Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/1ad43038-4698-316d-bb1c-d1a54cdac354.roa
File:                     1ad43038-4698-316d-bb1c-d1a54cdac354.roa (raw, json)
Hash identifier:          f/wRtWSwNNs8tTet7RxzWuCuT4yoB7p+8JS6Pe9zX2g=
Subject key identifier:   C5:05:7B:2E:37:B4:C2:3E:51:94:B9:74:D7:A3:12:37:F2:28:23:F0
Certificate issuer:       /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial:       010D0C9F4328576D51CC73C042CFC154E83B17EE
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/1ad43038-4698-316d-bb1c-d1a54cdac354.roa
Signing time:             Wed 25 May 2016 14:04:27 +0000
ROA not before:           Mon 24 Sep 2012 04:00:00 +0000
ROA not after:            Sat 24 Sep 2022 04:00:00 +0000
asID:                     36375
IP address blocks:        35.3.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:54:e8:3b:17:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
        Validity
            Not Before: Sep 24 04:00:00 2012 GMT
            Not After : Sep 24 04:00:00 2022 GMT
        Subject: CN=9d47491f-6e42-4b76-a28a-a4e4c45d8f38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:48:e5:f1:61:c3:32:2d:cc:39:ee:42:06:e7:
                    62:96:ba:e2:16:ea:91:e8:70:8c:b1:f2:c8:36:0e:
                    84:3b:b8:79:b2:82:2a:be:cf:04:b3:fa:21:be:79:
                    76:f0:9f:7e:ae:11:9a:1a:c0:e6:bd:78:4c:fe:7d:
                    55:73:fc:ec:26:f7:a2:17:7b:f2:e7:10:28:1a:54:
                    40:ee:35:e6:73:34:19:17:eb:b2:19:f4:fb:49:9e:
                    8e:96:00:49:a1:69:6e:c9:c2:35:ad:19:5b:ef:ad:
                    cd:14:f9:58:60:4a:8d:c6:88:28:85:a7:fc:19:a9:
                    bb:5b:fa:47:c6:dc:5f:c6:c3:e8:18:a7:c6:22:45:
                    d8:0d:ac:8c:69:d8:72:ac:58:c8:37:58:c9:d1:c9:
                    00:8c:46:cf:cf:b7:39:73:75:c3:ac:97:b2:80:f4:
                    a8:5c:7a:9a:b9:2b:0f:6a:80:3f:ef:1a:5b:e2:db:
                    33:27:6c:7b:5b:3f:da:05:e3:de:33:99:bd:c4:a6:
                    40:d6:10:5b:1a:6e:0e:2b:ed:61:8a:e8:2b:cf:58:
                    65:f9:d0:0d:17:89:b1:0f:7f:2a:3c:2c:9c:67:39:
                    4e:d0:e4:5b:bb:70:57:61:90:87:91:97:54:55:6b:
                    d2:af:37:88:27:e5:36:b4:62:e4:c5:3e:f3:f2:93:
                    0a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:05:7B:2E:37:B4:C2:3E:51:94:B9:74:D7:A3:12:37:F2:28:23:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/1ad43038-4698-316d-bb1c-d1a54cdac354.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl

            X509v3 Authority Key Identifier:
                keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.3.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:2c:c3:40:c5:90:bf:ca:03:53:7a:3e:b2:47:d0:06:d5:76:
