Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/69475e5c-c0fe-31d4-bfbe-688e94aa800b.roa
File:                     69475e5c-c0fe-31d4-bfbe-688e94aa800b.roa (raw, json)
Hash identifier:          d49W2Nnv3WRn41OeL4UbgKDn6lGHCZzQNaO0RQvdS/A=
Subject key identifier:   78:BD:BB:2A:64:09:F4:20:E4:3E:74:46:55:26:3A:3A:74:2D:B8:D9
Certificate issuer:       /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial:       C79F529C2A24A4ABF0FECA8628806D43523F03
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/69475e5c-c0fe-31d4-bfbe-688e94aa800b.roa
Signing time:             Mon 01 Oct 2012 20:00:51 +0000
ROA not before:           Mon 24 Sep 2012 04:00:00 +0000
ROA not after:            Sat 24 Sep 2022 04:00:00 +0000
asID:                     36375
IP address blocks:        35.0.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            c7:9f:52:9c:2a:24:a4:ab:f0:fe:ca:86:28:80:6d:43:52:3f:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
        Validity
            Not Before: Sep 24 04:00:00 2012 GMT
            Not After : Sep 24 04:00:00 2022 GMT
        Subject: CN=32f50f09-4821-484a-938c-6f781d599ac2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:2e:13:3d:b5:0b:89:98:f9:73:fe:c2:a6:4d:
                    88:11:8b:4b:40:28:39:13:61:0a:78:95:41:46:02:
                    f0:8a:c4:c0:0a:a2:0d:40:63:0d:00:a0:92:22:20:
                    77:ba:62:b2:a8:56:1c:b2:cd:6a:66:8a:92:bd:6c:
                    4d:04:36:35:37:9e:2a:96:c5:c9:db:d2:c7:ff:7d:
                    43:79:0a:75:e0:3e:e6:dd:23:95:3b:db:d8:cc:8a:
                    bd:64:63:17:12:7c:a6:f5:9b:23:cd:fb:30:42:b7:
                    c0:c5:a0:f1:87:84:fe:3f:76:87:d3:25:55:0d:45:
                    e1:5d:5a:7c:10:84:1b:cd:c5:b9:a0:9b:6c:a0:94:
                    09:66:77:cb:ee:6e:5e:34:b3:f9:ec:5d:c5:f2:8c:
                    18:64:c3:7e:ee:a6:64:bb:38:1b:3d:79:d2:c5:91:
                    c8:e3:38:2a:7f:62:b2:b3:3c:37:0a:26:a2:53:c7:
                    9d:52:48:26:9e:69:db:b1:7b:46:68:d2:a5:e6:49:
                    fb:95:1e:1c:60:df:4e:6f:0f:fb:c0:c8:18:96:92:
                    b7:62:4f:df:83:46:c7:52:6e:1e:e7:dc:fe:f6:ab:
                    6d:06:f5:d7:17:12:aa:b8:a9:09:aa:88:6f:63:b9:
                    4d:34:a4:db:d6:43:33:c8:fa:1d:b3:46:f2:83:68:
                    de:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:BD:BB:2A:64:09:F4:20:E4:3E:74:46:55:26:3A:3A:74:2D:B8:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/69475e5c-c0fe-31d4-bfbe-688e94aa800b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl

            X509v3 Authority Key Identifier:
                keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.0.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         21:7a:ed:c0:3b:97:66:0a:e3:4d:f8:4c:c7:c7:df:ae:e2:60:
         ae:06:35:ad:a8:22:61:9b:40:51:ac:29:db:1a:15:38:98:90:
         20:e0:47:3e:36:5f:79:a4:00:4a:78:9e:ca:82:d5:a7:21:21:
         ee:c9:46:52:43:e2:73:98:2b:2e:81:82:8d:a8:35:7c:33:06:
         92:6b:5a:ab:53:d2:cf:dc:8f:98:3d:6e:50:90:42:79:73:e6:
         9b:9d:23:a8:98:85:c7:bd:3f:3e:15:59:c8:2d:1c:79:02:a2:
         7f:7a:1b:8a:8b:46:38:6e:0a:50:af:dd:25:6c:69:d8:9e:61:
         e3:f9:59:f3:86:60:05:ef:c2:ea:6a:64:3d:64:7d:21:a9:85:
         d1:ae:9b:70:4e:2d:c1:47:43:09:c0:ff:82:e7:3e:ab:80:be:
         75:65:63:10:e2:67:95:7a:e7:ac:d6:3e:4f:a6:5a:f1:38:1d:
         16:50:e9:05:e9:73:f3:e3:8d:86:98:55:54:f8:e4:a3:f4:b0:
         aa:13:69:68:ee:f7:83:23:2d:7d:a6:c1:3f:8e:e5:db:0a:87:
         38:03:11:22:a1:d8:43:6d:cf:d9:d7:67:c9:4e:96:58:00:59:
         84:6d:b0:73:b0:81:2e:b7:e5:6f:62:e7:20:dc:11:5a:70:dc:
         d9:f3:ab:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----