Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/02af06f5-4973-3f47-b545-f4aa09bfd52b.roa
File:                     02af06f5-4973-3f47-b545-f4aa09bfd52b.roa (raw, json)
Hash identifier:          NfCPZENSL6pRcNTpOvqr0JNkEvr8xwOtVwDBxGeZWXU=
Subject key identifier:   A1:DC:2B:F0:98:EF:88:3E:90:70:ED:E4:28:C3:3C:96:ED:CC:37:6A
Certificate issuer:       /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial:       F8D2E0C6F9171504CD2FB558FDD26A60B288C5
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/02af06f5-4973-3f47-b545-f4aa09bfd52b.roa
Signing time:             Mon 01 Oct 2012 20:16:33 +0000
ROA not before:           Mon 24 Sep 2012 04:00:00 +0000
ROA not after:            Sat 24 Sep 2022 04:00:00 +0000
asID:                     237
IP address blocks:        207.72.0.0/14 maxlen: 14

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            f8:d2:e0:c6:f9:17:15:04:cd:2f:b5:58:fd:d2:6a:60:b2:88:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
        Validity
            Not Before: Sep 24 04:00:00 2012 GMT
            Not After : Sep 24 04:00:00 2022 GMT
        Subject: CN=d1824b99-ca50-408e-aea0-3f252f6b729b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:8b:3c:81:66:12:f5:5f:75:5e:dc:d7:22:cc:
                    5a:e0:5f:b6:d4:d2:16:69:7b:ae:ae:30:bb:fd:07:
                    71:e7:88:ea:e4:fb:84:1d:5e:e3:f9:cf:0a:d5:51:
                    f8:4d:2b:9b:20:f6:a8:5d:0c:64:5d:ce:80:30:33:
                    aa:bb:d4:af:e6:06:36:b4:76:2a:9b:db:9a:c0:de:
                    92:ce:5c:60:66:2d:76:69:00:88:9c:63:97:1f:75:
                    ba:12:36:3f:6e:a8:1d:18:b3:60:4e:e9:c9:36:e6:
                    03:f1:7e:de:c5:6c:ef:ff:c0:e7:82:9d:95:e0:c6:
                    00:69:9d:99:66:6c:d4:9d:8d:14:bd:ff:4e:bd:7b:
                    28:66:75:13:bf:af:21:1a:e2:fe:a2:5d:6b:33:59:
                    af:c9:d5:53:8e:bd:1b:dc:0b:c2:67:4f:3f:35:70:
                    4f:85:55:78:e4:47:b0:73:cc:4d:cd:2b:24:14:1a:
                    e5:97:03:15:98:41:24:ec:fa:4f:6e:ad:88:21:cc:
                    a7:6d:10:f0:0d:d4:59:63:40:0d:67:f6:02:d7:96:
                    93:45:ff:e5:32:6a:ab:63:73:57:9f:02:b1:6f:91:
                    a5:0d:f5:33:e4:bd:25:d2:03:dd:6c:0c:d1:96:89:
                    e6:c0:a7:98:89:c2:a1:ba:ab:9b:bb:ab:c1:d5:da:
                    34:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:DC:2B:F0:98:EF:88:3E:90:70:ED:E4:28:C3:3C:96:ED:CC:37:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/02af06f5-4973-3f47-b545-f4aa09bfd52b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl

            X509v3 Authority Key Identifier:
                keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.72.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         5b:d3:3a:83:cf:74:7a:60:38:88:48:68:38:e1:f1:2c:e4:42:
         84:c3:21:11:ed:5e:91:4b:bc:f4:cd:4d:7c:9a:d6:82:a6:df:
         e6:c1:51:f1:aa:28:06:45:27:dc:e5:f4:8c:81:42:18:94:95:
         b4:f7:9e:13:50:fa:49:8f:c2:ee:76:01:32:c0:51:43:af:48:
         45:e9:c2:ea:c3:5a:e6:a5:80:1d:a6:9f:04:9f:ca:3a:69:a0:
         b1:3e:e9:d7:98:fd:dc:c3:af:b0:b9:17:f8:cb:5a:44:ff:d1:
         8a:cb:83:a7:2c:bb:2a:17:cf:d3:78:cc:79:ca:ed:ab:b7:dc:
         e5:4e:97:c1:00:e1:37:a8:5d:67:fc:38:13:a5:82:2f:f6:93:
         58:ea:c3:c5:a6:5c:01:fd:38:ef:4c:39:28:2c:16:41:27:f7:
         b7:be:96:93:dd:43:61:f4:a8:3f:c6:07:f8:55:60:09:e1:07:
         ef:d0:b2:f3:82:6f:02:a9:35:e5:94:a0:bc:32:2f:cf:d9:d3:
         1d:64:4b:84:58:28:65:fa:db:45:5e:ac:82:29:ac:d9:aa:3e:
         16:b6:ac:0a:47:80:95:35:46:5a:7e:5f:8f:3a:e4:9a:cd:64:
         0d:91:f1:74:41:4e:a5:c6:bd:ac:79:03:5d:51:97:6c:84:d1:
         37:8d:2d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----