Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3233302e302f32342d3234203d3e20323132323338.roa
File:                     3135372e3235342e3233302e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier:          UMlzKtE4pcDjzbeG1iB1bJ9GhiEFoNdZnRF2Q7/AntQ=
Subject key identifier:   98:DA:B8:05:B3:1C:3C:35:E5:E8:3F:6B:D7:A7:01:7D:3E:2D:1D:86
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       479E75AB2082F86DEF6A8D583C2A22FCD23CAF89
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3233302e302f32342d3234203d3e20323132323338.roa
Signing time:             Fri 30 Dec 2022 19:54:21 +0000
ROA not before:           Fri 30 Dec 2022 19:49:21 +0000
ROA not after:            Fri 29 Dec 2023 19:54:21 +0000
asID:                     212238
IP address blocks:        157.254.230.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:9e:75:ab:20:82:f8:6d:ef:6a:8d:58:3c:2a:22:fc:d2:3c:af:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Dec 30 19:49:21 2022 GMT
            Not After : Dec 29 19:54:21 2023 GMT
        Subject: CN=98DAB805B31C3C35E5E83F6BD7A7017D3E2D1D86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6a:9d:f4:10:7f:fa:ff:b1:92:fb:96:4e:55:
                    85:9c:a7:37:12:6c:5b:7c:ba:fe:f2:87:e5:27:10:
                    d4:4a:c7:78:d1:87:d5:16:bd:80:d1:e4:c1:a0:c8:
                    c0:50:eb:cd:dd:ac:c4:4c:92:b0:15:c3:25:18:3e:
                    93:20:dd:6a:4b:bb:06:80:39:8d:5b:f9:67:0b:67:
                    44:f6:9c:86:04:5c:39:29:4c:3f:8e:1e:98:fb:fe:
                    f6:a8:55:b2:3f:32:00:07:5c:ef:02:f9:f6:c2:3e:
                    a0:06:11:0a:ee:88:01:bf:1b:95:c9:a5:a2:58:95:
                    e9:16:92:4a:fe:41:9a:13:1c:41:9a:df:85:b2:9b:
                    7f:38:f8:2f:d2:bf:48:e3:0e:ce:2a:d9:bc:de:a9:
                    96:b4:2c:83:90:e0:16:65:f5:f4:89:a9:d4:0f:29:
                    ff:12:d0:90:e8:eb:92:01:da:29:71:d8:e7:75:0e:
                    3b:40:20:10:78:43:3f:61:ce:3d:ab:d3:64:43:b3:
                    7e:10:72:7a:17:14:db:85:5b:33:95:71:d3:ce:5b:
                    9d:fd:6f:65:67:55:1e:bd:61:38:3f:16:58:09:9c:
                    92:d1:da:0e:9f:e7:3f:e2:cc:94:46:40:dc:64:db:
                    79:ba:55:f4:11:7e:8e:a2:85:2f:40:7b:e0:ed:ad:
                    a1:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:DA:B8:05:B3:1C:3C:35:E5:E8:3F:6B:D7:A7:01:7D:3E:2D:1D:86
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3233302e302f32342d3234203d3e20323132323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:7f:11:db:b0:07:e3:79:a7:b1:ab:48:c1:63:61:61:62:9d:
         d5:06:36:73:94:9f:40:15:2a:ac:b2:5e:90:2c:5a:73:57:2e:
         a4:41:f2:d4:48:13:d2:86:d2:f0:b0:a3:c1:52:99:31:8c:90:
         9b:57:54:99:35:aa:1b:6c:bc:be:05:a9:eb:f2:dc:f2:bc:08:
         90:45:b0:69:01:b3:48:a5:0f:0d:c2:8c:2f:b4:7b:87:58:9e:
         70:70:05:03:d2:3d:51:37:10:18:46:03:05:81:71:ea:11:73:
         a1:09:46:03:85:98:d1:8f:2c:e9:f3:65:39:4e:f2:6a:ae:40:
         0b:05:d9:9a:c7:44:9d:48:e9:87:f4:ad:1f:54:e2:de:fa:13:
         72:1a:4e:22:7e:5f:60:18:4e:f0:51:71:40:02:86:e3:f2:70:
         12:d3:3f:c2:38:ff:df:81:f1:e5:72:55:27:14:fc:3b:18:df:
         67:f6:99:2d:ba:60:57:29:3b:f3:36:f7:e4:7a:ab:ae:0e:77:
         e8:85:d4:18:c8:70:5c:7b:4d:5a:c1:bf:d4:37:17:ea:6a:7a:
         30:36:fc:9a:a9:e1:dc:d5:40:76:47:a3:e2:27:3f:aa:b4:62:
         8d:03:29:68:53:aa:52:21:b6:31:1e:11:f1:87:70:a5:e8:57:
         d7:01:b3:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----