Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3235322e302f32332d3234203d3e2031323339.roa
File:                     3135372e3235342e3235322e302f32332d3234203d3e2031323339.roa (raw, json)
Hash identifier:          pnKSQxLxYcjJhw7mWBRDGIFRGQkcLINgGrofo+t6qy8=
Subject key identifier:   C2:CE:44:D9:0C:42:D5:EB:77:BB:AF:23:A1:72:6D:84:FB:AD:43:F2
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       4541EA3747342F5E9965E288A242DFE1BC632F0E
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3235322e302f32332d3234203d3e2031323339.roa
Signing time:             Sat 11 Feb 2023 03:51:13 +0000
ROA not before:           Sat 11 Feb 2023 03:46:13 +0000
ROA not after:            Sat 10 Feb 2024 03:51:13 +0000
asID:                     1239
IP address blocks:        157.254.252.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:41:ea:37:47:34:2f:5e:99:65:e2:88:a2:42:df:e1:bc:63:2f:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Feb 11 03:46:13 2023 GMT
            Not After : Feb 10 03:51:13 2024 GMT
        Subject: CN=C2CE44D90C42D5EB77BBAF23A1726D84FBAD43F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d7:78:a3:6a:91:0d:40:c0:89:91:61:e6:01:
                    26:f7:49:ca:f5:1a:be:ec:73:48:8c:90:8e:40:b2:
                    cd:5e:22:dd:b6:be:7f:64:a6:25:20:de:e4:fc:a9:
                    50:bf:2f:23:08:13:5a:42:f4:a8:bd:8e:30:e0:70:
                    8e:d4:b7:55:3b:eb:d3:86:4c:0e:96:f8:bc:4d:4c:
                    67:18:f0:ec:eb:f4:7e:3b:b2:90:b8:5d:ea:dc:f8:
                    55:2a:76:60:df:09:cd:45:32:30:9d:5d:f4:fb:ba:
                    8e:10:7f:b5:b8:af:c1:a8:05:9b:ad:5d:6e:b5:fa:
                    67:f1:3a:fa:20:3e:aa:5c:62:bf:39:df:7b:04:17:
                    50:91:d7:02:d3:c2:36:6b:7f:7c:2f:bd:21:ba:36:
                    af:ed:db:79:5d:67:e9:0e:cb:16:0b:f0:6b:a0:60:
                    56:8d:ae:74:1b:9a:41:27:5c:02:ad:36:c2:2c:a5:
                    cb:88:39:39:7b:7b:a6:ba:38:d5:f7:51:33:7e:9c:
                    7f:04:de:75:5c:37:02:73:b2:7c:30:6f:f9:54:a8:
                    70:b4:c5:17:e6:fc:fa:a2:70:5c:a3:99:40:32:0d:
                    e2:a7:ac:ec:ad:b0:24:9e:e4:6a:e3:f2:53:a3:e0:
                    71:b4:e2:6f:86:86:89:77:e1:64:85:15:46:5a:e2:
                    ee:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:CE:44:D9:0C:42:D5:EB:77:BB:AF:23:A1:72:6D:84:FB:AD:43:F2
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3235322e302f32332d3234203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a5:df:16:b4:f1:70:ef:ec:1b:45:eb:f5:99:ee:e2:bc:f4:10:
         91:bf:80:6c:35:fc:3d:c5:9e:4d:b4:fd:d8:31:53:34:5d:e6:
         d1:59:82:00:1b:50:a9:c9:ff:89:1d:77:55:9b:e0:12:ea:99:
         33:43:08:1d:28:4f:86:56:45:50:60:6b:da:43:f7:06:65:3b:
         1d:5d:e2:2d:bd:65:fe:4d:e5:a8:33:c0:e4:1e:8e:3a:0d:c0:
         f9:27:a4:2d:99:1f:33:41:70:22:96:57:26:25:7b:ba:52:5e:
         99:1f:b6:7d:49:ce:d2:5a:6a:bd:28:0d:28:2d:e5:7f:75:5f:
         db:4f:2b:4e:cd:fe:4b:91:15:7b:29:f3:00:6a:f3:e9:7f:f5:
         00:8c:f8:bc:e2:d4:57:25:34:fb:6a:8c:e5:29:07:5a:ed:4a:
         08:95:b6:8e:42:3d:8d:93:be:84:27:af:17:86:dd:b1:39:34:
         e4:da:e7:0d:63:a3:07:6d:2e:b7:5a:61:c9:4f:c4:1b:47:57:
         17:62:50:01:06:9b:d0:18:de:29:10:69:4b:a7:6d:9d:cb:af:
         ef:03:0b:cd:8f:54:92:94:6f:85:5f:3c:af:42:fe:93:28:b6:
         8a:71:41:51:da:c3:cf:4f:3b:c5:1e:18:b0:3c:6f:5f:d3:fe:
         17:78:62:23
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIURUHqN0c0L16ZZeKIokLf4bxjLw4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4
NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjMwMjExMDM0NjEzWhcNMjQwMjEwMDM1MTEz
WjAzMTEwLwYDVQQDEyhDMkNFNDREOTBDNDJENUVCNzdCQkFGMjNBMTcyNkQ4NEZC
QUQ0M0YyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNd4o2qRDUDA
iZFh5gEm90nK9Rq+7HNIjJCOQLLNXiLdtr5/ZKYlIN7k/KlQvy8jCBNaQvSovY4w
4HCO1LdVO+vThkwOlvi8TUxnGPDs6/R+O7KQuF3q3PhVKnZg3wnNRTIwnV30+7qO
EH+1uK/BqAWbrV1utfpn8Tr6ID6qXGK/Od97BBdQkdcC08I2a398L70hujav7dt5
XWfpDssWC/BroGBWja50G5pBJ1wCrTbCLKXLiDk5e3umujjV91Ezfpx/BN51XDcC
c7J8MG/5VKhwtMUX5vz6onBco5lAMg3ip6zsrbAknuRq4/JTo+BxtOJvhoaJd+Fk
hRVGWuLuPQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFMLORNkMQtXrd7uvI6FybYT7
rUPyMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv
RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3
ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTY0
OTBmNDQ1M2I3Yi8wLzMxMzUzNzJlMzIzNTM0MmUzMjM1MzIyZTMwMmYzMjMzMmQz
MjM0MjAzZDNlMjAzMTMyMzMzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAZ3+/DANBgkqhkiG9w0BAQsF
AAOCAQEApd8WtPFw7+wbRev1me7ivPQQkb+AbDX8PcWeTbT92DFTNF3m0VmCABtQ
qcn/iR13VZvgEuqZM0MIHShPhlZFUGBr2kP3BmU7HV3iLb1l/k3lqDPA5B6OOg3A
+SekLZkfM0FwIpZXJiV7ulJemR+2fUnO0lpqvSgNKC3lf3Vf208rTs3+S5EVeynz
AGrz6X/1AIz4vOLUVyU0+2qM5SkHWu1KCJW2jkI9jZO+hCevF4bdsTk05NrnDWOj
B20ut1phyU/EG0dXF2JQAQab0BjeKRBpS6dtncuv7wMLzY9UkpRvhV88r0L+kyi2
inFBUdrDz087xR4YsDxvX9P+F3hiIw==
-----END CERTIFICATE-----