Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3232372e302f32342d3234203d3e20313339363630.roa
File:                     3135372e3235342e3232372e302f32342d3234203d3e20313339363630.roa (raw, json)
Hash identifier:          me62hgnq8NVC20UIshMui2Cm2Jwn7BNHkXhVljVvBRM=
Subject key identifier:   DA:86:5E:0A:2E:AC:5C:65:A6:11:94:C9:42:5C:98:3E:CF:A3:8F:73
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       7C6589A104F23AEAA2B7D460D62DF990D606CC06
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3232372e302f32342d3234203d3e20313339363630.roa
Signing time:             Fri 30 Dec 2022 19:54:21 +0000
ROA not before:           Fri 30 Dec 2022 19:49:21 +0000
ROA not after:            Fri 29 Dec 2023 19:54:21 +0000
asID:                     139660
IP address blocks:        157.254.227.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:65:89:a1:04:f2:3a:ea:a2:b7:d4:60:d6:2d:f9:90:d6:06:cc:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Dec 30 19:49:21 2022 GMT
            Not After : Dec 29 19:54:21 2023 GMT
        Subject: CN=DA865E0A2EAC5C65A61194C9425C983ECFA38F73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1e:c5:6b:3e:63:2d:a9:e9:5d:c3:45:a1:0a:
                    3e:09:0e:b4:9b:af:c0:f9:f9:63:84:ee:26:df:92:
                    43:3b:3c:32:50:85:40:4c:19:ea:0c:c3:3e:11:c2:
                    a8:9f:b3:2f:ad:eb:03:78:00:57:a3:c2:13:78:ec:
                    5d:12:3c:1c:56:a7:ee:fd:22:eb:a3:f8:79:09:58:
                    9c:3d:2c:14:38:f4:f0:7c:5f:fa:66:e2:56:f9:7a:
                    b2:b6:56:20:52:f3:75:31:55:08:33:e6:6f:e1:84:
                    8f:6b:95:66:85:93:90:91:94:73:21:61:d1:d0:4a:
                    48:f9:89:50:42:22:ea:b1:47:ea:11:66:48:d9:e1:
                    75:1d:ad:85:58:3d:5d:91:60:f3:b5:12:ed:c1:0d:
                    f1:3b:57:97:d8:b5:3e:98:78:17:71:77:dd:de:c3:
                    a9:01:40:ec:4d:6e:84:bc:24:fa:2a:72:0e:83:70:
                    b6:e0:21:ce:36:62:a3:24:ab:ab:f4:9f:54:35:a4:
                    29:ba:5a:ce:07:49:43:ce:27:f0:a6:ae:5f:9b:7d:
                    b7:88:24:3f:56:bf:09:5f:31:4f:a7:51:46:4a:93:
                    79:55:9c:1f:04:3d:c0:f5:93:3c:17:2a:79:47:fe:
                    42:87:e6:82:db:94:52:17:a2:79:43:ba:a4:7a:6d:
                    81:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:86:5E:0A:2E:AC:5C:65:A6:11:94:C9:42:5C:98:3E:CF:A3:8F:73
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3232372e302f32342d3234203d3e20313339363630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:e2:23:31:8b:94:66:18:cd:5e:71:0c:00:c6:a8:bc:df:e8:
         63:35:80:ad:44:0a:42:ed:15:1e:59:6a:de:25:a6:04:75:ee:
         85:58:08:af:ad:9d:bc:93:e7:f1:82:1e:0f:01:7b:ff:24:ed:
         28:f0:5e:46:71:dd:b2:6a:20:eb:e5:3d:da:5a:4c:02:5a:4f:
         5d:ec:24:2c:a7:fd:1b:1d:a9:33:62:51:23:9c:1f:2f:43:b4:
         30:c3:c6:16:ab:55:0a:a7:9c:b5:ef:de:88:be:e5:02:44:ea:
         de:1b:72:9f:7f:cb:5e:b9:6a:4e:2f:ee:0f:09:69:a1:2d:f8:
         4b:30:87:da:e7:54:13:68:27:99:a6:ab:ca:f2:d2:44:c9:25:
         75:eb:2b:39:cb:1a:cf:ac:da:22:8f:56:1b:f9:93:02:7c:ba:
         5c:fd:5e:e7:d3:97:23:37:ba:ad:e0:52:ca:71:67:0f:1b:c0:
         ac:85:08:d8:2f:70:10:0e:25:a3:4f:c1:81:cf:e3:17:d3:49:
         cf:a9:67:e4:dd:e5:63:5a:84:80:27:25:1d:89:34:c9:1c:0b:
         b5:96:70:2b:10:ad:25:fd:f6:14:e8:f1:95:a6:75:cb:52:16:
         a7:15:27:cf:c9:f2:6e:2f:8f:ed:e7:83:29:cc:de:4f:16:e1:
         81:df:44:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----