         29:fd:ff:42:8f:d8:1b:7b:cf:f9:0a:36:d0:b1:84:2e:e1:61:
         b0:45:db:f1:f7:00:ab:da:6c:a6:97:7b:63:eb:1c:a4:96:83:
         7b:03:80:97:5b:8f:ba:2b:bd:c5:32:18:e9:34:2b:e0:a8:e3:
         81:d1:6b:8e:89:10:7b:2f:f3:15:9b:e4:fc:1a:58:e2:11:c8:
         f9:d7:be:a9:97:5d:4a:39:25:69:f6:85:f1:0b:ce:64:b5:b6:
         51:3a:49:d9:84:93:53:89:ba:1a:b8:66:7d:aa:a9:43:9a:24:
         ab:42:d8:11:14:62:a3:60:91:1d:94:5b:a4:d1:30:8a:e3:66:
         d4:8f:2a:67:9e:7b:7e:10:6e:40:9c:85:a1:32:79:55:9a:df:
         a9:dc:12:11:d3:2c:0e:cc:5e:e5:4d:ac:34:71:bd:cf:1b:f9:
         e2:9d:bc:d4:e4:f7:8e:c9:56:9f:4c:d2:de:60:6d:72:92:53:
         bf:0d:56:6d:db:73:55:b0:5c:14:f8:19:2e:0d:63:8b:6b:24:
         7f:48:bc:f7:89:9e:f7:58:9b:41:b9:a2:09:a8:41:96:40:bf:
         a0:05:b1:d3:24:0e:46:2e:9e:8a:6d:8c:e5:81:00:dd:6c:8f:
         f5:e3:0f:4c
-----BEGIN CERTIFICATE-----
MIIGPjCCBSigAwIBAgIUAQ0Mn0MoV21RzHPAQs/BVOg7F+4wCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDhlZDMwNTBhLTQ2MDUtNDA5NC1iMzMxLWJiMGY4NzU4ZGVm
ZTAeFw0xMjA5MjQwNDAwMDBaFw0yMjA5MjQwNDAwMDBaMC8xLTArBgNVBAMTJDlk
NDc0OTFmLTZlNDItNGI3Ni1hMjhhLWE0ZTRjNDVkOGYzODCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAM5I5fFhwzItzDnuQgbnYpa64hbqkehwjLHyyDYO
hDu4ebKCKr7PBLP6Ib55dvCffq4RmhrA5r14TP59VXP87Cb3ohd78ucQKBpUQO41
5nM0GRfrshn0+0mejpYASaFpbsnCNa0ZW++tzRT5WGBKjcaIKIWn/Bmpu1v6R8bc
X8bD6BinxiJF2A2sjGnYcqxYyDdYydHJAIxGz8+3OXN1w6yXsoD0qFx6mrkrD2qA
P+8aW+LbMydse1s/2gXj3jOZvcSmQNYQWxpuDivtYYroK89YZfnQDReJsQ9/Kjws
nGc5TtDkW7twV2GQh5GXVFVr0q83iCflNrRi5MU+8/KTCqcCAwEAAaOCA1QwggNQ
MB0GA1UdDgQWBBTFBXsuN7TCPlGUuXTXoxI38igj8DCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGVkMzA1
MGEtNDYwNS00MDk0LWIzMzEtYmIwZjg3NThkZWZlLzFhZDQzMDM4LTQ2OTgtMzE2
ZC1iYjFjLWQxYTU0Y2RhYzM1NC5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzhlZDMwNTBhLTQ2MDUtNDA5NC1iMzMx
LWJiMGY4NzU4ZGVmZS84ZWQzMDUwYS00NjA1LTQwOTQtYjMzMS1iYjBmODc1OGRl
ZmUuY3JsMB8GA1UdIwQYMBaAFHGfdZ658v03sk/5i+9jcY7ATkwPMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvOGVkMzA1MGEtNDYwNS00MDk0LWIzMzEtYmIwZjg3
NThkZWZlLmNlcjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDACMDMFQGA1Ud
IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu
YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwCwYJKoZIhvcNAQELA4IB
AQBrLMNAxZC/ygNTej6yR9AG1XYp/f9Cj9gbe8/5CjbQsYQu4WGwRdvx9wCr2mym
l3tj6xykloN7A4CXW4+6K73FMhjpNCvgqOOB0WuOiRB7L/MVm+T8GljiEcj5176p
l11KOSVp9oXxC85ktbZROknZhJNTiboauGZ9qqlDmiSrQtgRFGKjYJEdlFuk0TCK
42bUjypnnnt+EG5AnIWhMnlVmt+p3BIR0ywOzF7lTaw0cb3PG/ninbzU5PeOyVaf
TNLeYG1yklO/DVZt23NVsFwU+BkuDWOLayR/SLz3iZ73WJtBuaIJqEGWQL+gBbHT
JA5GLp6KbYzlgQDdbI/14w9M
-----END CERTIFICATE-----