Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/01d8c868-2906-3f52-bc90-e1a363a7e11d.roa
File:                     01d8c868-2906-3f52-bc90-e1a363a7e11d.roa (raw, json)
Hash identifier:          Kz2i4sk/jfK6XTJnxh7MVnQuzZ7RwQu8jZVIU2xh4TQ=
Subject key identifier:   E1:A5:8C:00:2A:E7:91:6F:E0:CF:05:A6:20:35:06:85:8C:FA:9D:E6
Certificate issuer:       /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial:       010D0C9F4328576D51CC73C042CFC16147CC2A7E
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/01d8c868-2906-3f52-bc90-e1a363a7e11d.roa
Signing time:             Tue 30 Jan 2018 16:00:18 +0000
ROA not before:           Mon 24 Sep 2012 04:00:00 +0000
ROA not after:            Sat 24 Sep 2022 04:00:00 +0000
asID:                     237
IP address blocks:        35.70.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:61:47:cc:2a:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
        Validity
            Not Before: Sep 24 04:00:00 2012 GMT
            Not After : Sep 24 04:00:00 2022 GMT
        Subject: CN=a1202349-958d-40c1-8a17-c95987165522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:be:aa:2c:d9:8e:34:db:e3:1f:26:88:cd:f7:
                    ee:ba:60:77:6b:ae:4e:dd:08:9f:8d:ce:19:fd:7c:
                    d7:a1:91:c1:ec:9c:85:d3:1e:ea:74:5e:90:d3:01:
                    4e:99:e7:3f:00:b2:68:7f:6c:82:eb:33:44:39:eb:
                    0c:64:57:33:32:c0:35:f2:73:67:df:70:44:d9:aa:
                    f3:32:90:00:12:88:8a:aa:22:64:ad:50:e4:67:a2:
                    b4:0f:b8:fa:b4:b9:ed:11:5c:1f:54:3a:f9:1f:3b:
                    40:83:e8:96:c0:19:44:f6:62:3d:e0:05:25:2f:2a:
                    3f:73:99:b2:5f:fe:0f:c2:c6:f4:e2:a9:d7:7d:da:
                    5c:fb:26:96:ea:9b:0c:4d:65:1d:57:42:90:a5:c0:
                    ef:3a:dc:96:d4:62:9a:5c:64:ef:5b:de:6a:56:63:
                    fa:b4:37:9c:94:3e:d9:88:54:15:7e:f3:8c:ab:ab:
                    06:75:de:d2:29:4a:ce:31:03:bf:78:5a:76:a7:a2:
                    a0:c9:50:6e:04:7a:a8:16:b5:73:8b:98:ca:a7:77:
                    fa:2a:80:c6:da:70:73:0d:ef:87:87:19:fd:f1:46:
                    00:48:de:23:94:74:4b:c7:ed:41:b2:01:b4:32:88:
                    78:bf:12:dd:61:b8:f0:4d:bd:1d:d2:92:e6:11:18:
                    3c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:A5:8C:00:2A:E7:91:6F:E0:CF:05:A6:20:35:06:85:8C:FA:9D:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/01d8c868-2906-3f52-bc90-e1a363a7e11d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl

            X509v3 Authority Key Identifier:
                keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.70.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:f1:18:5b:66:67:c9:95:53:f1:80:5f:23:79:49:d7:64:e5:
         52:16:f8:0e:86:db:c6:fd:d4:1c:1a:95:21:20:1c:c3:41:a0:
         e5:a1:70:ee:84:c5:03:52:c7:ed:c1:82:18:f4:8a:9a:38:ad:
         c9:3e:05:3d:fb:38:0e:33:47:36:be:af:b0:ef:0d:31:30:47:
         e4:3c:82:78:50:b6:7c:f2:13:cd:0c:fd:cd:52:51:b6:7b:0e:
         34:15:c1:e0:e7:c0:e5:10:02:26:a3:84:2a:1c:76:93:e9:77:
         7c:e1:89:f7:a8:72:b3:c4:78:36:0c:13:4a:29:9a:04:b1:f3:
         7c:f4:92:63:89:c0:c4:47:ca:09:27:fa:46:77:b0:0c:3e:dc:
         14:9f:b6:68:20:eb:87:33:d6:e9:10:69:6e:c6:45:38:04:8e:
         7f:fe:5c:10:85:46:52:4b:26:5a:0c:95:5e:7c:07:f1:bc:38:
         ea:b4:f1:2c:34:5d:6b:fb:31:46:cc:52:33:2e:13:60:a8:79:
         6f:2f:64:50:88:59:ae:7d:72:a2:a1:15:c9:1f:ef:34:cd:e1:
         58:bf:6c:b8:5f:fb:b7:d4:7f:d5:85:1a:23:1c:7c:51:2b:60:
         78:b2:d8:91:09:a9:4c:b1:4a:72:62:c5:b6:f9:1e:27:97:d1:
         8b:a0:51:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----