Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3231372e302f32342d3234203d3e20323037323739.roa
File:                     3135372e3235342e3231372e302f32342d3234203d3e20323037323739.roa (raw, json)
Hash identifier:          ls1v9HaeBXL0PKuTpZYuYxi4zKN0SeGTaltYfIg4b+Y=
Subject key identifier:   60:B3:60:2C:AC:99:A3:38:AB:46:6E:05:69:88:DD:46:CB:E3:38:36
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       7D4FD21DDD2F04605C45DDFCD6733BE1833AC04D
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3231372e302f32342d3234203d3e20323037323739.roa
Signing time:             Fri 30 Dec 2022 19:54:20 +0000
ROA not before:           Fri 30 Dec 2022 19:49:20 +0000
ROA not after:            Fri 29 Dec 2023 19:54:20 +0000
asID:                     207279
IP address blocks:        157.254.217.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:4f:d2:1d:dd:2f:04:60:5c:45:dd:fc:d6:73:3b:e1:83:3a:c0:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Dec 30 19:49:20 2022 GMT
            Not After : Dec 29 19:54:20 2023 GMT
        Subject: CN=60B3602CAC99A338AB466E056988DD46CBE33836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a5:df:bb:06:cb:e6:8a:0f:da:fc:d3:b6:53:
                    ba:72:78:f4:33:ea:28:93:1d:87:b8:92:73:03:07:
                    2e:56:d6:2e:35:08:fe:47:53:01:88:33:fd:ff:6d:
                    59:b5:24:54:1b:b8:28:b2:37:f6:f4:10:e3:09:f6:
                    f4:a1:10:d3:4f:73:5c:55:a8:d5:3e:1e:ed:7c:91:
                    d9:2a:cc:08:29:4c:8b:e6:30:6f:ee:40:69:9a:3c:
                    e8:2a:ff:1c:2e:b8:4e:e4:e1:0c:b0:09:39:08:1b:
                    29:14:29:05:e5:18:2d:4b:41:63:72:26:ec:fd:b1:
                    9d:98:2b:7d:73:bb:f2:3a:3d:ae:bd:fd:b8:d0:17:
                    a7:7c:23:b5:fc:90:12:8d:00:7f:0e:9e:4c:19:f4:
                    51:4c:2c:97:ad:f1:29:1b:f1:f0:da:0b:8a:65:6b:
                    b0:23:94:c2:f4:5b:e1:52:b2:ba:b7:2f:b0:de:12:
                    6d:50:a7:f0:e0:7a:12:96:4f:29:51:c4:52:ef:47:
                    d5:b4:e3:7d:1f:89:c9:bf:2c:b4:e8:10:ca:35:ce:
                    1c:d6:da:49:c0:75:df:e5:a5:4f:7e:e8:b3:d3:f5:
                    c0:5e:3d:38:54:0f:5b:18:0b:f2:6f:49:6e:77:8e:
                    44:b8:8e:d3:f7:fe:41:5b:80:5b:18:ce:cf:da:c1:
                    b4:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:B3:60:2C:AC:99:A3:38:AB:46:6E:05:69:88:DD:46:CB:E3:38:36
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3231372e302f32342d3234203d3e20323037323739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:b6:8f:8e:43:f0:e0:e6:6e:54:95:01:00:67:9f:66:6e:98:
         54:ba:4b:ae:91:bf:9b:68:a1:7a:1f:a3:f9:63:dd:e8:57:7f:
         6d:2a:3e:79:a1:25:b0:ce:11:52:79:f3:4b:d5:e7:d2:ce:06:
         a1:66:30:35:d7:41:d4:0f:37:84:b8:0c:c3:a0:bc:5e:7c:7f:
         a9:f1:1c:43:0e:f2:d8:3e:f7:cb:70:2a:1a:97:5c:46:c5:8f:
         c6:6a:da:c9:f4:13:48:7a:9b:8c:3c:8d:da:e9:c6:a0:a5:04:
         e6:3b:56:48:21:de:30:da:7c:7e:e7:6e:d6:3a:8d:06:36:df:
         91:05:dc:7d:52:f9:74:b0:4d:6b:e9:38:95:d9:92:75:f3:8c:
         28:52:3a:13:87:d8:2d:1d:60:83:63:25:3a:26:9f:02:36:11:
         7d:bc:cd:0c:9b:fb:bb:6c:85:34:db:cf:4c:bc:10:8f:86:79:
         9d:69:b8:93:62:e3:c2:55:52:8c:88:8f:ac:c5:73:85:31:7f:
         d4:04:25:ab:20:9b:8b:c3:a1:df:03:47:12:95:fe:dc:cc:0f:
         0c:36:73:a0:17:b9:81:e9:1c:a3:25:ef:49:97:af:05:62:c8:
         62:3e:52:0a:ae:e5:02:23:a0:da:19:9c:67:ec:f9:85:fa:d7:
         58:f7:b1:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----