Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/d13883d4-007b-33cf-b947-06dcb4325d79.roa
File:                     d13883d4-007b-33cf-b947-06dcb4325d79.roa (raw, json)
Hash identifier:          v3zXuMdnhtKs+8WsPKXWvz2pcf96F5HadVfM6Zi/rbg=
Subject key identifier:   C7:76:DD:02:86:28:19:58:F9:51:15:2F:63:44:8C:E1:F5:DF:6C:E9
Certificate issuer:       /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial:       525E84B285CB4096BAD2C9591686FA2FE4D0E6
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/d13883d4-007b-33cf-b947-06dcb4325d79.roa
Signing time:             Wed 08 Oct 2014 20:36:10 +0000
ROA not before:           Mon 24 Sep 2012 04:00:00 +0000
ROA not after:            Sat 24 Sep 2022 04:00:00 +0000
asID:                     36375
IP address blocks:        35.2.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:5e:84:b2:85:cb:40:96:ba:d2:c9:59:16:86:fa:2f:e4:d0:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
        Validity
            Not Before: Sep 24 04:00:00 2012 GMT
            Not After : Sep 24 04:00:00 2022 GMT
        Subject: CN=41b1c0ef-d179-4bb1-a8c9-4a0db26821ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4d:40:22:ba:38:f4:41:5b:b8:1e:38:30:d3:
                    f8:6c:e3:01:25:ab:5f:1f:16:fe:88:49:73:5d:e2:
                    21:0f:64:91:73:4b:3f:ea:3c:e9:17:89:27:dd:65:
                    b0:7e:1e:48:1f:f9:be:e3:b5:0b:47:ad:f2:d5:d3:
                    3e:4f:8a:ed:11:2e:18:f2:29:7f:1b:5d:9c:05:0b:
                    24:f9:81:d6:86:c5:61:e6:05:c0:8e:75:b1:fa:e6:
                    fc:d6:9c:c2:9e:0e:75:ac:24:c7:18:58:38:e1:69:
                    62:60:0c:c2:4a:51:b3:fd:c1:2f:9d:90:8f:ea:c2:
                    fa:60:5c:aa:a6:ab:1e:31:05:fe:d4:e2:00:93:14:
                    35:84:89:2e:f3:6f:5a:fa:08:47:f2:07:13:3c:62:
                    9a:a9:5e:f1:87:05:d6:1b:94:d9:1f:96:69:57:a9:
                    16:ad:c7:f9:d7:2d:ae:13:77:0c:f3:9d:82:4e:17:
                    bf:b4:fd:bf:77:af:ca:34:52:99:b3:78:f0:45:0f:
                    d7:cf:ca:9d:71:cb:d2:98:af:ae:f6:53:ac:40:76:
                    80:09:09:92:6e:d8:b1:27:87:c9:47:b5:f4:31:59:
                    05:e7:fb:2d:77:70:66:5e:15:16:c7:98:3a:92:23:
                    4c:9e:86:14:5c:6a:b3:70:4f:81:db:db:b6:69:ac:
                    21:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:76:DD:02:86:28:19:58:F9:51:15:2F:63:44:8C:E1:F5:DF:6C:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/d13883d4-007b-33cf-b947-06dcb4325d79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl

            X509v3 Authority Key Identifier:
                keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.2.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:d1:dc:4b:da:fb:2e:33:d2:0b:9a:f5:5b:c8:09:ed:ea:58:
         29:ca:70:4e:d4:6a:65:ca:19:ee:5d:93:8c:82:8c:d6:95:b7:
         02:87:22:57:4c:c2:bc:06:29:f2:71:fb:97:45:d3:40:fd:96:
         17:54:04:01:d9:36:e0:ea:37:46:98:bc:40:a9:ef:ba:e5:91:
         a4:2d:b4:c7:cd:af:db:fb:4d:25:72:cb:df:10:be:85:ec:00:
         f1:7d:c5:43:68:40:50:f9:c3:a3:b9:a3:63:2f:df:6e:4d:a4:
         81:6c:6a:34:4d:22:e7:22:91:f9:e0:57:a1:52:72:2d:74:9a:
         e9:e0:36:4d:7b:ca:c8:84:65:7b:06:e4:70:96:f7:7e:36:7f:
         bf:40:be:20:a2:82:a7:f3:25:49:fa:10:ab:53:30:72:18:a3:
         11:4c:86:da:99:5b:8b:b9:01:6b:0c:40:5c:ff:14:e8:cb:59:
         c6:12:b5:95:f5:5d:2c:a7:7d:28:9e:65:b7:45:4c:7c:b7:fa:
         0e:f1:e3:8f:f9:cb:99:19:f3:7a:05:da:32:ef:6b:fe:c5:2c:
         6f:29:95:70:85:cb:8e:8e:14:21:2c:ad:96:04:42:21:25:6c:
         d5:c6:a9:de:ff:9d:05:1c:a7:94:45:a8:91:47:e9:a4:96:f8:
         5f:df:53:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----