Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/18b67475-91f7-317e-9490-d3e0a98a33a2.roa
File:                     18b67475-91f7-317e-9490-d3e0a98a33a2.roa (raw, json)
Hash identifier:          07JyNOJ9OTmA9J9B1QfNRHJ8SYCRy7M9FHpZ/E/URBQ=
Subject key identifier:   6A:72:13:6E:81:74:9C:AB:5D:27:20:30:A5:61:5C:0B:52:BD:03:4F
Certificate issuer:       /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial:       010D0C9F4328576D51CC73C042CFC169A11C28A7
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/18b67475-91f7-317e-9490-d3e0a98a33a2.roa
Signing time:             Thu 21 Mar 2019 16:36:11 +0000
ROA not before:           Mon 24 Sep 2012 04:00:00 +0000
ROA not after:            Sat 24 Sep 2022 04:00:00 +0000
asID:                     36375
IP address blocks:        35.6.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:69:a1:1c:28:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
        Validity
            Not Before: Sep 24 04:00:00 2012 GMT
            Not After : Sep 24 04:00:00 2022 GMT
        Subject: CN=b4e0ad81-f197-4cf4-ab3b-8b51c87e8298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:06:fc:0d:3b:f5:a8:bd:f3:fd:dc:ef:8c:9f:
                    1f:3e:e9:80:e6:32:86:ac:0a:46:a2:46:d3:52:62:
                    4b:cc:29:63:31:fd:b8:dc:e5:52:d6:42:f9:c8:fd:
                    71:d5:65:cf:5c:27:7a:fb:b9:fb:dc:39:96:ff:76:
                    5f:2c:c0:65:0d:0c:70:93:f4:4a:9a:d1:dd:22:89:
                    ce:bb:f0:56:f3:5a:06:98:4c:fe:65:a7:08:8f:6f:
                    40:b2:2b:ea:0b:0b:9b:0a:1f:87:8d:2d:fb:d3:b4:
                    56:3a:ce:62:44:0e:f4:b3:9c:ab:60:87:84:3c:0a:
                    4e:f3:d3:f2:6f:f5:6f:d4:7b:79:ab:3e:25:da:a7:
                    19:9d:81:53:af:e2:e6:db:9a:93:4a:b5:44:41:f6:
                    2a:ff:25:ac:8c:ed:ef:bd:09:a0:ad:96:6d:e2:0a:
                    6f:f8:e3:3f:d8:96:20:d1:ff:31:9b:6f:2b:d2:0d:
                    50:c9:ff:7e:b9:9a:17:16:b9:3e:ce:24:37:56:c1:
                    33:54:9d:b2:a5:9b:f4:8d:eb:f8:00:df:24:93:cd:
                    a5:29:09:2c:20:7d:c8:42:9a:a0:f5:c2:61:b9:41:
                    b5:e9:0f:e9:6e:d8:0c:20:f0:26:bf:44:36:df:20:
                    c9:28:0e:f6:ad:87:24:3c:0f:8d:df:49:e0:54:2a:
                    37:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:72:13:6E:81:74:9C:AB:5D:27:20:30:A5:61:5C:0B:52:BD:03:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/18b67475-91f7-317e-9490-d3e0a98a33a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl

            X509v3 Authority Key Identifier:
                keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.6.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:71:47:bd:e2:66:ee:c5:cd:35:68:e3:be:e2:78:e9:4c:e9:
         1b:68:f6:f0:ef:80:f9:a6:13:4b:3e:16:0d:9b:d0:97:02:8d:
         a0:77:ae:cd:b2:82:2a:ff:fa:ac:43:d3:28:1e:49:cd:ac:3f:
         89:db:77:c6:1a:98:1e:55:95:98:b3:6a:53:b9:5d:a7:ad:4d:
         b5:69:47:04:cc:c2:be:d0:9d:7a:c7:72:63:82:fe:dc:42:60:
         43:04:50:0f:42:14:b3:47:2d:1a:ea:9a:0d:26:7c:da:89:69:
         26:0a:d2:e2:46:85:59:06:7a:c4:62:b6:59:f7:f3:a7:f6:85:
         65:f4:7e:b2:6a:df:84:f9:86:cd:db:10:57:d2:c6:24:b3:05:
         ae:74:35:1c:ce:99:bd:cf:87:f9:31:00:31:c5:94:35:ca:d9:
         c7:7f:64:82:d2:51:c4:b3:6b:97:d2:50:ca:a2:22:62:84:5a:
         54:26:93:df:28:1e:ef:d9:84:89:eb:dd:f7:47:3e:3f:a9:25:
         f1:95:b9:4a:f4:24:8d:fa:b5:1e:a2:68:9f:07:11:dc:4f:22:
         17:ff:08:b4:7f:4b:8e:1d:11:ab:b2:4b:0a:d5:cb:a0:b7:80:
         81:b2:77:25:5c:b9:33:18:d8:e6:69:f3:51:cc:76:97:df:2a:
         8f:7d:ff:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----