Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3232352e302f32342d3234203d3e20313530333033.roa
File:                     3135372e3235342e3232352e302f32342d3234203d3e20313530333033.roa (raw, json)
Hash identifier:          L8jAvnN0tEf+znWyhNTp6V81BAybnVuj2ACOBlG8Deg=
Subject key identifier:   24:56:74:62:06:38:90:19:8B:7F:4A:9C:EA:36:B5:A4:ED:A4:2A:9B
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       79BD81B06CD2C6CF05483BE09ECD898077F36C08
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3232352e302f32342d3234203d3e20313530333033.roa
Signing time:             Tue 14 Mar 2023 18:03:25 +0000
ROA not before:           Tue 14 Mar 2023 17:58:25 +0000
ROA not after:            Tue 12 Mar 2024 18:03:25 +0000
asID:                     150303
IP address blocks:        157.254.225.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:bd:81:b0:6c:d2:c6:cf:05:48:3b:e0:9e:cd:89:80:77:f3:6c:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Mar 14 17:58:25 2023 GMT
            Not After : Mar 12 18:03:25 2024 GMT
        Subject: CN=24567462063890198B7F4A9CEA36B5A4EDA42A9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c3:4a:37:dc:27:2c:86:9f:95:ef:be:7b:b4:
                    8a:35:df:98:e9:47:5c:39:2d:a5:02:cb:be:10:28:
                    8f:2f:47:93:42:74:f5:d8:f2:f6:ab:2c:1a:38:63:
                    67:a1:1a:18:d4:d7:f3:b0:8b:83:f1:27:2b:83:fb:
                    0e:ee:dd:95:33:fd:84:bf:04:0c:56:c5:66:39:88:
                    3a:25:ee:fd:d4:f0:39:71:ac:43:6c:9f:04:70:a0:
                    1f:2b:54:1a:91:2f:15:aa:ec:32:e3:5b:c6:40:ae:
                    38:2b:ee:88:54:5f:0b:65:a4:79:93:f7:d3:e0:0d:
                    b3:74:0f:0c:cc:32:19:a9:bc:3e:91:a9:65:b6:ab:
                    c7:d7:06:fe:96:fa:24:8d:73:a8:cc:84:0c:8a:6a:
                    20:a3:47:29:7d:40:2e:b1:56:c1:78:08:9d:07:64:
                    e8:f9:ea:16:4c:6f:66:20:cf:db:f5:69:7c:5b:66:
                    e2:56:46:56:d4:e2:86:34:3c:0d:28:26:fe:f7:69:
                    89:ce:ef:7a:93:30:b6:2a:2f:64:44:12:03:9c:a6:
                    c3:9d:3d:11:bf:79:1b:64:63:f5:f9:ea:c2:4e:cc:
                    30:67:07:8e:69:96:d7:89:e9:4b:21:41:a7:61:14:
                    6d:12:86:f9:ea:e4:7c:bb:48:c4:02:c3:ce:36:3b:
                    13:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:56:74:62:06:38:90:19:8B:7F:4A:9C:EA:36:B5:A4:ED:A4:2A:9B
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3232352e302f32342d3234203d3e20313530333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:20:48:09:e7:98:52:6b:37:35:ce:b7:6d:63:2a:67:83:31:
         e4:a4:f9:68:d7:43:98:e0:45:dc:61:83:fb:47:a4:39:59:55:
         1c:7b:d7:7e:b2:cb:d2:55:36:5a:39:4f:c9:7b:23:b4:12:b8:
         20:ec:8c:74:1c:e3:9f:83:eb:5b:2c:1e:75:b8:08:a8:14:4e:
         54:eb:c9:0b:38:8a:5e:0f:0a:f2:86:d7:f5:b9:6d:9c:db:99:
         07:e0:25:78:f2:b7:ab:08:dc:2a:09:bc:98:13:80:1e:6c:d0:
         2d:03:bb:da:5c:24:7e:8e:b5:74:74:8b:d7:a7:5e:b7:d7:57:
         f0:2d:53:9e:ab:60:d6:0a:b9:93:9b:59:c9:7a:01:1c:f7:c8:
         05:ad:f4:7d:3a:29:1e:68:c2:fc:91:ed:8e:02:dc:50:8c:cb:
         ab:eb:e2:42:2d:aa:20:a7:28:0b:e9:94:f9:46:1e:39:42:e6:
         88:f0:84:10:09:c9:bf:7e:c3:c7:88:d9:b1:69:59:2c:a7:97:
         bc:f5:37:e4:ee:7f:4f:ca:27:83:d7:55:a5:2b:55:5a:ce:18:
         93:06:af:2a:1e:53:1b:11:a9:d8:ea:da:45:06:70:f9:2a:12:
         fd:e2:d3:e6:5e:b6:6d:8c:c1:c7:47:30:87:59:00:15:54:f0:
         26:4f:e2:25
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgIUeb2BsGzSxs8FSDvgns2JgHfzbAgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4
NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjMwMzE0MTc1ODI1WhcNMjQwMzEyMTgwMzI1
WjAzMTEwLwYDVQQDEygyNDU2NzQ2MjA2Mzg5MDE5OEI3RjRBOUNFQTM2QjVBNEVE
QTQyQTlCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsNKN9wnLIaf
le++e7SKNd+Y6UdcOS2lAsu+ECiPL0eTQnT12PL2qywaOGNnoRoY1NfzsIuD8Scr
g/sO7t2VM/2EvwQMVsVmOYg6Je791PA5caxDbJ8EcKAfK1QakS8Vquwy41vGQK44
K+6IVF8LZaR5k/fT4A2zdA8MzDIZqbw+kalltqvH1wb+lvokjXOozIQMimogo0cp
fUAusVbBeAidB2To+eoWTG9mIM/b9Wl8W2biVkZW1OKGNDwNKCb+92mJzu96kzC2
Ki9kRBIDnKbDnT0Rv3kbZGP1+erCTswwZweOaZbXielLIUGnYRRtEob56uR8u0jE
AsPONjsT7wIDAQABo4ICtjCCArIwHQYDVR0OBBYEFCRWdGIGOJAZi39KnOo2taTt
pCqbMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv
RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3
ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTY0
OTBmNDQ1M2I3Yi8wLzMxMzUzNzJlMzIzNTM0MmUzMjMyMzUyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMTM1MzAzMzMwMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACd/uEwDQYJKoZIhvcN
AQELBQADggEBAGkgSAnnmFJrNzXOt21jKmeDMeSk+WjXQ5jgRdxhg/tHpDlZVRx7
136yy9JVNlo5T8l7I7QSuCDsjHQc45+D61ssHnW4CKgUTlTryQs4il4PCvKG1/W5
bZzbmQfgJXjyt6sI3CoJvJgTgB5s0C0Du9pcJH6OtXR0i9enXrfXV/AtU56rYNYK
uZObWcl6ARz3yAWt9H06KR5owvyR7Y4C3FCMy6vr4kItqiCnKAvplPlGHjlC5ojw
hBAJyb9+w8eI2bFpWSynl7z1N+Tuf0/KJ4PXVaUrVVrOGJMGryoeUxsRqdjq2kUG
cPkqEv3i0+Zetm2MwcdHMIdZABVU8CZP4iU=
-----END CERTIFICATE-----