Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/c8829af6-877e-34b8-a3a5-8788fb533f56.roa
File:                     c8829af6-877e-34b8-a3a5-8788fb533f56.roa (raw, json)
Hash identifier:          7xYWdQIzGTfT2CYRjyWPRyrQFe62Hr2F7htXiKdmpic=
Subject key identifier:   3E:B6:C2:95:6A:D4:FC:B7:18:3D:1D:4C:EC:C1:C2:36:B9:9E:9B:B8
Certificate issuer:       /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial:       E9EFE13AD8F859FEE76A96AD16028946331BF5
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/c8829af6-877e-34b8-a3a5-8788fb533f56.roa
Signing time:             Mon 01 Oct 2012 20:03:38 +0000
ROA not before:           Mon 24 Sep 2012 04:00:00 +0000
ROA not after:            Sat 24 Sep 2022 04:00:00 +0000
asID:                     237
IP address blocks:        204.38.0.0/15 maxlen: 15

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            e9:ef:e1:3a:d8:f8:59:fe:e7:6a:96:ad:16:02:89:46:33:1b:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
        Validity
            Not Before: Sep 24 04:00:00 2012 GMT
            Not After : Sep 24 04:00:00 2022 GMT
        Subject: CN=07f99847-3b54-4966-a462-9efd6f96388a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7c:3a:3f:9d:79:b2:a0:7c:e2:29:1a:39:39:
                    89:2d:f1:b4:98:6b:bd:8d:63:f1:ce:f6:d4:bf:da:
                    29:06:0d:66:fd:38:d0:ed:fe:73:ff:d7:cb:77:c1:
                    f0:d3:b2:51:cf:e1:68:66:70:d3:11:1a:db:7b:15:
                    a4:1e:02:f3:ed:34:2e:b3:ea:b3:20:a9:51:8d:ba:
                    b1:65:3b:0c:cd:99:de:15:67:c3:ba:e7:87:de:33:
                    43:e1:cc:4c:1a:47:ab:a6:19:93:c1:bd:94:a7:cc:
                    d2:05:86:5a:7f:a2:33:48:cf:b0:1d:a9:5a:92:23:
                    0e:d7:c5:ba:ab:ce:e1:b0:de:6b:23:82:42:bf:88:
                    86:d4:04:55:2c:00:75:52:84:00:8d:e0:e9:b8:7d:
                    88:62:e6:9a:69:37:97:45:e5:fc:f9:dd:32:e5:a3:
                    76:71:38:6a:1e:94:b2:a1:1a:73:43:b5:3f:a9:44:
                    06:36:27:9d:08:6d:d8:37:1e:a9:30:72:ed:50:be:
                    1f:11:6b:d1:a4:5a:50:1e:15:ec:a3:cd:b3:38:3f:
                    80:84:bb:00:31:00:5c:b6:df:4f:c9:8c:2f:9b:bf:
                    7e:e7:2e:14:90:7e:51:f9:8f:22:c5:35:d0:55:29:
                    91:2f:08:80:eb:2c:0d:a3:10:99:81:f3:a9:ba:87:
                    f1:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:B6:C2:95:6A:D4:FC:B7:18:3D:1D:4C:EC:C1:C2:36:B9:9E:9B:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/c8829af6-877e-34b8-a3a5-8788fb533f56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl

            X509v3 Authority Key Identifier:
                keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.38.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         51:ab:4f:b3:b7:72:5c:03:4e:5e:42:d5:bb:6b:a6:3d:01:6f:
         5c:e4:31:62:00:a5:fb:ca:c4:8d:65:43:49:f6:b8:72:df:85:
         7c:a4:61:83:45:4d:02:37:9d:59:73:a1:c0:57:ca:72:25:04:
         39:89:38:b1:6b:f8:62:84:28:30:78:48:92:f5:d8:a5:ae:cb:
         45:f3:e9:29:c1:18:69:6f:d3:4f:69:6e:3a:93:f8:7f:6a:bf:
         95:19:d2:b0:eb:05:87:50:96:c1:47:18:eb:d5:61:8c:98:17:
         31:e1:cc:68:3f:15:eb:4f:4a:24:7b:d3:0d:35:60:5c:53:68:
         7b:73:80:f8:1e:ca:a1:de:4f:76:b6:f8:ee:e3:87:d1:0c:67:
         af:de:9d:c9:32:ac:a0:69:7b:b1:d3:4b:88:9c:5a:70:e2:e9:
         21:9a:cc:ee:bd:06:01:8a:06:a1:54:cd:9e:9e:e0:ad:94:71:
         10:03:d4:52:50:41:9d:7f:53:b4:d9:1d:47:fb:5c:2e:f1:f5:
         1e:66:00:f7:d5:a0:aa:d0:45:49:8f:4e:5f:a3:23:79:1c:e0:
         8c:fa:52:bd:ef:56:29:43:65:d6:cb:7d:1e:05:f3:ad:1e:ab:
         36:56:c5:43:f2:84:55:3c:54:b3:05:80:4c:bd:b4:8a:97:64:
         5a:30:dc:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----