Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3232322e302f32342d3234203d3e203631333137.roa
File:                     3135372e3235342e3232322e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          +QL3FpcMswQYvhUvNZbHaTebvqQ0Il8/AVO3mbkOc9U=
Subject key identifier:   99:03:02:9D:4B:BF:E1:0A:75:BE:AC:0E:1E:CD:38:78:EF:06:80:E1
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       63089E1E29D6CC83EF70B9A08B1CB3CC54A861C1
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3232322e302f32342d3234203d3e203631333137.roa
Signing time:             Fri 30 Dec 2022 19:54:21 +0000
ROA not before:           Fri 30 Dec 2022 19:49:21 +0000
ROA not after:            Fri 29 Dec 2023 19:54:21 +0000
asID:                     61317
IP address blocks:        157.254.222.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:08:9e:1e:29:d6:cc:83:ef:70:b9:a0:8b:1c:b3:cc:54:a8:61:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Dec 30 19:49:21 2022 GMT
            Not After : Dec 29 19:54:21 2023 GMT
        Subject: CN=9903029D4BBFE10A75BEAC0E1ECD3878EF0680E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:fe:ac:4d:07:af:3f:74:d6:56:fb:27:3d:7d:
                    f9:7c:aa:e2:fa:65:92:4d:0a:6e:cd:26:cf:8a:b1:
                    e9:91:b8:95:e3:ef:b7:24:89:98:aa:fa:a8:b6:ad:
                    6b:dc:92:63:65:e9:6c:9e:d9:bf:29:f9:da:92:6c:
                    a9:86:cb:a0:84:4c:34:73:19:c3:b3:fa:65:35:de:
                    63:5d:54:c9:1e:e2:95:2a:a1:08:97:3a:02:f2:f0:
                    6e:e5:5e:3b:7c:f7:8c:bb:1f:0e:f6:01:29:fd:68:
                    cb:82:2f:b1:b3:14:d8:32:f4:d9:c5:a9:98:60:22:
                    45:15:e6:db:45:98:74:c2:7e:5e:41:36:bb:cb:19:
                    b6:68:3e:00:35:e9:1d:94:6a:cf:61:c3:17:2b:79:
                    ea:91:81:57:b0:b9:8e:b0:21:d3:17:48:7b:14:5d:
                    cd:40:49:b0:b8:c6:9f:64:a7:c8:9c:3c:86:92:be:
                    fa:70:fb:79:07:a5:14:ee:1f:51:af:f7:07:99:ef:
                    a1:a9:4f:b1:5c:65:cd:ea:23:08:59:28:3d:34:07:
                    8d:a1:88:0a:ba:b2:b1:12:96:ed:66:d6:de:e4:3f:
                    6f:69:3b:67:ba:19:88:16:37:c3:6e:65:ab:04:55:
                    8b:dc:b1:d6:61:fb:a6:13:bf:7a:14:bb:f0:11:a6:
                    3e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:03:02:9D:4B:BF:E1:0A:75:BE:AC:0E:1E:CD:38:78:EF:06:80:E1
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3232322e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:a9:53:9f:c2:67:ba:59:c0:13:14:82:47:68:58:0d:cf:cd:
         18:d0:a3:ac:0c:94:05:80:5d:e6:67:5d:c7:4b:b3:a2:b5:46:
         4d:a8:e3:4f:8d:95:ec:17:d6:72:84:5d:4e:88:d9:05:06:9d:
         50:38:bb:3d:d3:b0:77:63:7b:6f:8f:75:fd:b7:83:f5:7e:76:
         d3:90:9b:73:36:da:ee:89:f6:27:50:16:0e:c6:f8:0f:68:5f:
         6d:60:27:42:01:17:71:8a:61:1f:ea:cc:48:2d:a9:25:f2:e1:
         b8:da:ae:93:60:b4:b7:cd:e3:68:3d:a9:b4:ee:99:b3:1f:4f:
         ca:b4:fc:6e:8e:71:63:1b:78:e2:03:15:5f:f3:26:5f:8c:cb:
         78:16:6f:6a:e5:91:ac:90:d3:a5:aa:76:f6:74:4b:b8:78:25:
         d6:44:55:b5:d4:f5:98:c6:d1:98:f0:2a:65:3e:63:6f:01:aa:
         2e:52:f0:2b:e4:44:75:1b:e3:3b:f3:b9:21:9d:93:85:9a:53:
         04:0c:de:05:35:22:01:46:c9:ff:3e:60:d7:66:0a:bb:87:b4:
         c0:b3:05:5a:b5:f3:0f:95:84:ba:57:c8:d9:0b:69:8f:67:04:
         86:b8:dd:99:e2:d3:72:02:4f:dd:28:fe:32:1a:b1:55:a3:86:
         42:89:39:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----