Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/54d18953-3d31-3f56-8b55-c9e46ca48b6e.roa
File:                     54d18953-3d31-3f56-8b55-c9e46ca48b6e.roa (raw, json)
Hash identifier:          abuOWtbJFdx7MYzq1KFosp+eJV4N2T11b25jm29x64E=
Subject key identifier:   DF:24:53:A1:2D:89:A8:27:35:F1:68:F7:8D:6B:68:DD:B6:9F:60:C8
Certificate issuer:       /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial:       010D0C9F4328576D51CC73C042CFC1730A7CD68A
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/54d18953-3d31-3f56-8b55-c9e46ca48b6e.roa
Signing time:             Wed 01 Jul 2020 13:07:00 +0000
ROA not before:           Mon 24 Sep 2012 04:00:00 +0000
ROA not after:            Sat 24 Sep 2022 04:00:00 +0000
asID:                     395638
IP address blocks:        35.62.8.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:0a:7c:d6:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
        Validity
            Not Before: Sep 24 04:00:00 2012 GMT
            Not After : Sep 24 04:00:00 2022 GMT
        Subject: CN=0b8a6a2e-62bb-4363-9d7a-b8aaadae834b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:98:61:67:9a:e6:24:c8:27:21:2c:7b:2a:00:
                    90:0f:3b:f5:2f:b5:48:2d:c4:76:6d:ec:35:31:7d:
                    e5:02:c1:58:67:b3:b6:1b:34:83:c1:b1:62:e6:2d:
                    6a:f5:a1:36:3c:bc:4e:53:b3:e2:aa:73:c2:46:27:
                    ad:02:a4:47:65:de:0b:3f:f2:3e:82:00:39:e5:89:
                    70:bd:3c:55:ba:68:d0:34:e4:2d:4d:93:ac:e5:da:
                    a6:a9:e0:4f:d2:51:e0:08:dc:3d:a2:40:4b:9e:52:
                    59:05:9c:bd:ea:a0:dc:0b:51:33:0c:43:6a:39:7b:
                    8e:89:62:a3:d7:cb:ee:62:0b:a6:78:a1:77:fa:76:
                    2e:2e:00:5f:d4:60:56:bf:93:bc:65:97:7b:37:cf:
                    26:cb:e8:03:ce:1e:42:40:3f:78:f1:7a:ee:13:d6:
                    10:04:2e:cb:6e:ba:fc:a1:13:d5:1e:a9:50:ec:55:
                    58:6b:3f:d2:47:b4:f6:ff:6d:ea:16:dd:cb:97:31:
                    9b:9d:77:02:d9:1b:b4:9a:c9:5c:be:11:11:2f:33:
                    71:e1:ec:fa:fe:37:49:84:4f:ac:f2:b3:75:41:dc:
                    8f:22:ea:98:75:b0:d1:47:b5:24:b9:ad:1c:01:e4:
                    c1:ee:39:d4:b8:b0:14:e2:fe:d3:df:bd:39:ec:b6:
                    07:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:24:53:A1:2D:89:A8:27:35:F1:68:F7:8D:6B:68:DD:B6:9F:60:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/54d18953-3d31-3f56-8b55-c9e46ca48b6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl

            X509v3 Authority Key Identifier:
                keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.62.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:8b:07:79:fa:86:52:d1:3b:45:df:5e:a3:84:db:21:50:b8:
         fc:74:50:30:4c:44:e3:a3:1f:1e:88:c1:1c:dd:a1:a9:35:d6:
         38:f0:70:d1:7f:c7:1a:0b:bf:61:3e:91:86:fe:29:cc:44:3e:
         a3:0b:c6:66:f3:c1:bf:e5:fd:d1:a4:96:18:03:60:eb:62:b9:
         93:03:34:1a:91:17:ff:8d:3c:ca:19:c3:3c:2f:67:07:59:e7:
         cc:b3:1b:db:75:34:f7:1a:95:1d:ef:98:c0:33:a5:7e:24:d9:
         71:68:8b:92:b5:60:6a:1f:80:ef:16:ce:5a:11:2b:4b:51:63:
         a3:54:0c:ce:a1:e8:8e:b8:df:18:ca:6d:df:dc:f6:2d:49:49:
         ea:1a:68:40:f4:05:cd:ca:14:87:a9:e4:a8:cd:9d:b4:4c:03:
         aa:05:4b:6e:55:98:fe:ad:58:9a:0e:b9:a0:c2:02:dd:d4:c1:
         25:a9:37:00:1f:d4:33:88:ae:51:a1:45:53:b2:af:fe:b2:81:
         f3:d3:71:34:0e:95:c5:c4:90:f3:ae:10:45:41:30:ff:44:9a:
         7b:c0:97:63:b1:c8:df:18:22:a3:9e:5c:22:0f:95:4e:01:93:
         ab:f4:3c:78:75:c8:01:37:37:ce:29:94:62:ea:94:32:4d:59:
         cf:39:c7:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----