Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/34433a16-3754-3f6d-8d00-3dbf9b5a1f08.roa
File:                     34433a16-3754-3f6d-8d00-3dbf9b5a1f08.roa (raw, json)
Hash identifier:          0aUED4GzTxzGU5exYkSAbF59MXRzKIqO+HjtYkfIu48=
Subject key identifier:   FA:B5:B8:CA:60:91:AD:77:6A:97:4C:75:2B:F4:10:88:D7:A4:B9:FC
Certificate issuer:       /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial:       5ACF7254406A67E24A014F74006DCED7F66DDA
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/34433a16-3754-3f6d-8d00-3dbf9b5a1f08.roa
Signing time:             Mon 01 Oct 2012 20:31:30 +0000
ROA not before:           Mon 24 Sep 2012 04:00:00 +0000
ROA not after:            Sat 24 Sep 2022 04:00:00 +0000
asID:                     237
IP address blocks:        192.122.181.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:cf:72:54:40:6a:67:e2:4a:01:4f:74:00:6d:ce:d7:f6:6d:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
        Validity
            Not Before: Sep 24 04:00:00 2012 GMT
            Not After : Sep 24 04:00:00 2022 GMT
        Subject: CN=45c4207d-b011-4d51-9c69-db778bfe2950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ff:0d:d5:fa:1b:34:d4:73:43:ef:51:f3:93:
                    03:19:73:83:44:76:71:19:44:2a:4e:7f:ed:03:1b:
                    17:17:0a:77:ba:a8:7c:79:0e:f9:83:58:b0:e8:de:
                    4b:1c:cd:eb:53:b2:fd:d9:88:4f:fa:4e:36:14:82:
                    76:98:26:1d:cc:87:20:89:50:3f:5f:15:76:3c:3e:
                    57:4a:3a:58:10:23:cc:6c:87:f3:39:e2:eb:42:f7:
                    ea:4e:0a:14:df:a3:a6:8c:e7:37:91:22:e5:aa:5b:
                    ae:17:b1:3c:05:23:9c:ff:8d:3a:8e:ee:d3:8c:18:
                    1d:53:ba:a2:ff:6a:18:90:6a:c4:7d:cd:d4:e2:47:
                    12:1e:fa:00:3e:fd:3b:bf:2f:e3:2d:df:7e:50:83:
                    76:42:d8:9d:91:f9:ce:ab:88:4a:5c:77:d6:21:a4:
                    3e:8b:70:89:6e:c1:27:62:3c:aa:68:2a:bc:b4:94:
                    78:e7:49:fe:cc:1c:d3:dd:08:ae:98:74:ab:97:2a:
                    2c:a1:b0:84:e0:ee:b6:3d:cc:e1:ba:da:f0:c1:45:
                    26:3b:4e:72:7a:12:ec:96:90:d3:9c:c3:78:79:84:
                    c7:51:dd:92:52:07:0e:f7:f2:49:a8:75:46:05:ce:
                    71:46:87:69:b5:6c:93:bd:57:e3:e5:11:65:98:78:
                    6f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:B5:B8:CA:60:91:AD:77:6A:97:4C:75:2B:F4:10:88:D7:A4:B9:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/34433a16-3754-3f6d-8d00-3dbf9b5a1f08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl

            X509v3 Authority Key Identifier:
                keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.122.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:0f:fe:c4:32:23:c5:8e:58:3f:14:56:56:fb:e3:96:15:f6:
         96:94:c8:a2:c4:0c:44:96:b3:3f:5e:e1:56:6e:4e:f2:f2:c5:
         9a:73:53:64:89:77:00:2f:75:45:2b:4c:2d:53:e0:92:cd:a4:
         cc:ee:e2:8b:9c:dd:47:4e:a3:62:a3:b7:30:7f:4d:66:e7:e1:
         fd:a6:ca:d0:2f:3f:8e:26:f4:38:44:64:ed:18:0b:e9:b1:5c:
         ae:58:09:5b:bd:a2:35:96:32:64:7e:f1:09:b5:6b:96:b3:c5:
         40:8b:bf:3c:75:c3:a2:6f:1a:cb:fa:b8:cb:24:00:78:f4:ef:
         04:1b:61:b8:a1:74:69:90:1b:88:73:ec:7a:46:20:93:9d:b8:
         b9:6a:5a:34:cf:08:24:52:0a:c5:46:2d:45:eb:d7:33:b2:45:
         0a:b4:5e:7e:13:7d:78:55:8b:f6:28:dc:2c:eb:c8:eb:1d:11:
         29:79:24:fa:ba:0c:62:91:46:95:1b:47:b3:10:f5:32:6a:c0:
         47:9e:09:85:34:5e:fb:79:75:0f:4b:23:55:8d:bf:52:17:29:
         c5:35:65:3c:09:e5:f0:f7:ef:a0:07:1d:8e:8b:07:69:6c:9e:
         d7:be:f2:f1:41:46:d2:b8:e9:c2:ee:d8:ec:c4:77:cd:e3:f3:
         20:01:8b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----