Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/3634f688-9463-3f86-b3cb-8b128fc45bb6.roa
File:                     3634f688-9463-3f86-b3cb-8b128fc45bb6.roa (raw, json)
Hash identifier:          W9plRwDPYrG+jEEDy1oSeSuOu8W9QZsrfGZ07xmQCWw=
Subject key identifier:   2A:7C:7B:4F:34:B7:42:D6:81:CA:EF:39:35:AC:D0:85:0E:E5:B1:2A
Certificate issuer:       /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial:       010D0C9F4328576D51CC73C042CFC172C2F68360
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/3634f688-9463-3f86-b3cb-8b128fc45bb6.roa
Signing time:             Wed 17 Jun 2020 15:47:14 +0000
ROA not before:           Mon 24 Sep 2012 04:00:00 +0000
ROA not after:            Sat 24 Sep 2022 04:00:00 +0000
asID:                     36375
IP address blocks:        35.5.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:c2:f6:83:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
        Validity
            Not Before: Sep 24 04:00:00 2012 GMT
            Not After : Sep 24 04:00:00 2022 GMT
        Subject: CN=49d67d02-7aec-4d2a-b8f5-64010af71dfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:98:cd:68:cf:7f:35:f7:99:56:4a:12:d1:fc:
                    81:61:32:c8:b7:a3:9d:a9:1c:25:d9:f8:0d:87:0a:
                    a4:38:3f:f9:c4:b2:38:5a:f9:5c:06:b4:5f:3a:0d:
                    95:0d:bf:6f:9b:b4:42:52:e2:af:ef:13:b2:8b:c0:
                    69:bd:f0:9d:10:c3:a5:2f:38:dc:3a:fc:8a:a7:8f:
                    fb:01:ff:73:d5:00:a5:13:84:78:06:a8:b9:c1:79:
                    0f:41:a7:42:e7:20:be:3a:49:d2:61:80:20:d5:af:
                    4a:bf:0f:76:17:65:28:89:68:2e:cb:59:ae:9d:d5:
                    f0:78:8d:9a:48:e5:01:fc:5a:65:f4:ca:8e:48:a5:
                    81:f9:00:d1:24:91:ef:e0:e4:10:8c:97:0c:6b:7d:
                    df:69:69:b3:1b:0c:f3:ce:55:85:05:60:b2:17:f8:
                    52:86:64:09:8f:a5:f8:13:68:05:28:e7:18:bc:b3:
                    d5:aa:d8:9a:18:96:62:4b:74:87:a9:85:19:d6:12:
                    c7:49:7c:6a:07:2f:68:24:8f:d8:20:2e:58:63:54:
                    f0:ff:c5:28:98:bf:78:bd:21:0a:69:be:c5:50:0a:
                    44:18:2c:9c:c3:a3:14:9e:81:36:36:c5:9d:7e:5d:
                    7e:d9:dc:c3:98:c8:1f:9f:49:cc:92:82:dc:1b:23:
                    5a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:7C:7B:4F:34:B7:42:D6:81:CA:EF:39:35:AC:D0:85:0E:E5:B1:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/3634f688-9463-3f86-b3cb-8b128fc45bb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl

            X509v3 Authority Key Identifier:
                keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.5.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:c0:f6:78:69:3c:4e:72:47:a9:9c:55:d1:19:24:75:d2:26:
         3f:00:2b:25:9f:34:b7:b0:6d:21:90:14:2d:96:5c:67:4e:69:
         bd:78:f5:3e:e0:1c:47:d3:3f:c4:52:e1:ad:11:f6:d5:af:26:
         a8:13:ff:d7:5e:87:d4:20:04:6d:84:50:f5:c8:66:a2:e1:46:
         4e:ce:bd:b2:a1:3e:41:b9:8b:c5:7f:ac:f2:9e:ea:52:16:f5:
         03:f6:fc:99:c3:ff:a7:f3:dd:29:6e:ee:6d:6b:8f:40:d4:ba:
         ae:fd:e5:2b:c0:4f:4f:7a:24:1d:6d:53:b7:44:29:8b:12:a0:
         f7:f5:0f:71:29:ad:a7:0b:4c:c6:47:07:1a:8f:22:44:72:90:
         d2:fa:11:b0:ac:8f:41:bc:bc:1f:3f:e0:6b:2b:26:65:f5:79:
         13:8f:b6:7f:a7:cf:40:73:e5:63:8e:c7:89:8f:82:29:34:e6:
         c1:32:79:41:17:df:32:54:f9:d5:35:b7:75:5f:b4:c8:92:00:
         53:44:68:be:7e:3c:f4:e0:b8:91:8c:7d:e7:c0:60:ad:d6:3e:
         e4:0c:9c:f7:3f:91:60:8d:48:2b:57:5e:1b:77:91:f2:39:53:
         33:20:a7:46:32:de:5c:ee:37:5e:f5:07:d6:57:0e:d5:ff:81:
         6a:fc:42:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----