Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3235322e302f32322d3234203d3e20323131353835.roa
File:                     3135372e3235342e3235322e302f32322d3234203d3e20323131353835.roa (raw, json)
Hash identifier:          efd0cWhVwQAMEEiz8HdkyfUZZP+RfFvh7M/gXMISD4Q=
Subject key identifier:   A9:15:4A:CA:8F:8A:2F:56:A4:CF:1D:80:BF:07:35:FC:10:C8:A4:FC
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       5E29CC0466F1851CDFA5BC7A33D4CDC9E63B4CE8
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3235322e302f32322d3234203d3e20323131353835.roa
Signing time:             Fri 30 Dec 2022 19:54:22 +0000
ROA not before:           Fri 30 Dec 2022 19:49:22 +0000
ROA not after:            Fri 29 Dec 2023 19:54:22 +0000
asID:                     211585
IP address blocks:        157.254.252.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:29:cc:04:66:f1:85:1c:df:a5:bc:7a:33:d4:cd:c9:e6:3b:4c:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Dec 30 19:49:22 2022 GMT
            Not After : Dec 29 19:54:22 2023 GMT
        Subject: CN=A9154ACA8F8A2F56A4CF1D80BF0735FC10C8A4FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:bb:c5:a0:b5:59:43:21:fe:e0:70:40:46:4a:
                    28:65:36:7d:4a:fd:34:a1:a9:1b:4e:ff:d6:a6:95:
                    fc:98:4f:7f:b8:2b:21:f5:55:3b:ad:d6:a1:36:b9:
                    e7:6b:88:86:d0:57:24:9c:09:2b:78:2f:ec:1c:a5:
                    e9:de:fa:80:d7:6e:f5:df:7d:99:98:b0:1b:65:0b:
                    49:3d:1f:3e:52:4b:e0:dd:94:ed:96:24:82:2c:bc:
                    0d:a7:42:80:73:34:e0:84:55:ad:fc:cf:94:31:54:
                    a2:06:59:73:9f:43:6f:8a:37:21:71:b3:c5:de:b9:
                    e3:27:50:2d:99:56:6f:95:1a:66:0a:d8:44:e7:fe:
                    4c:9b:42:4b:82:df:ed:81:be:98:a7:41:47:0c:a3:
                    e7:d1:df:e0:e2:d3:90:b6:8c:54:4a:4b:5e:b9:45:
                    02:d0:67:1c:05:61:36:0a:7f:95:a0:ae:56:37:98:
                    22:f1:b5:07:5b:b8:be:58:20:91:1d:72:b7:50:d0:
                    cc:dc:09:ba:6a:c8:4f:00:be:12:f0:65:5d:fe:f4:
                    cb:d6:a8:1c:13:5a:8e:52:ae:a4:a2:1b:e1:6a:25:
                    21:43:e0:e6:91:58:b4:3b:7f:ac:b1:c6:4f:54:41:
                    4a:85:66:a8:e6:99:c6:92:e0:52:32:37:31:07:eb:
                    0e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:15:4A:CA:8F:8A:2F:56:A4:CF:1D:80:BF:07:35:FC:10:C8:A4:FC
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3235322e302f32322d3234203d3e20323131353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:be:28:98:a0:62:06:bc:ce:31:f9:09:fb:2f:ae:6c:bf:ec:
         76:8e:58:e9:8a:54:29:bc:8f:e9:cd:61:78:fd:88:5b:da:7c:
         e1:aa:bb:a4:57:f0:09:8d:cf:e5:09:44:41:09:1a:f0:b9:28:
         c6:4e:0a:2b:da:e9:35:86:ae:bb:01:c2:41:52:56:b1:20:44:
         bb:12:0d:e0:48:2b:83:d2:65:d5:33:99:2b:55:d0:6b:eb:bc:
         a0:69:f7:48:34:5a:a2:a2:7b:fc:8a:53:30:da:71:03:0b:9b:
         e7:c3:d3:2a:8b:8c:86:c5:28:77:32:f6:c5:ff:1b:05:86:f1:
         ff:f4:98:bc:07:81:fd:5f:f8:72:c0:4a:88:53:74:58:d2:2f:
         9a:24:41:87:03:c6:b1:17:57:cc:f4:af:99:35:01:c5:64:39:
         17:6b:f9:20:06:d3:a2:fa:90:38:5e:63:a0:91:0c:0d:2e:7c:
         e5:23:af:d8:89:2b:5c:1a:f6:e7:69:8d:dc:95:06:d9:fb:e6:
         8d:e5:bf:a1:d7:6a:df:30:a9:e4:b7:8e:8b:34:bb:df:39:1c:
         23:00:c2:75:21:d2:02:c9:66:3e:6c:56:a0:cb:c9:ff:40:44:
         22:c0:4a:ce:57:cb:eb:d3:2a:2c:ac:39:c3:57:28:8a:2e:da:
         c2:1d:c8:f0
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgIUXinMBGbxhRzfpbx6M9TNyeY7TOgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4
NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjIxMjMwMTk0OTIyWhcNMjMxMjI5MTk1NDIy
WjAzMTEwLwYDVQQDEyhBOTE1NEFDQThGOEEyRjU2QTRDRjFEODBCRjA3MzVGQzEw
QzhBNEZDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7vFoLVZQyH+
4HBARkooZTZ9Sv00oakbTv/WppX8mE9/uCsh9VU7rdahNrnna4iG0FcknAkreC/s
HKXp3vqA1271332ZmLAbZQtJPR8+Ukvg3ZTtliSCLLwNp0KAczTghFWt/M+UMVSi
Bllzn0NvijchcbPF3rnjJ1AtmVZvlRpmCthE5/5Mm0JLgt/tgb6Yp0FHDKPn0d/g
4tOQtoxUSkteuUUC0GccBWE2Cn+VoK5WN5gi8bUHW7i+WCCRHXK3UNDM3Am6ashP
AL4S8GVd/vTL1qgcE1qOUq6kohvhaiUhQ+DmkVi0O3+sscZPVEFKhWao5pnGkuBS
MjcxB+sOdQIDAQABo4ICtjCCArIwHQYDVR0OBBYEFKkVSsqPii9WpM8dgL8HNfwQ
yKT8MB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv
RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3
ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTY0
OTBmNDQ1M2I3Yi8wLzMxMzUzNzJlMzIzNTM0MmUzMjM1MzIyZTMwMmYzMjMyMmQz
MjM0MjAzZDNlMjAzMjMxMzEzNTM4MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKd/vwwDQYJKoZIhvcN
AQELBQADggEBABy+KJigYga8zjH5Cfsvrmy/7HaOWOmKVCm8j+nNYXj9iFvafOGq
u6RX8AmNz+UJREEJGvC5KMZOCiva6TWGrrsBwkFSVrEgRLsSDeBIK4PSZdUzmStV
0GvrvKBp90g0WqKie/yKUzDacQMLm+fD0yqLjIbFKHcy9sX/GwWG8f/0mLwHgf1f
+HLASohTdFjSL5okQYcDxrEXV8z0r5k1AcVkORdr+SAG06L6kDheY6CRDA0ufOUj
r9iJK1wa9udpjdyVBtn75o3lv6HXat8wqeS3jos0u985HCMAwnUh0gLJZj5sVqDL
yf9ARCLASs5Xy+vTKiysOcNXKIou2sIdyPA=
-----END CERTIFICATE-----