Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/334f9994-9830-3bda-a427-b028866ddd8a.roa
File:                     334f9994-9830-3bda-a427-b028866ddd8a.roa (raw, json)
Hash identifier:          kkFfGCWJP/w6g7oX1y0WVEppXwv/fEx1OJKRSLGJxO0=
Subject key identifier:   0A:AF:BF:AE:31:5F:90:8B:7D:6E:86:3E:3F:CE:D1:0F:8D:2C:57:31
Certificate issuer:       /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial:       010D0C9F4328576D51CC73C042CFC1540B56DA34
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/334f9994-9830-3bda-a427-b028866ddd8a.roa
Signing time:             Tue 12 Apr 2016 16:38:41 +0000
ROA not before:           Mon 24 Sep 2012 04:00:00 +0000
ROA not after:            Sat 24 Sep 2022 04:00:00 +0000
asID:                     177
IP address blocks:        198.111.224.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:54:0b:56:da:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
        Validity
            Not Before: Sep 24 04:00:00 2012 GMT
            Not After : Sep 24 04:00:00 2022 GMT
        Subject: CN=c0afa547-f618-4b85-8dc5-3a775500a75b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1d:6f:45:3c:d3:36:c8:da:ce:ba:86:25:7a:
                    26:46:b0:9c:d4:99:79:a5:8a:19:4c:08:d0:42:58:
                    f9:e4:03:bc:88:86:52:e2:93:08:68:85:31:e0:cc:
                    98:6a:77:5a:92:de:f5:bd:bf:3c:8d:9e:46:03:d1:
                    10:e3:e2:f0:58:e8:11:7c:c8:62:de:42:bf:2c:d0:
                    e6:2e:eb:6b:ce:8b:d0:05:b4:ed:5b:49:d8:86:1b:
                    ff:22:be:7d:c6:fe:b3:d6:59:f0:35:f6:e1:c8:23:
                    1d:de:c8:f7:1d:d0:18:db:2d:33:0d:0e:ee:93:d5:
                    0e:08:11:1a:01:a6:73:fb:73:f2:67:3d:26:1a:0c:
                    9e:8a:be:6e:7e:e8:b1:c0:e8:c0:c8:af:21:6a:a1:
                    ad:28:07:96:ea:3e:cd:9e:0b:f3:41:98:e5:cc:29:
                    98:b7:8d:01:67:df:70:c7:1c:a2:69:f9:26:9f:89:
                    aa:96:1c:68:ee:e0:a5:cf:d3:69:fd:b7:95:86:47:
                    43:91:5c:8a:34:05:33:72:77:fd:e9:c1:e0:c2:de:
                    d3:a0:e7:45:07:d0:f6:78:1c:a1:45:9a:85:33:ad:
                    2b:a4:a1:ed:ed:e4:62:68:f9:cf:fc:b6:50:bb:4c:
                    0f:81:3b:b6:78:d9:86:e3:b8:4a:fb:18:fd:68:f8:
                    86:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:AF:BF:AE:31:5F:90:8B:7D:6E:86:3E:3F:CE:D1:0F:8D:2C:57:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/334f9994-9830-3bda-a427-b028866ddd8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl

            X509v3 Authority Key Identifier:
                keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.111.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:94:d7:96:05:e3:8d:4e:85:da:3c:1d:57:af:f6:40:9c:ce:
         04:3e:88:be:24:e6:d9:5b:3c:e9:14:f8:b7:44:bf:5f:6d:2a:
         80:ca:15:53:5f:ed:9b:6e:47:d7:55:7e:21:bc:4b:4e:07:fa:
         05:bf:6a:82:5e:98:0b:13:d7:84:a8:e6:fb:5e:35:06:76:0d:
         4e:1d:ae:0f:c2:4b:08:38:87:45:a1:84:c9:af:1e:1c:9b:1f:
         67:b6:c1:43:c9:99:ba:5a:b5:b7:2f:d8:cc:66:52:e1:57:84:
         a5:1d:84:e9:51:4d:93:b5:c3:20:a2:74:bf:df:a9:33:fd:c9:
         0d:47:fa:39:a7:f6:3b:77:24:b1:5c:b3:cf:db:f0:bc:c0:bc:
         06:e6:33:01:22:bf:9e:ac:42:c8:b1:31:9f:bc:8c:f4:06:5e:
         c0:cc:8d:01:3e:c1:ff:13:f7:2c:5c:7f:ab:58:3b:22:46:2c:
         82:e7:11:9f:32:01:1f:c3:70:6c:13:33:df:32:a1:4f:70:4f:
         aa:4f:fc:3e:c3:6c:f0:86:ad:8e:16:77:91:95:95:17:31:10:
         f5:4a:3b:be:00:3a:8a:48:62:07:2c:8b:dc:41:bf:8c:a2:8a:
         e4:83:1d:68:fe:8f:5c:a1:5a:90:5c:7b:83:3f:3d:41:0e:09:
         c9:fb:a0:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----