Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162/b101783d-1d14-375d-ad63-5ee4b33d56a5.roa
File:                     b101783d-1d14-375d-ad63-5ee4b33d56a5.roa (raw, json)
Hash identifier:          CU1BT0sFrjmgJNLGQSWnciXHXOD70+phUWhwEDPvrSE=
Subject key identifier:   95:FA:DF:68:82:5F:38:17:A9:45:E1:B6:63:16:41:37:71:AC:74:0E
Certificate issuer:       /CN=1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162
Certificate serial:       88F245906DF9481F83B30B8034507A3FC251F5
Authority key identifier: FE:65:31:2D:12:1F:A3:BA:82:81:F5:C7:B0:AC:CF:1D:CB:F0:07:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162/b101783d-1d14-375d-ad63-5ee4b33d56a5.roa
Signing time:             Sun 03 Feb 2013 20:26:27 +0000
ROA not before:           Sun 03 Feb 2013 05:00:00 +0000
ROA not after:            Tue 22 Feb 2022 05:00:00 +0000
asID:                     5728
IP address blocks:        199.37.181.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            88:f2:45:90:6d:f9:48:1f:83:b3:0b:80:34:50:7a:3f:c2:51:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162
        Validity
            Not Before: Feb  3 05:00:00 2013 GMT
            Not After : Feb 22 05:00:00 2022 GMT
        Subject: CN=3fd8f4d7-b1a7-4b1d-97b3-c4f436bbd2ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:5e:81:a2:36:58:bf:aa:31:68:8a:06:c4:c7:
                    4f:5b:57:e4:76:d0:a5:43:c2:f2:7e:59:1b:2a:90:
                    f8:ac:34:f0:e5:ec:a8:b2:67:fc:26:e3:32:01:be:
                    8d:47:df:53:16:e8:e4:69:c9:0c:3b:07:b4:4e:9b:
                    54:79:ad:7e:3d:15:96:4a:e6:0d:8a:8d:b8:88:b5:
                    fe:0d:d1:21:62:44:33:f8:48:d6:43:fd:de:02:0a:
                    5b:36:af:0e:9a:5a:7e:0f:52:21:f0:7c:bd:32:1f:
                    0b:f3:f0:4c:58:6b:55:74:24:31:52:f0:cf:11:a3:
                    8c:3a:e6:6c:12:67:10:03:b3:31:6f:7e:f0:88:96:
                    83:a5:45:bd:31:f0:15:35:a4:74:27:a6:bf:63:73:
                    cd:88:20:87:ad:9a:01:2e:98:f6:f7:85:b3:ad:a8:
                    08:43:6a:67:ff:23:ef:05:09:0b:d7:f3:bb:20:4b:
                    12:73:e9:14:ac:11:26:e0:53:32:3c:63:3a:4b:72:
                    c6:b8:20:bc:88:63:2e:4e:05:b6:92:bc:e1:12:41:
                    7c:46:5d:eb:dd:ef:67:b0:ea:3f:7a:ad:d0:b0:1a:
                    02:d9:f0:2a:37:44:e1:5a:f2:67:81:a6:a9:16:af:
                    88:dc:84:ac:14:bc:de:ba:2f:7b:bc:87:d7:7f:ed:
                    b8:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:FA:DF:68:82:5F:38:17:A9:45:E1:B6:63:16:41:37:71:AC:74:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162/b101783d-1d14-375d-ad63-5ee4b33d56a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162.crl

            X509v3 Authority Key Identifier:
                keyid:FE:65:31:2D:12:1F:A3:BA:82:81:F5:C7:B0:AC:CF:1D:CB:F0:07:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.37.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c8:aa:d0:79:f1:25:6d:c1:b0:c5:39:f3:28:a8:cf:12:b1:01:
         b1:70:42:f9:cd:a6:16:92:08:a2:9e:6a:c9:ea:48:58:ee:f0:
         d8:2b:69:f3:e7:75:48:3f:77:dc:f9:87:4d:00:73:f2:19:64:
         87:a8:69:b8:83:87:b0:74:45:50:50:b6:1c:bb:bb:67:92:a7:
         e0:bf:1a:aa:01:a2:82:9c:6c:94:76:da:9d:1c:04:bd:74:b2:
         54:b9:a8:b8:12:a0:92:99:23:48:04:d7:b1:9f:ab:d5:f5:4a:
         de:5d:42:4b:51:23:99:7f:ea:c0:47:15:51:2b:de:86:dd:82:
         4a:6e:9f:30:02:01:b9:d8:3a:70:41:75:d8:e1:2d:6b:0e:d0:
         d0:a1:51:22:13:01:85:cc:56:f1:21:cb:08:72:10:34:52:d1:
         7b:d2:4f:be:28:3a:83:2f:51:15:5c:b1:59:7e:20:ee:3d:05:
         5e:26:0b:df:6b:43:21:68:8c:40:03:14:a5:c9:49:50:0a:fb:
         ff:21:bb:c4:91:99:e2:5f:92:73:71:7c:92:27:21:85:d6:6f:
         89:e4:37:53:47:db:5b:ae:1e:cd:ab:16:e9:2f:20:ce:06:f0:
         dd:95:b8:48:06:57:38:e7:83:c7:f2:af:b8:cf:3e:45:38:2a:
         86:a5:60:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----