Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3233312e302f32342d3234203d3e203633303233.roa
File:                     3135372e3235342e3233312e302f32342d3234203d3e203633303233.roa (raw, json)
Hash identifier:          HDXoYHpV/WLQ86y3U0WrhduZG5Aug6harB/6p5WtDwM=
Subject key identifier:   0E:C9:56:45:3B:CC:BE:2D:71:99:CB:BD:ED:FA:40:82:F6:84:8A:14
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       1DB2355B23A232EEEA520B49D8653B7F01454D53
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3233312e302f32342d3234203d3e203633303233.roa
Signing time:             Fri 30 Dec 2022 19:54:22 +0000
ROA not before:           Fri 30 Dec 2022 19:49:22 +0000
ROA not after:            Fri 29 Dec 2023 19:54:22 +0000
asID:                     63023
IP address blocks:        157.254.231.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:b2:35:5b:23:a2:32:ee:ea:52:0b:49:d8:65:3b:7f:01:45:4d:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Dec 30 19:49:22 2022 GMT
            Not After : Dec 29 19:54:22 2023 GMT
        Subject: CN=0EC956453BCCBE2D7199CBBDEDFA4082F6848A14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e0:a1:95:1d:52:08:f6:d2:b9:95:bf:0d:4e:
                    39:49:1e:b2:8d:42:8f:ae:e6:f7:08:35:00:04:d0:
                    51:70:25:3a:47:8a:d0:6f:24:96:f8:e3:27:27:7d:
                    cb:32:95:2b:67:fa:fd:df:ab:41:e3:5d:e3:56:4c:
                    86:09:42:47:d4:0b:44:a5:f1:93:75:d2:10:59:c7:
                    52:28:8b:49:78:58:74:2c:33:70:43:34:11:af:eb:
                    28:6e:51:de:28:0e:f5:74:26:85:37:e0:92:50:af:
                    4b:f0:65:c4:53:52:33:a3:8c:05:85:e9:e0:c1:65:
                    b2:15:4d:ae:97:02:fa:54:a1:31:15:c0:76:37:5b:
                    34:9f:c4:b0:1c:73:8d:eb:0f:1d:53:f2:4f:3b:92:
                    b1:6b:d5:96:e4:b5:bf:27:cf:e9:00:15:96:9d:c8:
                    ab:9b:f9:00:48:da:99:6c:64:65:5f:66:82:8c:c3:
                    ae:8d:3c:41:94:33:81:bf:cf:d2:65:dd:4f:ab:09:
                    61:94:53:3d:78:b5:6d:74:26:54:03:0d:f0:1e:3a:
                    f2:aa:ee:33:d8:6b:ee:14:e2:84:fb:ac:e5:ff:75:
                    f4:ca:6b:2b:1d:f1:1b:64:df:c3:91:c7:a2:f2:7f:
                    e9:e7:e4:c8:12:ea:eb:d4:9a:28:89:2c:0d:03:9c:
                    f2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:C9:56:45:3B:CC:BE:2D:71:99:CB:BD:ED:FA:40:82:F6:84:8A:14
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3233312e302f32342d3234203d3e203633303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:92:6a:8f:da:06:4f:12:af:44:59:f2:1f:34:83:72:46:f2:
         0a:df:95:67:2d:64:3e:80:df:73:aa:06:14:2d:fa:d9:8a:4b:
         be:d8:a7:70:1d:c7:e9:10:96:15:d5:cc:4a:bc:e4:22:c9:42:
         7a:e9:5a:be:34:c2:4d:7f:2f:c1:8a:47:42:94:a8:a9:c3:66:
         96:8f:bc:a7:a1:58:86:58:0c:ef:67:17:99:92:d2:78:88:e2:
         e0:04:24:f6:bb:f5:4f:e4:e9:35:b1:62:13:46:26:4f:c1:98:
         5c:28:d7:30:cf:f2:08:80:12:cf:7a:02:68:fe:41:6a:a6:51:
         23:88:43:84:44:ab:d6:2a:72:1b:03:32:58:d3:af:fb:3e:0d:
         21:c8:ac:ec:17:03:7b:6c:c9:1c:38:18:b8:bf:f8:e9:96:55:
         56:fe:31:09:62:0b:6b:c9:f5:09:42:65:af:61:15:51:28:b5:
         0e:02:54:5a:17:02:c7:7b:cb:0b:41:d7:10:46:f9:b3:aa:10:
         97:22:56:bc:53:b1:99:57:3b:b0:96:59:65:6d:2a:07:4d:4b:
         69:c4:b4:35:cb:6d:7e:eb:84:eb:e9:c7:15:4f:b9:02:de:11:
         7d:b5:44:22:c0:7a:69:a2:de:87:a5:e1:cc:32:45:a2:aa:22:
         db:79:9f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----