Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/9770557e-64a7-3ce2-a18c-c40be3c9d26c.roa
File:                     9770557e-64a7-3ce2-a18c-c40be3c9d26c.roa (raw, json)
Hash identifier:          rtMoDRcIebLwBTJvp6Khr0h1+eAc015RSnIgt1OI9bk=
Subject key identifier:   DC:FC:73:2E:28:FB:42:0E:1B:14:D0:DB:EB:0D:2B:ED:E1:0B:93:18
Certificate issuer:       /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial:       010D0C9F4328576D51CC73C042CFC1540B6FF8DC
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/9770557e-64a7-3ce2-a18c-c40be3c9d26c.roa
Signing time:             Tue 12 Apr 2016 17:06:08 +0000
ROA not before:           Mon 24 Sep 2012 04:00:00 +0000
ROA not after:            Sat 24 Sep 2022 04:00:00 +0000
asID:                     237
IP address blocks:        204.39.195.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:54:0b:6f:f8:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
        Validity
            Not Before: Sep 24 04:00:00 2012 GMT
            Not After : Sep 24 04:00:00 2022 GMT
        Subject: CN=99234985-1763-4d9f-9350-e40113b047e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5d:41:da:33:0e:f2:5c:65:67:d5:3b:4d:38:
                    09:a8:10:5e:3d:ac:19:9f:07:c9:7a:99:c6:a4:80:
                    aa:75:a5:34:95:2f:cd:f3:d8:20:15:47:d3:a4:0f:
                    f4:a8:96:74:ec:a1:c7:d0:7b:84:4c:12:c5:e6:f2:
                    65:c0:c7:5e:2f:39:c9:15:03:18:a0:ee:a7:f2:99:
                    72:54:19:d2:6a:87:bc:50:bb:93:49:92:30:1e:ea:
                    b7:53:1c:89:1f:37:b3:1c:ff:84:3f:68:71:cb:be:
                    b2:66:f5:2a:6d:5e:a2:ce:24:74:d6:79:76:f6:06:
                    26:e0:fa:8e:3f:4a:a2:5b:ab:31:0f:8b:7a:2e:ed:
                    32:c2:e1:c8:d3:5c:aa:0c:f3:10:59:7f:7b:16:be:
                    e2:b3:b8:88:2f:87:63:52:80:b8:9d:b0:92:41:38:
                    55:5d:ef:a8:08:7c:83:0c:35:12:23:a2:28:c5:93:
                    4c:b1:1f:80:70:89:fa:ad:f6:ef:a1:81:96:51:1b:
                    6c:71:b6:9f:34:b4:34:c2:b9:c6:db:8c:85:77:01:
                    b5:e9:08:a7:21:42:92:57:45:11:ad:a8:1d:a1:f5:
                    2e:06:aa:ff:6c:8f:fc:57:88:d8:3e:b0:07:3c:b7:
                    54:6d:14:56:08:e6:fb:fe:d5:85:63:20:5f:1d:f5:
                    84:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:FC:73:2E:28:FB:42:0E:1B:14:D0:DB:EB:0D:2B:ED:E1:0B:93:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/9770557e-64a7-3ce2-a18c-c40be3c9d26c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl

            X509v3 Authority Key Identifier:
                keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.39.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:55:d4:ff:f7:4a:ec:b9:86:c0:3f:6e:37:b6:d9:f1:0c:b1:
         7c:3b:2b:3c:8e:2f:14:ab:94:a9:d6:05:ea:ec:f0:c5:ff:8d:
         4b:9d:b1:c1:6f:32:df:89:f9:93:00:ff:c8:70:45:6c:51:ab:
         a7:4c:7f:28:20:41:f5:9c:89:08:c0:a9:41:79:f9:53:d0:d4:
         6d:8b:29:14:9c:df:c3:09:ac:b5:5d:68:81:6a:21:d0:87:10:
         e6:b0:96:c0:0a:83:3a:50:7e:de:99:d0:cf:b5:2b:85:94:0e:
         6b:ee:c8:2e:61:1f:3c:94:e9:d4:ee:d9:ee:4a:e0:5f:63:b2:
         bc:0a:45:ab:e7:fe:30:54:f8:4a:52:83:28:dd:fb:13:1c:c9:
         48:15:1e:65:80:0c:5f:7e:a7:d5:93:48:10:a0:a6:43:88:ad:
         91:52:f4:f2:b4:f3:e6:2c:62:f5:78:9f:f3:3a:aa:bb:90:ca:
         0d:d9:3d:3b:42:24:0f:d3:d3:c1:14:08:9d:43:99:0a:5e:7a:
         fe:de:63:c0:b1:f3:1d:e9:1b:6b:49:ea:b6:e7:6c:df:a7:7f:
         34:3f:8a:2a:a5:d0:bc:ad:0f:d7:c2:e4:99:bd:57:46:3a:86:
         24:dd:44:47:df:c6:4f:70:db:74:d6:bf:72:ca:e2:4b:f0:d9:
         3b:3f:06:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----