Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3230342e302f32322d3234203d3e203236353438.roa
File:                     3135372e3235342e3230342e302f32322d3234203d3e203236353438.roa (raw, json)
Hash identifier:          eS16Ti1c0MXq4pyj3c9KrBHyAs5Ug6zxJtVguSOtPC8=
Subject key identifier:   68:0E:54:AB:26:1C:29:54:D8:76:BB:7E:86:EF:6C:CF:78:F8:D1:A3
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       454BC818CFFC130286EA373CE72E12A6BB730B34
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3230342e302f32322d3234203d3e203236353438.roa
Signing time:             Fri 30 Dec 2022 19:54:20 +0000
ROA not before:           Fri 30 Dec 2022 19:49:20 +0000
ROA not after:            Fri 29 Dec 2023 19:54:20 +0000
asID:                     26548
IP address blocks:        157.254.204.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:4b:c8:18:cf:fc:13:02:86:ea:37:3c:e7:2e:12:a6:bb:73:0b:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Dec 30 19:49:20 2022 GMT
            Not After : Dec 29 19:54:20 2023 GMT
        Subject: CN=680E54AB261C2954D876BB7E86EF6CCF78F8D1A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:cc:85:03:4a:68:fa:1a:91:59:4e:d8:55:90:
                    ab:9a:cd:d3:f4:5e:91:f4:64:14:e2:b4:2b:7a:0d:
                    60:16:98:11:81:24:21:27:46:d0:9c:f1:de:95:61:
                    9f:5b:50:89:78:ec:65:a9:6f:c2:4a:0f:79:b2:ca:
                    73:bb:b2:b1:3d:d7:f3:42:19:89:8a:e7:1c:d4:89:
                    4e:32:13:7e:ed:a9:1e:cc:66:ae:a5:dc:2e:db:ea:
                    77:92:05:a8:0e:56:37:b5:7a:bb:ff:03:b2:40:7c:
                    93:18:41:bf:20:a4:04:ef:31:1e:21:f4:0d:a9:67:
                    7e:f5:f6:fd:2e:ae:0a:57:0a:e4:a9:45:18:c4:dc:
                    9f:5d:50:06:84:0d:3b:11:37:0f:63:0a:5c:22:4b:
                    0f:3f:18:39:de:55:81:cc:08:06:5c:11:fe:39:64:
                    ec:57:a7:86:36:b9:c5:32:fa:ba:99:6f:e3:ba:33:
                    5d:05:f8:20:ab:f3:c3:44:6a:84:ba:76:3c:9b:17:
                    41:b7:3f:03:10:31:4b:d5:43:10:7a:bb:9e:74:55:
                    f2:e7:79:a0:86:d0:dc:76:a2:3a:bf:21:34:e7:60:
                    f0:37:2c:c5:16:91:9f:ec:3d:67:6f:3b:ce:7f:c6:
                    2e:36:40:f5:36:3d:f3:c4:5b:71:31:56:eb:6e:a1:
                    03:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:0E:54:AB:26:1C:29:54:D8:76:BB:7E:86:EF:6C:CF:78:F8:D1:A3
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3230342e302f32322d3234203d3e203236353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:bb:d7:a6:bf:c2:f8:72:25:08:dc:95:c3:51:24:f6:ae:5e:
         37:92:bb:76:af:58:08:91:d9:5d:c7:1e:08:6f:c3:31:37:33:
         1a:ec:a5:72:6a:65:85:d5:80:a0:80:90:69:76:49:fe:ad:f3:
         89:9a:ee:97:e2:1a:f1:2a:3d:88:35:81:23:54:1f:1b:ce:f9:
         39:e6:2a:2f:58:e9:8a:03:54:7a:a1:6e:4f:fe:b3:d9:26:29:
         2e:74:52:79:75:13:0b:ce:c9:c5:91:c2:4c:8a:af:5b:03:66:
         27:41:9b:8f:20:c4:a8:6c:3d:6d:b1:a7:08:31:f4:9e:be:48:
         43:be:bd:06:37:22:e6:ea:c7:5d:cb:dd:10:a3:5e:e2:71:e4:
         34:47:60:b5:e1:32:fc:fe:15:c0:7e:34:47:da:1b:8c:30:10:
         4e:5f:63:d6:e7:46:92:2e:34:24:23:ca:fb:73:43:8e:bf:a7:
         5b:77:a3:1e:e9:32:fb:21:e7:05:48:fd:79:cc:3a:b9:8b:fb:
         cd:7c:3e:fe:9b:2d:05:c7:bf:f5:c8:3b:6d:51:b7:ed:6c:fe:
         c9:69:4f:c8:c9:8a:39:8a:84:a4:ae:87:04:fa:32:31:34:10:
         98:5d:07:77:de:54:a7:f8:b7:da:7c:7d:7b:cc:bb:2d:52:aa:
         de:ad:e2:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----