : Dec 29 19:54:20 2023 GMT
        Subject: CN=F0CB535F22BB64EC49E0AE9BA9155B8E87A711BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d8:14:f2:d1:4b:1f:65:ab:10:fa:13:cd:cd:
                    4f:d3:e3:f8:83:6c:44:0b:b3:ed:d1:28:d0:6c:1b:
                    1a:bb:73:d0:60:4d:19:40:50:69:42:7f:9d:46:52:
                    24:16:ad:a9:7b:92:61:f0:79:20:d1:4a:70:52:82:
                    27:aa:47:72:20:73:27:d1:11:8e:d9:6e:37:85:70:
                    af:c9:42:99:ad:8c:07:43:3c:de:b0:f8:56:9d:51:
                    a4:46:30:d4:6e:1d:f5:46:c4:c7:8a:63:70:97:e4:
                    ea:c7:ba:c8:9d:a8:97:ce:ef:d2:e9:a1:bd:38:ef:
                    5d:ea:b8:fa:19:6a:59:a1:7c:cc:a9:00:0a:63:50:
                    47:a4:f3:38:49:b5:12:a3:6d:6d:33:3d:c4:7b:27:
                    66:d7:0a:52:77:97:91:83:88:b8:71:38:b0:59:e1:
                    70:29:ae:a0:51:f6:19:9e:bf:2e:36:59:b1:75:b0:
                    a5:9b:b8:6b:bf:2d:19:45:54:11:ff:fd:a4:4f:31:
                    71:38:59:e7:82:0c:d3:c2:2c:a0:8e:68:dd:e5:51:
                    b7:c1:12:5f:12:a8:d8:93:5b:dd:0a:1b:c9:bb:f6:
                    9c:3f:57:d5:a7:93:24:c4:48:e8:3a:d1:7a:30:8a:
                    79:ab:a1:4f:59:72:01:f7:ef:34:19:85:a8:a5:92:
                    49:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:CB:53:5F:22:BB:64:EC:49:E0:AE:9B:A9:15:5B:8E:87:A7:11:BF
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3230332e302f32342d3234203d3e20323036303932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:fd:71:34:b6:5e:cf:d6:8e:bc:14:c9:9f:d9:77:0a:61:ce:
         05:bf:84:3d:34:8a:12:4a:08:c2:17:44:66:b7:89:3c:70:73:
         2f:ae:7c:58:a7:64:64:41:da:aa:00:48:34:b6:ed:cc:4a:e7:
         b6:03:e3:ae:36:8e:b9:f0:b8:97:71:0f:67:80:8d:bb:0d:b4:
         14:01:89:96:2a:77:09:44:a9:9d:da:da:5c:aa:36:19:f0:c8:
         bf:1a:85:bc:9d:32:45:98:d4:0a:31:89:a3:7d:15:dd:e8:d5:
         1c:ba:cb:d0:57:30:66:da:49:ee:92:a4:ae:41:f1:c3:90:09:
         c5:60:ee:f2:7f:d1:58:34:86:16:78:95:65:39:3c:25:24:89:
         8d:6a:be:16:3c:33:24:79:1b:ae:38:36:76:61:33:dc:44:aa:
         0c:04:0b:fe:5e:ba:3d:9c:3b:4e:46:02:de:8d:52:98:b0:85:
         bf:02:86:65:1a:67:67:f7:9d:1d:25:93:08:91:d8:6b:d1:c8:
         8a:47:c5:bd:33:5b:a0:6d:79:d9:49:81:6f:88:f0:f9:dd:97:
         fc:0e:ab:f4:e1:a7:34:55:46:7f:20:8a:e7:40:f4:61:2f:b8:
         3d:f5:bc:4d:5e:7b:97:4c:72:25:9a:93:36:cd:27:d4:3c:15:
         87:c7:1c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----