Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3231362e302f32342d3234203d3e20323037323739.roa
File:                     3135372e3235342e3231362e302f32342d3234203d3e20323037323739.roa (raw, json)
Hash identifier:          DtgisYdNdu83LGjWygNlPqmbNhzLxum7BPMkV95bovs=
Subject key identifier:   F8:CF:A8:C2:E5:C8:EB:64:97:9E:13:80:C6:D9:0E:43:45:5A:34:5A
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       71536D9FF40CCE2BF8E327278A3A65BEF47EBC77
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3231362e302f32342d3234203d3e20323037323739.roa
Signing time:             Fri 30 Dec 2022 19:54:20 +0000
ROA not before:           Fri 30 Dec 2022 19:49:20 +0000
ROA not after:            Fri 29 Dec 2023 19:54:20 +0000
asID:                     207279
IP address blocks:        157.254.216.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:53:6d:9f:f4:0c:ce:2b:f8:e3:27:27:8a:3a:65:be:f4:7e:bc:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Dec 30 19:49:20 2022 GMT
            Not After : Dec 29 19:54:20 2023 GMT
        Subject: CN=F8CFA8C2E5C8EB64979E1380C6D90E43455A345A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:05:e1:0a:75:63:85:10:3b:55:c2:c6:a3:dd:
                    60:bf:c1:3e:5e:91:41:dd:1a:53:70:ec:67:55:3d:
                    66:86:2f:8c:e2:bd:dc:b1:8e:6d:4c:eb:2e:63:c4:
                    80:ea:66:e1:fd:1c:9e:0a:ba:8e:75:35:a5:0c:97:
                    ab:b6:63:c1:75:1f:81:9b:f9:34:80:8f:d1:c5:2b:
                    5a:81:5d:03:a2:75:bd:a9:4f:3c:17:00:87:8a:17:
                    20:9c:c5:c1:78:83:6e:7d:62:a7:1b:8b:ff:44:a4:
                    a1:b1:3a:80:d5:79:4c:a9:cc:bb:89:bf:cc:41:9d:
                    28:83:4c:a9:43:c8:d5:10:1e:3f:b5:a5:e2:05:ba:
                    ee:77:e2:b7:9d:e2:14:26:9a:7a:c3:b3:63:bd:e9:
                    6c:4d:ca:8d:60:35:9a:b7:b7:0b:d6:62:40:22:ed:
                    69:0b:26:50:1f:ba:80:95:96:87:eb:5c:71:8c:5f:
                    fe:87:55:9a:93:c3:d4:07:49:72:90:65:6a:73:69:
                    52:be:93:84:a7:fb:41:da:32:2a:c0:d8:46:63:82:
                    5a:b5:6f:e3:56:17:2d:fd:9b:99:2d:43:e0:98:5c:
                    57:d7:0c:7a:42:52:41:52:c1:40:3c:37:95:ac:7c:
                    96:bc:5c:ff:a7:1c:cd:8f:a4:26:4e:93:00:bc:88:
                    55:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:CF:A8:C2:E5:C8:EB:64:97:9E:13:80:C6:D9:0E:43:45:5A:34:5A
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3231362e302f32342d3234203d3e20323037323739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:07:ce:4f:f0:77:b2:7d:cf:ad:78:c2:76:94:1c:97:60:68:
         43:8a:3f:ee:60:db:d5:7b:22:ba:31:73:7e:72:34:3c:18:1b:
         54:ef:31:70:38:14:82:0c:04:99:e9:25:4f:78:08:32:84:1d:
         e3:b5:25:6a:3e:c2:26:49:6d:06:48:f0:40:04:9c:39:e2:e9:
         e5:ae:7d:04:e6:4f:ad:4d:04:62:6d:21:11:69:2d:6a:2f:2c:
         3f:ba:4c:f0:23:35:08:3b:28:31:3b:73:b2:34:a2:3d:3e:65:
         ff:1d:af:4e:24:da:74:ba:5c:88:3b:b8:99:a1:e3:cb:9e:d2:
         82:56:a4:cf:f8:5f:d1:c9:ed:f6:0f:e9:1f:a5:6d:6f:34:68:
         60:da:4c:26:fe:49:d7:e0:ba:5f:86:41:d5:34:4a:a7:50:9f:
         85:45:e5:1e:87:54:dd:38:82:ae:f5:0e:93:84:04:d4:55:1f:
         43:6a:e8:54:29:d8:81:85:02:ad:8c:01:73:9c:64:e8:78:65:
         3c:b0:4b:8e:1e:14:cb:4d:b5:5f:d7:9d:17:1e:3e:47:c5:38:
         8a:b3:c8:a8:87:bd:35:c7:68:3e:1d:e9:9e:3a:d9:20:b2:3c:
         1d:ff:a4:f4:55:98:b5:e9:59:65:12:ae:1c:e4:03:f0:f2:27:
         57:5f:db:18
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgIUcVNtn/QMziv44ycnijplvvR+vHcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4
NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjIxMjMwMTk0OTIwWhcNMjMxMjI5MTk1NDIw
WjAzMTEwLwYDVQQDEyhGOENGQThDMkU1QzhFQjY0OTc5RTEzODBDNkQ5MEU0MzQ1
NUEzNDVBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4gXhCnVjhRA7
VcLGo91gv8E+XpFB3RpTcOxnVT1mhi+M4r3csY5tTOsuY8SA6mbh/RyeCrqOdTWl
DJertmPBdR+Bm/k0gI/RxStagV0DonW9qU88FwCHihcgnMXBeINufWKnG4v/RKSh
sTqA1XlMqcy7ib/MQZ0og0ypQ8jVEB4/taXiBbrud+K3neIUJpp6w7NjvelsTcqN
YDWat7cL1mJAIu1pCyZQH7qAlZaH61xxjF/+h1Wak8PUB0lykGVqc2lSvpOEp/tB
2jIqwNhGY4JatW/jVhct/ZuZLUPgmFxX1wx6QlJBUsFAPDeVrHyWvFz/pxzNj6Qm
TpMAvIhV/wIDAQABo4ICtjCCArIwHQYDVR0OBBYEFPjPqMLlyOtkl54TgMbZDkNF
WjRaMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv
RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3
ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTY0
OTBmNDQ1M2I3Yi8wLzMxMzUzNzJlMzIzNTM0MmUzMjMxMzYyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMjMwMzczMjM3Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACd/tgwDQYJKoZIhvcN
AQELBQADggEBAFYHzk/wd7J9z614wnaUHJdgaEOKP+5g29V7Iroxc35yNDwYG1Tv
MXA4FIIMBJnpJU94CDKEHeO1JWo+wiZJbQZI8EAEnDni6eWufQTmT61NBGJtIRFp
LWovLD+6TPAjNQg7KDE7c7I0oj0+Zf8dr04k2nS6XIg7uJmh48ue0oJWpM/4X9HJ
7fYP6R+lbW80aGDaTCb+Sdfgul+GQdU0SqdQn4VF5R6HVN04gq71DpOEBNRVH0Nq
6FQp2IGFAq2MAXOcZOh4ZTywS44eFMtNtV/XnRcePkfFOIqzyKiHvTXHaD4d6Z46
2SCyPB3/pPRVmLXpWWUSrhzkA/DyJ1df2xg=
-----END CERTIFICATE-----