Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3231392e302f32342d3234203d3e203632323430.roa
File:                     3135372e3235342e3231392e302f32342d3234203d3e203632323430.roa (raw, json)
Hash identifier:          k2Jr+3nHZu0flfYHBiGxKGymGGNQzVzzf+gHCEfJjiY=
Subject key identifier:   C3:17:8C:E4:43:51:50:0A:FC:D7:2E:4F:34:B2:2A:3E:3A:41:5B:F5
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       60EDFBEB21D4A940C4BB1FC54977C6D73F94D2BE
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3231392e302f32342d3234203d3e203632323430.roa
Signing time:             Tue 14 Feb 2023 07:06:33 +0000
ROA not before:           Tue 14 Feb 2023 07:01:33 +0000
ROA not after:            Tue 13 Feb 2024 07:06:33 +0000
asID:                     62240
IP address blocks:        157.254.219.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:ed:fb:eb:21:d4:a9:40:c4:bb:1f:c5:49:77:c6:d7:3f:94:d2:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Feb 14 07:01:33 2023 GMT
            Not After : Feb 13 07:06:33 2024 GMT
        Subject: CN=C3178CE44351500AFCD72E4F34B22A3E3A415BF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6a:d3:3b:c1:e9:ae:70:cb:01:94:48:39:11:
                    db:ff:d2:50:76:8c:ce:f1:18:15:15:ca:e8:24:f4:
                    59:f8:12:82:07:9a:57:c9:23:6d:11:03:99:6a:06:
                    93:07:9b:77:23:17:a7:55:b2:fb:67:a7:20:fb:08:
                    b6:4c:79:eb:c9:0c:4f:c7:a5:4c:9d:7a:aa:83:c3:
                    49:9e:a3:37:d1:63:9b:36:d3:0a:97:b9:eb:5b:0b:
                    b2:cf:55:7e:00:1d:61:87:68:5d:6b:73:65:60:fb:
                    69:96:8a:93:55:9d:74:f5:c2:21:dd:26:15:8f:f9:
                    16:08:a1:db:5a:90:2a:9e:88:5b:0d:9e:91:6b:75:
                    10:b8:d4:2a:37:4e:51:a9:5e:4f:ab:c1:ea:44:05:
                    db:9a:ab:c6:40:7e:9b:5f:7a:4c:dd:24:7a:d5:f3:
                    2b:d5:03:da:d9:92:54:67:1d:36:17:27:a1:72:1f:
                    f8:2f:7e:5f:a8:ac:31:13:87:37:68:be:7b:60:2c:
                    af:33:6f:87:83:9a:18:ab:dd:f2:74:b0:96:f6:5f:
                    ef:a9:93:46:0f:55:af:7f:3d:e6:5e:9d:db:d8:84:
                    60:76:0e:05:de:11:b7:db:53:41:57:e0:41:c7:96:
                    87:94:6b:be:a6:81:e7:2c:ee:da:91:e4:84:e1:a9:
                    c5:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:17:8C:E4:43:51:50:0A:FC:D7:2E:4F:34:B2:2A:3E:3A:41:5B:F5
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3231392e302f32342d3234203d3e203632323430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:26:d7:03:1d:68:da:d8:51:7a:1b:4e:40:8a:35:b6:a4:67:
         e0:1e:8a:bb:46:69:df:08:d3:8f:d4:12:d7:df:a6:dd:28:e3:
         06:4c:98:0e:76:fa:c2:e1:07:76:6b:a1:3f:d5:e7:82:df:64:
         66:25:d3:0c:4f:fe:2a:90:4a:61:8f:a5:49:09:33:fc:bb:61:
         f4:d1:cb:f3:aa:2c:d9:e3:07:4c:10:3a:19:b0:f1:57:ee:8a:
         71:f6:c9:0d:dd:ce:ce:00:31:29:76:64:5e:b7:da:1c:96:e9:
         84:0c:d6:b8:16:77:da:96:27:c3:03:f0:f2:e2:71:0a:81:71:
         5b:17:a6:70:9f:e2:4f:4b:1e:63:4a:20:bd:30:20:ce:2a:db:
         f1:4f:e1:9e:12:3a:99:a8:9a:10:66:6d:e9:1e:0a:5f:35:a5:
         bc:5c:24:0b:ed:6b:46:5e:56:92:84:4b:34:97:54:9d:ea:80:
         73:41:ca:10:ba:2f:ab:a8:ad:d1:83:ae:d5:46:72:fa:1a:f8:
         f9:4b:c1:c3:04:2f:50:6a:2b:0e:6c:80:24:dc:cf:d7:b3:1d:
         bb:07:fa:9a:28:56:62:3a:c9:28:87:cc:46:14:ed:52:60:1f:
         60:e8:58:7a:5a:6c:b0:6d:11:6d:a2:bc:a1:28:8b:74:4c:26:
         ff:fc:a0:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----