Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/0ca9f925-b539-330f-abc9-1b2e3e5f91eb.roa
File:                     0ca9f925-b539-330f-abc9-1b2e3e5f91eb.roa (raw, json)
Hash identifier:          ETxy314eCDUCFRjxeSLRnMYaQVmcqYSpAAe1nDlyDxk=
Subject key identifier:   87:3A:07:9C:8A:D9:51:CE:B8:53:BD:25:5A:44:F7:03:B3:15:E9:1B
Certificate issuer:       /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial:       5C496E12C1C0B9F7F148A21309C8C4CC2F8DF1
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/0ca9f925-b539-330f-abc9-1b2e3e5f91eb.roa
Signing time:             Wed 08 Oct 2014 20:19:59 +0000
ROA not before:           Mon 24 Sep 2012 04:00:00 +0000
ROA not after:            Sat 24 Sep 2022 04:00:00 +0000
asID:                     237
IP address blocks:        207.74.132.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:49:6e:12:c1:c0:b9:f7:f1:48:a2:13:09:c8:c4:cc:2f:8d:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
        Validity
            Not Before: Sep 24 04:00:00 2012 GMT
            Not After : Sep 24 04:00:00 2022 GMT
        Subject: CN=c4aa36f8-ec79-4908-bc6b-44daeb8861a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a2:e0:89:de:17:0c:53:9e:db:ce:ea:07:1f:
                    46:40:ee:9e:30:56:ae:02:18:f6:02:de:c2:1e:86:
                    4f:0a:26:e5:ae:9a:90:1d:07:71:1b:af:13:a6:50:
                    af:3d:ea:0a:3d:e4:e2:91:41:3a:54:9e:5e:2f:42:
                    68:b2:0e:21:19:bd:28:ac:f3:89:2c:77:95:67:b4:
                    08:4a:4c:48:8d:c3:d7:91:10:e6:bc:18:da:92:d6:
                    da:c5:91:f7:89:2f:90:18:dd:c8:47:69:ab:40:7e:
                    75:2e:42:5f:53:97:b8:3b:6b:da:3d:de:ec:84:62:
                    55:78:c9:dd:3c:3e:a0:03:d9:fb:8d:42:aa:4d:a6:
                    e4:19:cb:e3:86:24:a7:d3:86:01:4c:f2:81:23:20:
                    2a:d3:12:7f:20:95:5c:3d:4a:8d:95:8a:9a:76:d9:
                    0f:0f:38:1c:9b:61:e8:c3:14:21:a6:26:35:d2:a6:
                    b7:81:eb:46:56:63:fb:a2:9b:b5:ef:fd:a9:f5:27:
                    fa:63:d0:56:01:53:df:34:47:38:af:8c:53:22:21:
                    98:60:70:0d:96:0a:fd:85:38:7e:be:fd:6c:27:74:
                    1b:ed:fa:3a:ea:d4:47:1e:4d:fc:37:9e:50:6b:6e:
                    fb:d5:9b:69:a6:d9:26:e6:5c:c4:b5:b0:63:f1:7a:
                    5c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:3A:07:9C:8A:D9:51:CE:B8:53:BD:25:5A:44:F7:03:B3:15:E9:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/0ca9f925-b539-330f-abc9-1b2e3e5f91eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl

            X509v3 Authority Key Identifier:
                keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.74.132.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:0c:24:1f:50:8c:81:ec:8a:fc:44:49:11:72:87:4a:e5:66:
         12:5c:e6:41:8f:71:b5:4b:41:3a:89:75:46:a7:c4:ff:68:9a:
         e7:a8:22:66:52:24:59:d8:6e:85:08:c9:2b:90:85:50:68:30:
         ee:fc:48:af:d9:63:a0:49:77:13:80:1f:db:37:7a:83:e6:34:
         d9:49:a3:7b:05:5c:13:01:f1:3e:d6:49:0b:c1:d9:41:89:dd:
         82:a4:7f:5f:40:8a:0f:5c:16:3a:c5:f1:26:3b:4c:d2:c6:27:
         dd:c8:04:5f:e0:c6:7e:c6:20:0b:9b:09:79:d4:a6:dd:05:f0:
         4a:85:ba:c2:36:0e:ee:10:22:14:7f:ff:fa:c8:5d:4b:ea:e9:
         44:15:a5:fe:df:5e:c4:cd:03:11:3f:a1:1e:e2:69:ae:b7:e2:
         be:21:de:b8:49:df:91:58:d1:d2:e4:d8:02:e7:a6:bf:9d:be:
         4f:59:38:69:85:22:c5:f5:73:e1:35:1d:5b:a5:0f:83:7f:69:
         60:bd:46:e8:1c:52:65:08:14:ff:64:38:45:88:d6:5f:e8:65:
         57:94:ba:29:09:96:7b:11:ec:7b:6d:79:7f:3c:af:ba:3d:92:
         05:9e:a5:98:75:ec:b3:7a:a7:24:05:81:73:5c:7f:56:62:a8:
         d2:94:b9:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----