Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/5fe5b3b0-fed8-3ee6-aeab-a2b6d497806c.roa
File:                     5fe5b3b0-fed8-3ee6-aeab-a2b6d497806c.roa (raw, json)
Hash identifier:          13Zzv/sTYlpy0CtjSHa9gQ/7uHwXiYjvPKvq/CBdANo=
Subject key identifier:   4E:A9:12:01:FC:97:D4:58:19:FA:BD:04:24:76:E3:08:B4:3F:AF:AC
Certificate issuer:       /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial:       010D0C9F4328576D51CC73C042CFC1730A831189
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/5fe5b3b0-fed8-3ee6-aeab-a2b6d497806c.roa
Signing time:             Wed 01 Jul 2020 13:13:48 +0000
ROA not before:           Mon 24 Sep 2012 04:00:00 +0000
ROA not after:            Sat 24 Sep 2022 04:00:00 +0000
asID:                     397797
IP address blocks:        35.62.0.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:0a:83:11:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
        Validity
            Not Before: Sep 24 04:00:00 2012 GMT
            Not After : Sep 24 04:00:00 2022 GMT
        Subject: CN=9682f730-d796-4807-908a-0fa336bdbc4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b0:a0:4d:44:78:1f:85:cb:38:6a:5e:14:ed:
                    ba:e4:5c:78:c1:82:7b:6a:32:eb:d1:49:e1:07:4c:
                    88:da:d5:54:17:7d:55:76:23:89:51:14:af:a3:f5:
                    cd:1b:ab:b8:85:38:1b:18:9a:14:d5:bd:e6:2e:5f:
                    bd:15:bd:7d:20:0d:c8:b5:59:9e:62:34:a1:9e:9e:
                    0c:18:13:17:0c:07:52:75:45:80:64:f7:fa:62:f6:
                    90:c5:57:35:7c:75:8d:30:ca:86:0b:df:e8:8e:e2:
                    b5:c1:7b:95:55:a4:29:10:28:cd:b1:19:a6:9e:3e:
                    c3:cc:4a:bd:0e:12:38:75:91:ce:fc:26:e1:d7:02:
                    58:ce:74:b6:5d:be:77:0e:02:ca:1d:63:e7:c3:b7:
                    8e:38:cc:8c:32:22:14:b6:a1:12:81:1f:b6:f5:aa:
                    b5:1b:77:20:28:18:f4:89:83:22:f0:59:24:3f:ef:
                    1d:45:e3:bc:01:bd:08:06:24:55:bc:1d:68:95:ec:
                    1f:db:62:d4:37:fa:db:39:de:02:ef:aa:14:a5:d5:
                    63:5c:1b:b3:c2:13:4f:89:ea:7c:5c:81:79:82:84:
                    80:65:aa:3f:88:24:47:b1:92:57:14:bd:7f:bf:95:
                    7c:67:d7:2b:ce:80:0f:5d:d8:59:44:09:d2:ba:ce:
                    99:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:A9:12:01:FC:97:D4:58:19:FA:BD:04:24:76:E3:08:B4:3F:AF:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/5fe5b3b0-fed8-3ee6-aeab-a2b6d497806c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl

            X509v3 Authority Key Identifier:
                keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.62.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:70:2b:c9:60:01:9e:a8:39:ab:74:4a:35:44:64:bf:30:fb:
         4e:d7:1f:67:52:03:23:ac:93:d4:68:f3:81:58:f6:bd:25:80:
         d4:40:85:ca:b7:75:bb:74:86:ad:72:21:cc:3d:92:95:d6:1a:
         c0:f8:47:ab:e0:bc:96:c5:8f:b0:b5:b2:50:51:a8:9e:89:39:
         7e:15:e6:41:fd:bd:5b:d1:1d:7a:6e:14:9c:c4:b4:8d:12:56:
         ac:a9:69:3e:f3:3b:42:54:be:e3:d6:fa:d6:67:da:a7:95:29:
         9c:31:72:57:c7:55:dd:58:06:16:12:6e:5a:ae:77:7d:88:89:
         f9:87:97:50:e8:5c:32:19:f2:29:cb:5b:8a:7e:d9:3c:ca:93:
         29:75:0e:17:2b:19:5e:fb:85:81:ee:cc:c0:e2:8e:32:c8:42:
         40:d5:42:be:13:ab:c7:b2:fa:7d:e6:f6:00:f6:5f:1f:ee:41:
         eb:85:05:16:23:a6:6b:0d:5a:72:d4:00:7b:7f:b9:56:b6:0a:
         97:7b:8e:7e:80:e8:83:86:7c:0f:82:69:e8:eb:2f:3a:0c:52:
         fd:67:2c:bb:6e:72:f2:f4:62:a2:c6:d6:de:cb:7b:42:36:89:
         dc:69:9f:7c:43:48:ac:5c:d8:86:ea:94:aa:d4:c1:e6:ae:d1:
         58:e8:4d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----