Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/93413899-b14e-3a18-981a-b82ba96960e1.roa
File:                     93413899-b14e-3a18-981a-b82ba96960e1.roa (raw, json)
Hash identifier:          Y+qcVRwpDeD//8Z8iuSdN306X+IwN2SYb2TPWhMhF6M=
Subject key identifier:   2E:DD:B7:BF:5C:7A:37:D1:70:F0:C4:DD:B5:B9:61:4E:5F:8C:6B:C2
Certificate issuer:       /CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
Certificate serial:       010D0C9F4328576D51CC73C042CFC1729CE22943
Authority key identifier: 8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/93413899-b14e-3a18-981a-b82ba96960e1.roa
Signing time:             Wed 10 Jun 2020 06:19:26 +0000
ROA not before:           Thu 12 Apr 2018 04:00:00 +0000
ROA not after:            Tue 13 Sep 2022 04:00:00 +0000
asID:                     40065
IP address blocks:        161.129.35.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:9c:e2:29:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
        Validity
            Not Before: Apr 12 04:00:00 2018 GMT
            Not After : Sep 13 04:00:00 2022 GMT
        Subject: CN=25d16bc1-0269-4ae1-9acd-f018d5a6195f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:86:bc:df:01:47:c7:8f:86:2c:e3:ea:f6:7a:
                    9e:a7:b2:29:f8:b8:3d:48:89:8f:34:5b:87:84:7e:
                    25:f2:18:cb:78:d2:0c:88:57:cb:43:a0:8d:b9:d6:
                    89:52:50:71:a7:3b:38:9c:79:9d:8d:18:bc:2b:d0:
                    3b:cd:06:d3:e4:b2:ef:30:ad:84:3b:44:1c:6b:4a:
                    7d:88:5d:5c:2e:b2:86:01:28:61:2c:56:a9:59:03:
                    34:d0:96:c6:05:ee:95:5e:4b:91:03:bb:39:e2:0d:
                    f5:e3:87:0c:10:b3:46:8f:e4:22:b0:6d:54:ad:e9:
                    6d:2b:70:4d:4e:5b:e7:53:56:1c:d1:44:b3:7f:46:
                    71:4a:c2:55:98:0f:df:74:8f:27:e4:9a:77:cd:8b:
                    46:23:b6:60:61:08:1d:ef:cf:48:82:6a:cb:07:8d:
                    7b:51:2f:9c:ee:83:f9:58:cd:8b:63:2a:6a:2a:ad:
                    1e:b6:91:ff:ff:16:70:16:81:02:8b:35:c2:5e:42:
                    7b:55:0f:39:34:b2:fe:fb:6b:94:29:93:63:92:fe:
                    80:ff:29:11:97:ea:fe:af:44:34:68:f5:46:11:57:
                    9c:04:ba:06:fc:5c:8d:cc:a5:f9:19:e4:2d:06:40:
                    25:10:aa:46:f4:84:0b:57:59:57:61:66:9d:db:9a:
                    e4:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:DD:B7:BF:5C:7A:37:D1:70:F0:C4:DD:B5:B9:61:4E:5F:8C:6B:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/93413899-b14e-3a18-981a-b82ba96960e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl

            X509v3 Authority Key Identifier:
                keyid:8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.129.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:51:9e:1e:b8:c0:14:d1:f3:11:2c:9a:6c:5b:8c:1a:7a:53:
         ed:cf:54:f2:76:05:c3:e7:a9:06:72:b7:05:ae:0f:ba:f5:fd:
         4a:bb:6d:a2:f4:27:7a:4d:ac:92:00:6b:63:48:5f:96:3e:80:
         57:5b:46:c6:f6:9a:8e:fc:00:1a:91:11:02:f6:23:e5:bc:5f:
         39:3f:20:92:55:69:81:be:29:fe:7e:98:2e:9a:7d:41:da:12:
         81:a9:50:1d:97:17:9a:89:af:ae:a0:1e:cc:1d:ff:00:ed:6c:
         ef:7b:ad:d4:8c:11:41:30:b3:16:fe:e8:e3:19:53:bb:42:11:
         bb:65:2e:b7:d4:fd:7d:7c:7d:ad:a3:e7:90:03:20:24:07:08:
         93:ee:87:16:3c:9c:73:25:18:ba:20:56:1d:15:ef:6b:2a:bb:
         fd:00:e8:37:bf:8c:42:e3:49:a6:39:d3:fc:97:d4:6c:2a:47:
         07:50:b6:09:27:7a:7b:2f:e0:eb:ab:3a:42:2b:48:90:a1:ca:
         f5:0e:87:9e:70:71:83:dc:0c:c8:d1:4e:07:6c:06:23:66:18:
         3b:41:6f:8b:33:ec:f7:35:7b:56:07:f2:a7:51:97:87:64:cd:
         7f:39:99:02:b5:d6:3b:45:ab:c1:95:f0:ad:c8:9f:4b:ca:4f:
         bf:50:b0:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----