Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3233312e302f32342d3234203d3e20313432313131.roa
File:                     3135372e3235342e3233312e302f32342d3234203d3e20313432313131.roa (raw, json)
Hash identifier:          tlMQbnNbB/XTr8GyWBNwazPC/T4+pBEGKVrfc+/DhPc=
Subject key identifier:   58:92:52:5D:1E:9C:8D:8B:CB:03:FC:23:87:82:07:D9:69:AB:6E:FF
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       4685EEE72115A69CFAFBE21898E26390C965CDB5
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3233312e302f32342d3234203d3e20313432313131.roa
Signing time:             Fri 30 Dec 2022 19:54:21 +0000
ROA not before:           Fri 30 Dec 2022 19:49:21 +0000
ROA not after:            Fri 29 Dec 2023 19:54:21 +0000
asID:                     142111
IP address blocks:        157.254.231.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:85:ee:e7:21:15:a6:9c:fa:fb:e2:18:98:e2:63:90:c9:65:cd:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Dec 30 19:49:21 2022 GMT
            Not After : Dec 29 19:54:21 2023 GMT
        Subject: CN=5892525D1E9C8D8BCB03FC23878207D969AB6EFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:cd:ae:3f:fa:90:79:b3:20:2c:d1:38:42:87:
                    74:92:32:d7:d8:ca:5b:40:ab:b0:cb:0d:f6:0d:65:
                    69:e2:53:55:f4:b6:ff:f3:79:e7:e5:f8:5a:52:f0:
                    34:10:29:a0:a6:e9:eb:65:63:c4:10:3b:86:28:3d:
                    5b:34:55:73:3f:87:70:1c:df:e4:21:da:67:aa:fe:
                    10:28:d5:f1:88:6b:c1:d3:18:9e:30:7e:1e:15:62:
                    38:dd:52:9d:87:d2:0e:51:0a:dc:13:e4:28:b8:fe:
                    26:1f:83:1c:ae:8f:11:eb:df:c8:7f:45:37:ac:2e:
                    ad:32:23:da:51:ca:0a:40:9f:2e:a4:37:56:f8:a6:
                    89:46:2a:79:d1:85:98:42:15:4f:6f:d4:87:68:45:
                    14:90:55:09:b9:01:c8:57:e3:84:48:15:2b:1c:1b:
                    40:36:a7:7b:77:be:e5:c8:08:33:d7:e2:e0:9e:8a:
                    49:29:aa:ac:7c:ff:6c:98:3d:75:36:a3:93:8f:be:
                    11:8f:9b:c7:2c:fe:ce:3c:0d:76:98:2c:46:80:9a:
                    d2:32:c9:de:24:68:de:a0:a7:a0:5c:88:2c:ba:5b:
                    7d:68:09:02:ef:e4:67:95:46:2b:67:97:58:51:18:
                    e6:bb:c2:5f:51:19:1f:d8:69:4e:42:72:13:13:9e:
                    9a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:92:52:5D:1E:9C:8D:8B:CB:03:FC:23:87:82:07:D9:69:AB:6E:FF
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3233312e302f32342d3234203d3e20313432313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:6b:22:07:95:9d:66:f0:6d:b5:76:dd:c0:91:50:bf:d0:aa:
         85:82:95:e0:fa:41:1b:b5:2b:36:b7:d2:53:a1:61:ed:a8:af:
         85:b6:39:b8:65:a3:ff:22:20:b8:3b:e5:8b:c6:4e:69:b1:e8:
         24:de:34:54:49:78:36:5b:70:6c:74:fd:de:ca:3d:2b:43:ac:
         7e:ab:f9:d1:e8:b2:2f:fd:54:05:76:cf:a2:bc:a5:c5:71:f3:
         e9:f6:01:54:d6:7b:bd:62:98:b0:5b:81:dc:50:6b:81:f3:ba:
         ce:7c:5c:b9:49:38:ed:e4:57:a8:63:53:5e:bd:a3:b7:ec:8b:
         2b:cd:b9:21:ec:74:41:05:40:b8:f1:4d:6f:82:09:3f:a3:b8:
         3f:16:4f:49:07:bc:8a:b5:8d:0a:4d:f2:72:24:4d:72:b9:96:
         ac:22:7e:67:42:53:23:50:b0:49:c6:18:80:c9:92:88:8d:71:
         98:1d:12:11:72:c6:54:ed:89:ad:3c:fa:f8:50:ba:38:50:ef:
         e8:50:da:84:88:f5:48:05:ab:dd:b0:02:04:39:67:0d:35:b3:
         3e:df:83:ca:b7:6e:ab:20:32:d2:46:ad:ac:50:5c:15:ce:4f:
         8e:19:3a:6e:e2:d2:6c:0d:26:b6:00:3d:dd:ce:22:f4:62:6f:
         d5:a1:3a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----