Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3231372e302f32342d3234203d3e20323037363333.roa
File:                     3135372e3235342e3231372e302f32342d3234203d3e20323037363333.roa (raw, json)
Hash identifier:          P/2d77B0ncLwHFC/FbwJkvJ/G5GEqVfG6hM2Wxm8Ds0=
Subject key identifier:   4A:04:BA:AD:DA:DB:90:76:96:58:93:15:0D:3B:14:93:66:3E:BA:BC
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       4DFD13A297B8B385419146564D62DE5B32725869
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3231372e302f32342d3234203d3e20323037363333.roa
Signing time:             Thu 13 Apr 2023 11:44:37 +0000
ROA not before:           Thu 13 Apr 2023 11:39:37 +0000
ROA not after:            Thu 11 Apr 2024 11:44:37 +0000
asID:                     207633
IP address blocks:        157.254.217.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:fd:13:a2:97:b8:b3:85:41:91:46:56:4d:62:de:5b:32:72:58:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Apr 13 11:39:37 2023 GMT
            Not After : Apr 11 11:44:37 2024 GMT
        Subject: CN=4A04BAADDADB9076965893150D3B1493663EBABC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6f:b5:ad:c0:7f:ce:ed:29:ea:a4:33:c8:cf:
                    72:dc:d3:18:c5:b2:4a:cd:92:c5:c5:e7:ed:f3:e0:
                    f4:ec:eb:5e:f4:63:33:a9:e3:91:6b:87:8c:0b:39:
                    29:dc:b9:c9:0e:82:9c:f1:dc:f1:14:bb:80:21:69:
                    d4:f1:0a:4d:86:07:3e:04:55:cd:14:7c:61:58:56:
                    e3:10:6f:46:d1:78:45:3a:7a:6e:4e:81:2a:ee:21:
                    b6:92:8d:5a:ea:f8:8d:8a:90:1c:9b:fb:d3:a9:5a:
                    7f:e0:4a:5f:70:23:59:c8:f6:b2:0d:f5:7e:5a:75:
                    32:83:cf:33:14:a8:3d:93:dd:13:ae:bf:ab:41:1f:
                    5a:3a:25:45:bf:e8:36:6b:a5:15:ee:79:14:9e:9d:
                    ed:2b:56:7e:37:e3:35:cf:f7:74:31:39:14:1b:b2:
                    cc:88:ce:d4:d4:b0:00:01:9a:85:e1:b3:73:33:94:
                    7f:04:2d:4e:3c:f7:ea:ea:68:16:7d:36:54:8c:cc:
                    1f:a2:ba:f3:90:7c:49:0d:49:18:f6:65:ce:6a:99:
                    54:16:20:c7:f5:b8:0d:c8:67:e6:5c:59:3d:8f:1f:
                    da:54:0d:26:95:c1:f5:f0:02:8b:04:66:fc:57:4b:
                    d7:27:14:99:3f:30:5d:4f:77:9a:b2:b4:c5:6a:a8:
                    53:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:04:BA:AD:DA:DB:90:76:96:58:93:15:0D:3B:14:93:66:3E:BA:BC
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3231372e302f32342d3234203d3e20323037363333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:3b:f3:10:35:47:35:aa:5d:68:b1:d8:bd:4e:18:4b:9e:78:
         f7:44:ae:79:2d:e4:4e:fd:55:63:38:0a:49:66:05:e9:7b:1c:
         5e:9d:fa:eb:d5:8b:7b:a3:72:85:c1:cf:58:33:56:1e:4a:c8:
         01:7c:f3:b7:fe:8f:ff:4c:a7:84:f7:5d:14:70:87:25:52:ff:
         25:6e:6d:fc:4c:3a:0a:a5:9b:88:02:f4:2d:cf:3b:be:b8:5e:
         96:08:ad:73:2c:4b:3d:87:32:65:59:44:c9:12:9d:1c:ae:30:
         53:32:0c:ca:da:56:12:3a:b9:10:7b:21:f3:4d:60:26:51:3a:
         df:20:68:ba:22:76:cc:53:de:bd:73:8e:fb:f5:77:79:e4:a9:
         ee:4e:e6:58:a4:44:f9:36:48:f6:6b:25:28:f5:9e:58:47:7f:
         5f:59:0a:c0:a7:a7:86:ec:04:e3:ac:a5:e0:7a:fc:61:03:5b:
         08:72:82:99:1b:02:d3:b9:19:c8:8a:2f:53:09:ed:4b:a2:84:
         41:a2:03:88:a6:f3:97:3a:0f:b7:2d:2e:68:51:98:77:38:60:
         62:56:74:09:db:a0:8d:ab:b1:34:51:7d:c4:e9:36:f7:57:f6:
         1e:62:0f:90:6d:04:30:0b:47:09:65:0c:c3:4b:30:93:94:88:
         be:46:5b:30
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgIUTf0Tope4s4VBkUZWTWLeWzJyWGkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4
NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjMwNDEzMTEzOTM3WhcNMjQwNDExMTE0NDM3
WjAzMTEwLwYDVQQDEyg0QTA0QkFBRERBREI5MDc2OTY1ODkzMTUwRDNCMTQ5MzY2
M0VCQUJDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwW+1rcB/zu0p
6qQzyM9y3NMYxbJKzZLFxeft8+D07Ote9GMzqeORa4eMCzkp3LnJDoKc8dzxFLuA
IWnU8QpNhgc+BFXNFHxhWFbjEG9G0XhFOnpuToEq7iG2ko1a6viNipAcm/vTqVp/
4EpfcCNZyPayDfV+WnUyg88zFKg9k90Trr+rQR9aOiVFv+g2a6UV7nkUnp3tK1Z+
N+M1z/d0MTkUG7LMiM7U1LAAAZqF4bNzM5R/BC1OPPfq6mgWfTZUjMwforrzkHxJ
DUkY9mXOaplUFiDH9bgNyGfmXFk9jx/aVA0mlcH18AKLBGb8V0vXJxSZPzBdT3ea
srTFaqhTdwIDAQABo4ICtjCCArIwHQYDVR0OBBYEFEoEuq3a25B2lliTFQ07FJNm
Prq8MB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv
RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3
ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTY0
OTBmNDQ1M2I3Yi8wLzMxMzUzNzJlMzIzNTM0MmUzMjMxMzcyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMjMwMzczNjMzMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACd/tkwDQYJKoZIhvcN
AQELBQADggEBABg78xA1RzWqXWix2L1OGEueePdErnkt5E79VWM4CklmBel7HF6d
+uvVi3ujcoXBz1gzVh5KyAF887f+j/9Mp4T3XRRwhyVS/yVubfxMOgqlm4gC9C3P
O764XpYIrXMsSz2HMmVZRMkSnRyuMFMyDMraVhI6uRB7IfNNYCZROt8gaLoidsxT
3r1zjvv1d3nkqe5O5likRPk2SPZrJSj1nlhHf19ZCsCnp4bsBOOspeB6/GEDWwhy
gpkbAtO5GciKL1MJ7UuihEGiA4im85c6D7ctLmhRmHc4YGJWdAnboI2rsTRRfcTp
NvdX9h5iD5BtBDALRwllDMNLMJOUiL5GWzA=
-----END CERTIFICATE-----