Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/7a30d92a-f35f-39cd-b492-08d0c90738d9.roa
File:                     7a30d92a-f35f-39cd-b492-08d0c90738d9.roa (raw, json)
Hash identifier:          AJPjQdlKjoSvrLxMFZo9YV5oVXbp9uToVRAu3Qugldc=
Subject key identifier:   B6:F7:A4:D0:2C:6E:AA:B5:CA:85:F5:18:4E:45:C7:FA:8A:10:60:8D
Certificate issuer:       /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial:       3ED1801050FB4196B869416A587FA6F0D32200
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/7a30d92a-f35f-39cd-b492-08d0c90738d9.roa
Signing time:             Mon 01 Oct 2012 20:13:10 +0000
ROA not before:           Mon 24 Sep 2012 04:00:00 +0000
ROA not after:            Sat 24 Sep 2022 04:00:00 +0000
asID:                     237
IP address blocks:        198.108.0.0/14 maxlen: 14

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:d1:80:10:50:fb:41:96:b8:69:41:6a:58:7f:a6:f0:d3:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
        Validity
            Not Before: Sep 24 04:00:00 2012 GMT
            Not After : Sep 24 04:00:00 2022 GMT
        Subject: CN=0720965d-55db-4011-8240-7d8d09368892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4c:f5:a0:81:65:c9:3a:b7:10:13:0e:6d:20:
                    d7:77:a2:9a:4e:62:68:c8:4e:28:15:cb:5c:68:f4:
                    2e:49:e4:82:9b:cf:95:90:6b:3b:23:ae:9c:71:f0:
                    f4:69:a3:cb:a5:f7:14:01:b5:94:f5:82:67:ce:26:
                    d5:f1:d3:b0:17:37:01:08:0a:35:d3:cb:ef:3d:e4:
                    d1:ee:83:f4:c2:cd:fe:c1:7f:81:ca:d5:5e:d9:d1:
                    97:d5:30:4e:75:5a:09:2f:7e:c8:08:a0:f4:fd:fb:
                    f1:3b:3e:09:b1:4a:1f:6c:9e:58:95:8e:6c:5b:33:
                    f0:0a:3b:e0:c8:56:4d:93:c8:38:61:3b:2c:9c:cd:
                    1f:9d:29:f7:a1:0b:71:f1:57:84:f7:e5:eb:ea:c2:
                    0c:ee:b0:20:5c:f6:4c:30:90:e2:3e:9c:21:e9:66:
                    1e:e3:7c:21:1a:2f:1c:da:47:ce:00:b5:e6:9b:75:
                    c8:d7:65:d7:fd:1c:d7:c1:7c:31:dc:df:9b:c4:37:
                    61:26:22:a5:81:19:8b:5c:90:b9:d0:ae:3a:a2:62:
                    29:05:71:b3:78:4b:14:a4:ab:4e:c8:4a:1a:78:07:
                    23:37:09:4d:d1:71:ea:8e:d0:6b:1f:f0:f5:37:4a:
                    90:e7:b1:b2:af:8e:ce:e5:ce:de:15:56:c4:ac:4d:
                    84:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:F7:A4:D0:2C:6E:AA:B5:CA:85:F5:18:4E:45:C7:FA:8A:10:60:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/7a30d92a-f35f-39cd-b492-08d0c90738d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl

            X509v3 Authority Key Identifier:
                keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.108.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         4a:65:0e:98:75:82:2e:dd:96:1a:bd:17:f8:4b:4f:9c:7f:7d:
         02:b0:96:00:24:94:41:20:79:0f:0c:a9:c8:25:38:0c:d1:78:
         18:22:49:8f:ca:96:42:37:29:01:e4:6e:bc:3e:2a:a5:c9:34:
         48:c8:46:4c:0e:d0:02:34:38:5f:20:ce:1c:86:94:9a:ea:fd:
         9f:15:f7:f8:82:34:26:c2:7c:90:5e:f0:48:b0:a4:7b:e1:29:
         de:81:76:76:0d:31:aa:d9:5f:35:f7:20:88:9e:98:9f:f8:00:
         08:d0:9d:f1:76:86:9f:29:d6:37:a6:7a:7a:f7:1a:68:30:84:
         15:80:0d:13:cf:49:db:d1:b3:5f:72:9d:6f:5b:49:b7:4a:fc:
         dc:dd:04:b6:48:a8:e1:43:b8:19:a9:81:67:44:6b:a6:4b:7a:
         a6:ad:9e:b5:95:d8:6e:27:67:e4:ed:ad:12:91:b0:77:fb:38:
         0e:ef:9f:44:b1:20:0f:dd:8d:7f:69:ab:16:04:52:97:5c:e8:
         73:5c:1f:8f:7f:6f:ce:f8:0d:c8:d5:2b:33:9e:95:5c:2c:d5:
         1f:58:27:b9:7e:80:1e:c3:cc:f3:8a:26:04:5c:9e:7c:4c:5c:
         f0:75:78:55:e6:94:63:58:a6:62:3f:ec:d4:f4:cd:66:67:70:
         4a:6f:55:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----