Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3232302e302f32342d3234203d3e20323132363639.roa
File:                     3135372e3235342e3232302e302f32342d3234203d3e20323132363639.roa (raw, json)
Hash identifier:          Umy7CELcom4jyOBWVOs+HrSYuCr8ZV/7LDNlTVcKX2Y=
Subject key identifier:   E9:71:F9:C4:8B:97:37:56:0A:18:E3:B7:9C:3A:4C:48:1D:6B:5B:1B
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       0C065CFDF5E1B947F77014BA67E798E4F507A4B9
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3232302e302f32342d3234203d3e20323132363639.roa
Signing time:             Fri 30 Dec 2022 19:54:20 +0000
ROA not before:           Fri 30 Dec 2022 19:49:20 +0000
ROA not after:            Fri 29 Dec 2023 19:54:20 +0000
asID:                     212669
IP address blocks:        157.254.220.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:06:5c:fd:f5:e1:b9:47:f7:70:14:ba:67:e7:98:e4:f5:07:a4:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Dec 30 19:49:20 2022 GMT
            Not After : Dec 29 19:54:20 2023 GMT
        Subject: CN=E971F9C48B9737560A18E3B79C3A4C481D6B5B1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:69:b9:d4:49:93:8d:14:c7:63:eb:3e:ff:26:
                    81:6d:33:95:1b:9c:40:43:2c:4a:e2:aa:d9:0f:dd:
                    64:6c:e0:e9:75:38:26:15:65:3c:51:24:21:b0:6d:
                    67:b2:a1:f2:2c:5a:c1:57:eb:0d:13:37:5c:ec:66:
                    73:05:7b:d1:6e:df:cb:d7:01:2f:90:71:c9:33:7f:
                    5e:67:6a:03:7b:32:93:e5:64:1c:d6:e4:89:79:7b:
                    02:80:84:2c:6e:35:06:1d:67:5b:41:22:7f:22:51:
                    e8:4d:c1:6e:0c:8e:48:a0:82:ef:fa:cd:0e:d8:11:
                    0d:25:1b:58:4a:67:f5:fc:98:af:2f:d0:72:a5:d7:
                    7a:04:f6:90:19:46:20:da:f3:6d:2d:86:50:95:54:
                    46:89:06:f4:84:1b:a5:58:b6:4d:d9:b3:8e:67:9b:
                    2c:88:1e:f3:c9:ca:e3:c8:9b:cf:34:98:c0:d2:cc:
                    a2:6c:5f:bf:fd:3a:3e:d1:4d:cf:d0:c1:89:9c:a0:
                    99:d0:d1:d3:5c:b8:80:56:93:39:a7:98:59:4c:05:
                    1d:e4:32:96:6f:e1:fe:54:aa:b5:88:b2:61:5a:71:
                    27:5e:49:9b:cd:75:ad:b3:d0:84:fb:f0:c6:82:72:
                    c7:ea:27:9a:46:7a:45:20:fe:23:1d:5e:6b:92:8c:
                    9d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:71:F9:C4:8B:97:37:56:0A:18:E3:B7:9C:3A:4C:48:1D:6B:5B:1B
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3232302e302f32342d3234203d3e20323132363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:88:49:7b:a4:6c:80:26:ae:58:8b:6d:62:33:ea:92:d9:d1:
         88:2e:4a:f0:9d:42:1d:95:07:79:8f:e4:3f:75:d0:8d:48:cb:
         96:4e:be:ae:35:b6:3b:5f:34:3f:9e:2a:72:9e:63:63:06:45:
         35:62:3f:01:ec:65:76:8d:52:04:a2:b6:b4:54:a1:45:54:4b:
         14:f4:cd:e8:0f:d1:6c:3f:e8:7c:60:57:4d:95:59:59:78:57:
         ed:f7:bc:32:b5:b3:ec:18:9e:ed:cb:d6:2f:f5:26:73:68:8f:
         5a:9c:70:b5:07:4e:01:c7:b1:4d:62:f0:2c:da:55:88:60:68:
         4f:b1:7c:11:0b:d4:8f:1d:37:33:0f:f7:8b:bf:2a:e3:c2:63:
         01:bf:b0:15:f5:a7:85:e9:c4:1b:54:61:9a:41:ef:e6:c8:cd:
         c8:c8:7f:a3:8d:ec:bc:18:b8:6e:f1:4e:9c:2d:77:ea:9b:74:
         9a:87:4e:a9:50:2f:d4:a6:dc:cf:f8:96:6a:d9:b6:80:d2:88:
         60:44:12:36:4d:fe:fd:e1:cc:4e:3d:81:5b:28:b8:eb:7d:06:
         50:b4:cd:d8:01:0a:f2:60:cb:c3:0d:34:e5:3f:cd:37:5f:71:
         4f:e3:05:fb:15:ed:64:dc:ae:c8:1b:77:1b:a0:4b:22:09:f0:
         ce:93:66:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----