Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3232302e302f32342d3234203d3e20323132333834.roa
File:                     3135372e3235342e3232302e302f32342d3234203d3e20323132333834.roa (raw, json)
Hash identifier:          ksQ7ROAAiV0x3JDUsLcNhJLDQpc/T3/yzgdvyhi4CTg=
Subject key identifier:   5F:5C:11:7B:EA:75:6C:EA:DD:E3:53:D7:19:CF:E1:9F:E0:EE:1C:73
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       0B781975E1F49D8FBAF5F537E8902B1DCEADABEE
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3232302e302f32342d3234203d3e20323132333834.roa
Signing time:             Tue 31 Jan 2023 13:01:47 +0000
ROA not before:           Tue 31 Jan 2023 12:56:47 +0000
ROA not after:            Tue 30 Jan 2024 13:01:47 +0000
asID:                     212384
IP address blocks:        157.254.220.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:78:19:75:e1:f4:9d:8f:ba:f5:f5:37:e8:90:2b:1d:ce:ad:ab:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Jan 31 12:56:47 2023 GMT
            Not After : Jan 30 13:01:47 2024 GMT
        Subject: CN=5F5C117BEA756CEADDE353D719CFE19FE0EE1C73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f6:79:4a:c1:d7:45:b6:c2:ff:6a:7d:ff:59:
                    6d:60:2e:cc:5a:c4:6a:42:fa:ee:28:bd:64:68:2d:
                    37:d0:ec:db:59:ed:17:98:b8:01:52:17:a1:ef:0f:
                    1e:cf:0d:42:ad:ee:c8:87:14:e6:7c:ff:85:06:37:
                    be:55:85:91:81:4e:fc:3c:fb:e7:87:1e:b0:90:75:
                    10:4d:81:e3:54:24:ac:81:a2:73:25:29:d2:ba:43:
                    de:2c:28:1b:15:53:da:2e:a1:c3:e0:13:12:d9:72:
                    78:3d:75:d9:38:b9:9b:d9:96:9c:65:71:8e:b0:a7:
                    d5:94:dd:14:4e:c1:a0:3e:84:8a:36:15:4c:36:cd:
                    dd:e7:02:14:e5:48:88:e6:e8:80:44:1e:b5:aa:c5:
                    98:4e:e3:fc:d6:e1:c6:1c:06:41:51:12:c5:77:cb:
                    17:a3:37:b5:a2:a6:0c:f7:ea:10:15:ee:0c:2c:b5:
                    06:45:ac:c6:b5:f2:9b:53:98:4e:56:f2:ac:dd:e5:
                    45:4a:88:26:d2:8b:3c:5d:f6:b4:64:56:b3:b6:5f:
                    d5:12:ba:b9:f2:5f:7d:f6:28:86:45:13:64:ee:c4:
                    85:0a:fb:c9:ed:00:81:cf:19:01:76:60:83:d4:4a:
                    37:2f:97:0f:23:27:27:50:e7:38:aa:c1:77:a0:18:
                    c7:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:5C:11:7B:EA:75:6C:EA:DD:E3:53:D7:19:CF:E1:9F:E0:EE:1C:73
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3232302e302f32342d3234203d3e20323132333834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:85:8f:b9:93:2e:f2:d9:49:fe:f9:1d:e5:55:29:23:e9:2d:
         d1:34:ea:01:ac:58:99:14:1e:fb:98:1b:44:b2:ee:c8:33:ec:
         5f:a9:82:bc:07:95:e2:26:1a:24:11:bf:25:d2:7a:f9:99:a7:
         d7:8f:b9:4e:d2:f0:ef:95:45:99:dd:3a:65:d3:7c:b3:0e:dc:
         a2:23:5b:cf:a3:50:83:9b:5a:84:fc:49:95:d3:f1:18:8a:fb:
         81:e9:cd:ec:92:dc:c4:54:76:b0:44:36:b4:28:14:60:06:1b:
         72:69:75:33:91:01:5a:24:29:b1:cc:a5:bc:04:d5:e2:78:c0:
         cb:0b:24:b7:45:5a:4d:fc:dc:a7:09:48:19:7c:e4:91:d1:9d:
         2b:44:36:96:69:9c:9e:8d:5a:33:62:31:09:60:14:a8:43:f6:
         4e:15:8a:f8:ea:19:b8:eb:e6:78:8f:94:39:32:59:bd:42:22:
         6b:94:10:5d:fe:0d:e2:93:d3:1b:b1:5b:49:84:05:a5:d0:6a:
         7e:4f:5f:77:4e:10:9a:04:ae:e9:bd:11:41:8f:e7:c6:9b:fe:
         0d:0b:89:3a:29:b9:33:f7:66:da:9b:b2:7a:35:3d:2c:a4:55:
         02:af:a5:8b:2f:5b:ec:53:bc:20:cc:8b:e6:85:e0:0b:4d:52:
         fd:3e:07:15
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgIUC3gZdeH0nY+69fU36JArHc6tq+4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4
NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjMwMTMxMTI1NjQ3WhcNMjQwMTMwMTMwMTQ3
WjAzMTEwLwYDVQQDEyg1RjVDMTE3QkVBNzU2Q0VBRERFMzUzRDcxOUNGRTE5RkUw
RUUxQzczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvZ5SsHXRbbC
/2p9/1ltYC7MWsRqQvruKL1kaC030OzbWe0XmLgBUheh7w8ezw1Cre7IhxTmfP+F
Bje+VYWRgU78PPvnhx6wkHUQTYHjVCSsgaJzJSnSukPeLCgbFVPaLqHD4BMS2XJ4
PXXZOLmb2ZacZXGOsKfVlN0UTsGgPoSKNhVMNs3d5wIU5UiI5uiARB61qsWYTuP8
1uHGHAZBURLFd8sXoze1oqYM9+oQFe4MLLUGRazGtfKbU5hOVvKs3eVFSogm0os8
Xfa0ZFaztl/VErq58l999iiGRRNk7sSFCvvJ7QCBzxkBdmCD1Eo3L5cPIycnUOc4
qsF3oBjH4QIDAQABo4ICtjCCArIwHQYDVR0OBBYEFF9cEXvqdWzq3eNT1xnP4Z/g
7hxzMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv
RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3
ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTY0
OTBmNDQ1M2I3Yi8wLzMxMzUzNzJlMzIzNTM0MmUzMjMyMzAyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMjMxMzIzMzM4MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACd/twwDQYJKoZIhvcN
AQELBQADggEBAHaFj7mTLvLZSf75HeVVKSPpLdE06gGsWJkUHvuYG0Sy7sgz7F+p
grwHleImGiQRvyXSevmZp9ePuU7S8O+VRZndOmXTfLMO3KIjW8+jUIObWoT8SZXT
8RiK+4HpzeyS3MRUdrBENrQoFGAGG3JpdTORAVokKbHMpbwE1eJ4wMsLJLdFWk38
3KcJSBl85JHRnStENpZpnJ6NWjNiMQlgFKhD9k4VivjqGbjr5niPlDkyWb1CImuU
EF3+DeKT0xuxW0mEBaXQan5PX3dOEJoErum9EUGP58ab/g0LiTopuTP3Ztqbsno1
PSykVQKvpYsvW+xTvCDMi+aF4AtNUv0+BxU=
-----END CERTIFICATE-----