Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8495a95e-8082-3dd8-9498-f5a00abaaf5b.roa
File:                     8495a95e-8082-3dd8-9498-f5a00abaaf5b.roa (raw, json)
Hash identifier:          T+6AOAWLuH3GU/7zR9tL64afUw/JmWpIETz4PNY/Z4I=
Subject key identifier:   70:44:27:E4:A1:4C:DC:FD:66:45:D3:2B:CB:09:C3:10:34:8F:F5:E2
Certificate issuer:       /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial:       010D0C9F4328576D51CC73C042CFC154E840EF24
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8495a95e-8082-3dd8-9498-f5a00abaaf5b.roa
Signing time:             Wed 25 May 2016 14:10:50 +0000
ROA not before:           Mon 24 Sep 2012 04:00:00 +0000
ROA not after:            Sat 24 Sep 2022 04:00:00 +0000
asID:                     237
IP address blocks:        192.122.184.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:54:e8:40:ef:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
        Validity
            Not Before: Sep 24 04:00:00 2012 GMT
            Not After : Sep 24 04:00:00 2022 GMT
        Subject: CN=ceba4a8f-3139-47b0-bcb5-af72bb033bb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:63:69:57:09:d4:dd:4e:1f:3a:6b:96:bc:a9:
                    d5:08:02:db:ba:b6:dd:70:e2:b4:00:5f:9b:60:8b:
                    d6:04:11:39:a1:69:0e:62:d6:38:02:8b:ab:30:e8:
                    3e:5e:3b:c6:cc:8a:ff:07:60:95:5f:5a:c9:10:e0:
                    cd:11:aa:a9:5f:bf:22:e6:45:aa:a3:4d:19:0c:5a:
                    05:3d:da:1c:c3:19:cd:ec:42:98:ab:fd:3a:dc:81:
                    ee:1b:9a:6c:3f:ce:ad:cd:0a:5f:d7:64:00:d4:d0:
                    a9:29:97:fa:a8:19:07:44:c4:bd:7b:33:f1:75:5d:
                    b3:c9:df:17:34:2c:5b:43:2d:ec:98:e9:ee:93:38:
                    67:e9:f1:56:f5:a2:1a:6f:56:a9:06:a2:56:75:14:
                    25:28:a8:e1:34:6b:a8:72:94:81:56:0a:13:59:b7:
                    95:bd:7d:77:4f:91:a4:67:38:71:55:37:77:1e:bf:
                    e9:93:ac:30:48:6d:70:bd:28:a4:26:63:74:eb:2a:
                    1a:27:53:e4:c9:02:8d:97:0e:26:03:17:0c:84:7e:
                    a1:75:9c:47:a3:22:d8:e5:d5:5c:10:d6:38:4b:38:
                    7a:f8:af:ba:11:55:f3:18:b2:44:b9:77:9a:55:9a:
                    06:3d:6c:44:d7:76:30:dc:96:7d:09:73:17:1a:38:
                    80:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:44:27:E4:A1:4C:DC:FD:66:45:D3:2B:CB:09:C3:10:34:8F:F5:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8495a95e-8082-3dd8-9498-f5a00abaaf5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl

            X509v3 Authority Key Identifier:
                keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.122.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:e2:37:5d:f7:76:5f:83:e7:d6:ec:35:56:aa:fb:e9:b3:cf:
         f0:38:4d:93:33:be:29:a0:9e:d7:a9:ec:30:4c:db:96:91:f8:
         16:23:8f:57:48:d3:46:23:f5:61:25:d4:ab:43:23:2c:29:77:
         0b:41:5c:f3:07:c1:5e:19:62:70:1f:43:d6:c1:69:86:84:33:
         12:05:d4:5e:b5:12:99:d9:55:50:1d:0a:99:ac:87:62:a9:ff:
         95:16:58:3a:15:16:0a:c8:c7:1e:dc:3a:09:a1:34:5c:20:7d:
         82:42:d6:95:1e:18:d8:1a:81:c4:99:1a:6d:92:78:8d:a0:ce:
         5b:8d:15:f9:c0:06:88:00:67:7e:05:a4:9d:fa:af:38:ea:53:
         5c:3f:16:08:cd:71:33:03:c4:26:2e:87:f5:28:0c:8e:70:32:
         99:43:0f:4d:35:74:e2:24:ed:75:de:d3:86:29:cf:4e:a9:a5:
         08:d2:11:db:cc:09:fb:42:ff:64:36:2e:4d:ef:bb:d7:b2:0a:
         61:ba:3f:ca:99:13:8d:a0:c1:2e:b2:69:74:fb:38:15:72:83:
         e9:db:ac:97:95:23:48:16:a7:3c:67:f3:56:6d:ed:4f:8d:81:
         7f:91:0a:8c:00:bc:a0:f0:a7:d4:fb:94:55:09:1f:d9:1f:06:
         0e:41:7e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----