Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3232362e302f32342d3234203d3e20383334.roa
File:                     3135372e3235342e3232362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          b5pDlqO2UCIQ3YwLcT1FgtAft7ZUDN9H2VDd5HTiRZQ=
Subject key identifier:   85:96:58:8D:84:1F:DF:B4:21:B1:92:FA:C5:CF:AB:51:A7:99:F3:C0
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       0AB59E2354C223A1108C5C728E040A70BC39B36D
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3232362e302f32342d3234203d3e20383334.roa
Signing time:             Wed 12 Apr 2023 18:30:08 +0000
ROA not before:           Wed 12 Apr 2023 18:25:08 +0000
ROA not after:            Wed 10 Apr 2024 18:30:08 +0000
asID:                     834
IP address blocks:        157.254.226.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:b5:9e:23:54:c2:23:a1:10:8c:5c:72:8e:04:0a:70:bc:39:b3:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Apr 12 18:25:08 2023 GMT
            Not After : Apr 10 18:30:08 2024 GMT
        Subject: CN=8596588D841FDFB421B192FAC5CFAB51A799F3C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:81:21:3b:c8:eb:56:7c:ab:52:93:68:f7:e1:
                    c2:6e:4f:ad:b8:93:6f:b9:da:33:5f:1b:ef:86:fd:
                    81:92:2c:75:31:55:a0:5b:cc:10:5d:ea:55:17:5f:
                    53:88:13:59:19:56:cd:47:08:f0:2c:9e:4b:15:10:
                    51:0d:c9:16:63:9a:a6:54:26:83:f4:dc:63:c8:4c:
                    84:07:84:ed:2d:96:91:ab:c0:73:d5:2d:6d:31:ad:
                    4b:cf:d4:11:a5:5e:b1:8b:7e:0b:fa:c8:8c:33:bb:
                    06:c5:83:57:61:87:50:81:5a:d3:26:2b:a6:3f:dd:
                    82:8c:10:74:82:95:63:c8:24:9c:37:b1:cf:fd:a0:
                    b2:92:72:26:02:e7:73:3a:7a:5e:77:d7:09:9b:35:
                    a7:17:c9:30:e9:85:36:8b:ba:6b:98:c0:bb:dd:16:
                    53:0d:43:6f:30:62:66:c6:ef:9c:18:e8:fe:62:80:
                    50:b2:b7:1a:f5:fe:e9:79:d0:81:04:e9:20:70:95:
                    80:67:c4:a0:76:3e:96:2b:30:1d:21:45:d9:6d:16:
                    36:64:de:46:de:81:b8:ca:cf:d2:d4:8c:51:13:03:
                    c1:0f:e9:69:21:fe:52:31:e4:55:e1:47:bf:db:ce:
                    bd:bb:0b:43:76:60:ab:69:a7:5d:c1:9b:ed:4d:8d:
                    67:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:96:58:8D:84:1F:DF:B4:21:B1:92:FA:C5:CF:AB:51:A7:99:F3:C0
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3232362e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:7f:62:9f:df:a7:3f:7c:0c:11:76:75:14:04:9c:7c:07:62:
         b8:d2:a5:0f:16:13:50:7d:78:1b:82:2d:ef:07:9e:64:5c:29:
         65:f3:a7:13:9c:7d:ce:ad:9b:11:6a:7d:47:77:ff:4f:29:70:
         aa:ca:48:d0:e5:11:d9:b1:d8:e1:22:c0:41:a2:99:b0:31:b1:
         ba:ac:03:80:09:28:88:eb:58:a8:06:bc:28:19:2a:81:9b:6f:
         dc:25:85:fd:cf:31:39:0e:51:ad:d7:5d:85:e3:5c:ed:6f:fe:
         e9:e8:4d:91:c1:38:4e:15:08:4a:f9:2d:34:8f:01:8b:8e:21:
         5f:49:d7:69:fe:d8:b0:fd:cd:4b:a3:5d:3b:f3:aa:ad:ab:4a:
         b2:b1:a6:d0:20:47:ca:06:e5:85:1b:17:2e:22:66:40:8c:cf:
         f5:af:98:f1:a6:8e:3b:dc:86:7d:f0:85:6e:27:95:42:6d:6a:
         db:31:ba:fa:13:b4:96:d9:70:f2:d7:d9:f5:f6:65:d2:d7:35:
         f0:06:11:6a:30:dd:08:54:4c:1d:01:e1:35:0b:32:e5:cb:69:
         f6:30:cd:2a:10:f1:ee:ff:66:a4:5a:8b:3e:f1:cf:62:d0:45:
         dd:2f:22:a9:af:f8:d7:53:e2:37:3c:fb:9d:86:f5:f4:d6:bd:
         f5:2d:ca:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----