Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3232352e302f32342d3234203d3e20323036303932.roa
File:                     3135372e3235342e3232352e302f32342d3234203d3e20323036303932.roa (raw, json)
Hash identifier:          jdmsVodejbPa42S1fHCdGwFUAtWdwuv4+Y/GH/lKjQ0=
Subject key identifier:   63:04:69:43:DC:3E:66:27:C3:4C:3C:BC:04:84:95:D8:FF:8B:00:06
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       6995B20706C3D37C79C568DE729676AD03C60016
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3232352e302f32342d3234203d3e20323036303932.roa
Signing time:             Fri 30 Dec 2022 19:54:21 +0000
ROA not before:           Fri 30 Dec 2022 19:49:21 +0000
ROA not after:            Fri 29 Dec 2023 19:54:21 +0000
asID:                     206092
IP address blocks:        157.254.225.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:95:b2:07:06:c3:d3:7c:79:c5:68:de:72:96:76:ad:03:c6:00:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Dec 30 19:49:21 2022 GMT
            Not After : Dec 29 19:54:21 2023 GMT
        Subject: CN=63046943DC3E6627C34C3CBC048495D8FF8B0006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a6:1b:bd:35:73:6b:d0:c3:95:e0:38:b3:1a:
                    13:34:1b:a6:a3:7e:c4:57:c6:eb:82:6b:d6:4b:ec:
                    29:cf:ae:12:c9:2b:de:0c:46:95:1e:25:4f:cf:62:
                    85:0c:ed:3c:bc:17:b8:6a:9f:3c:69:46:0b:5b:07:
                    24:6f:28:9c:bc:62:03:b9:b9:e5:a3:e3:94:01:07:
                    bd:a2:25:a3:0d:a9:61:e6:75:81:b7:eb:ee:34:01:
                    6b:ef:5a:63:17:e6:f3:9b:c5:43:94:ee:63:99:c9:
                    4b:2b:b3:15:4f:e9:db:49:e2:68:73:7a:a4:f1:7d:
                    63:48:c7:b9:e3:50:19:92:a8:78:43:20:8f:e1:61:
                    6a:fb:b1:39:04:37:9a:55:97:5a:53:2c:72:22:d9:
                    91:83:50:7c:42:be:37:c5:d6:86:c3:f3:e5:98:a0:
                    c1:3b:f4:c5:bc:96:c0:f4:5c:e6:e1:8a:9c:12:b5:
                    46:8f:ca:ba:68:42:42:19:3b:bd:5a:dc:b0:dc:99:
                    14:ca:e6:33:ee:20:2f:1a:73:52:17:29:1e:26:c0:
                    8f:cb:06:65:49:1e:d0:da:e2:98:02:92:06:02:eb:
                    1b:df:ed:cf:d9:7e:71:de:86:cf:9c:a2:4b:69:93:
                    92:94:f9:f2:34:db:88:bb:6f:9b:09:ac:e8:1f:75:
                    60:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:04:69:43:DC:3E:66:27:C3:4C:3C:BC:04:84:95:D8:FF:8B:00:06
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3232352e302f32342d3234203d3e20323036303932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:67:96:d2:ba:5b:ea:c4:ad:4f:f2:72:31:73:93:76:47:47:
         5e:57:b3:2d:b6:27:c3:7a:ac:bf:e7:fd:9f:fb:46:a8:17:c9:
         e6:21:e7:16:c7:0e:4f:f2:ef:f6:c7:78:05:dd:e5:82:49:48:
         a6:ac:1a:c2:af:4b:66:42:97:48:07:73:bd:10:c8:1c:fa:66:
         55:f5:ec:03:80:35:96:68:29:0f:85:d3:2c:27:03:34:01:10:
         a8:19:3d:cc:6a:b1:df:cd:69:43:5b:fd:cb:b6:bd:f5:8c:ee:
         dd:1d:60:d8:4c:17:50:51:62:62:9d:85:78:f0:bf:9c:11:22:
         82:be:04:8e:a5:25:fb:47:67:de:e2:15:15:c6:14:93:47:fe:
         56:0a:44:ca:3e:a3:76:73:07:51:f6:f2:28:b0:92:4a:45:76:
         1e:50:14:08:37:a8:e0:26:ce:8e:41:7e:64:cb:64:3e:f0:c5:
         a1:46:b6:99:9a:78:89:1e:a3:74:67:90:4a:f4:fc:27:8a:d0:
         a4:06:76:6a:e4:23:a3:ee:ec:ec:82:c5:32:c7:00:3e:27:7b:
         e4:12:a4:2e:ea:af:da:6e:6b:e9:d8:8c:6b:f8:72:9c:c2:62:
         43:d5:d0:dd:6e:9a:5f:bc:8d:da:3d:47:2a:ea:67:0f:b8:9e:
         ce:b4:41:14
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgIUaZWyBwbD03x5xWjecpZ2rQPGABYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4
NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjIxMjMwMTk0OTIxWhcNMjMxMjI5MTk1NDIx
WjAzMTEwLwYDVQQDEyg2MzA0Njk0M0RDM0U2NjI3QzM0QzNDQkMwNDg0OTVEOEZG
OEIwMDA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KYbvTVza9DD
leA4sxoTNBumo37EV8brgmvWS+wpz64SySveDEaVHiVPz2KFDO08vBe4ap88aUYL
WwckbyicvGIDubnlo+OUAQe9oiWjDalh5nWBt+vuNAFr71pjF+bzm8VDlO5jmclL
K7MVT+nbSeJoc3qk8X1jSMe541AZkqh4QyCP4WFq+7E5BDeaVZdaUyxyItmRg1B8
Qr43xdaGw/PlmKDBO/TFvJbA9Fzm4YqcErVGj8q6aEJCGTu9Wtyw3JkUyuYz7iAv
GnNSFykeJsCPywZlSR7Q2uKYApIGAusb3+3P2X5x3obPnKJLaZOSlPnyNNuIu2+b
CazoH3VgdwIDAQABo4ICtjCCArIwHQYDVR0OBBYEFGMEaUPcPmYnw0w8vASEldj/
iwAGMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv
RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3
ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTY0
OTBmNDQ1M2I3Yi8wLzMxMzUzNzJlMzIzNTM0MmUzMjMyMzUyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMjMwMzYzMDM5MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACd/uEwDQYJKoZIhvcN
AQELBQADggEBAJFnltK6W+rErU/ycjFzk3ZHR15Xsy22J8N6rL/n/Z/7RqgXyeYh
5xbHDk/y7/bHeAXd5YJJSKasGsKvS2ZCl0gHc70QyBz6ZlX17AOANZZoKQ+F0ywn
AzQBEKgZPcxqsd/NaUNb/cu2vfWM7t0dYNhMF1BRYmKdhXjwv5wRIoK+BI6lJftH
Z97iFRXGFJNH/lYKRMo+o3ZzB1H28iiwkkpFdh5QFAg3qOAmzo5BfmTLZD7wxaFG
tpmaeIkeo3RnkEr0/CeK0KQGdmrkI6Pu7OyCxTLHAD4ne+QSpC7qr9pua+nYjGv4
cpzCYkPV0N1uml+8jdo9RyrqZw+4ns60QRQ=
-----END CERTIFICATE-----