Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/edc7781c-fd89-38a8-85d6-2e7ebb7f22fa.roa
File:                     edc7781c-fd89-38a8-85d6-2e7ebb7f22fa.roa (raw, json)
Hash identifier:          ryrmwbLS02DE9v4RZPeqYBQ75ffwt8NulyI0NStNxho=
Subject key identifier:   CD:8A:F1:79:B8:06:8E:22:34:A3:A7:1E:DF:F2:EF:F6:41:5B:52:7C
Certificate issuer:       /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial:       971FF67A3FC0F3C935F2454D21892FA8D7B909
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/edc7781c-fd89-38a8-85d6-2e7ebb7f22fa.roa
Signing time:             Wed 08 Oct 2014 20:20:37 +0000
ROA not before:           Mon 24 Sep 2012 04:00:00 +0000
ROA not after:            Sat 24 Sep 2022 04:00:00 +0000
asID:                     237
IP address blocks:        207.74.136.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            97:1f:f6:7a:3f:c0:f3:c9:35:f2:45:4d:21:89:2f:a8:d7:b9:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
        Validity
            Not Before: Sep 24 04:00:00 2012 GMT
            Not After : Sep 24 04:00:00 2022 GMT
        Subject: CN=53f5862b-118a-42b5-b911-6d0e54bc3241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:bf:c6:76:4c:9a:31:57:95:92:fc:27:40:24:
                    de:29:14:d8:42:f3:71:6c:b7:82:78:76:a7:d9:19:
                    67:dc:9c:1c:16:05:ad:31:1b:f1:6d:4c:11:6b:83:
                    b2:b7:a2:82:a0:14:19:13:0f:ee:a6:7f:66:23:e1:
                    2f:91:f0:cf:7f:83:54:42:c4:97:26:1b:f3:35:a7:
                    df:5e:04:f3:3c:ba:c2:c0:50:56:47:05:87:43:b8:
                    f5:67:9e:5c:42:d5:cd:d2:00:7a:10:c4:bd:00:a2:
                    35:d8:00:a1:c1:d3:ec:0d:69:12:5b:53:6b:24:e9:
                    12:ce:50:a2:06:a2:e0:fc:97:2d:dd:c5:7f:bb:7e:
                    3c:63:38:4f:98:85:b3:32:18:5b:36:b0:5c:b0:13:
                    bb:49:30:73:75:b2:22:1c:94:7a:3c:04:21:13:6d:
                    d0:2b:56:b0:8b:82:28:4b:0f:46:ef:6f:72:9d:d3:
                    cc:4b:c6:81:23:92:e3:4e:a0:f6:34:9f:d7:a8:7e:
                    f5:38:b1:54:16:e2:8f:b1:fd:dc:51:04:b9:f5:28:
                    d0:8f:8a:b7:c6:f1:8c:4d:c0:dd:5d:90:dd:04:35:
                    83:11:bc:1a:7e:68:1f:e1:0c:63:4c:73:7c:ad:37:
                    eb:b5:44:6d:09:27:b9:ce:b1:ff:ed:09:ce:e0:b2:
                    57:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:8A:F1:79:B8:06:8E:22:34:A3:A7:1E:DF:F2:EF:F6:41:5B:52:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/edc7781c-fd89-38a8-85d6-2e7ebb7f22fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl

            X509v3 Authority Key Identifier:
                keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.74.136.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:42:bb:5a:54:de:91:c7:1b:c4:ca:6c:72:d5:0f:99:79:55:
         e0:d3:be:36:03:4f:e4:9c:d2:e6:30:db:ae:60:6b:db:cb:2f:
         a0:22:ff:e3:c5:93:a3:73:66:f8:67:be:23:da:1d:46:71:ef:
         5a:99:03:9f:55:f1:f9:cc:c5:24:dd:0a:55:8d:a8:ec:b5:79:
         1e:ce:df:2b:1a:71:b9:b0:3a:41:11:ee:2b:12:ad:61:14:98:
         5f:48:8d:4b:3c:f0:16:ad:3b:9e:0c:a4:8d:ae:3b:44:42:4d:
         74:b0:4b:02:04:34:fc:95:b4:19:6a:96:f3:84:7b:b3:07:b9:
         fa:b4:86:db:83:21:5b:c2:cf:2c:c2:73:fb:df:2f:9e:07:4e:
         e2:ef:63:20:a1:fa:58:51:5c:3a:47:2a:1e:20:91:96:ac:4c:
         43:a5:26:5a:5c:2d:1b:02:6d:e0:b6:1b:d8:c1:8f:ba:e2:1c:
         c1:23:e1:bb:a8:b4:c2:f9:05:15:c8:56:07:f2:0e:10:46:65:
         5a:3a:10:d0:6d:66:06:d5:95:8a:16:2d:de:0a:e6:e5:42:06:
         01:30:12:f0:73:47:74:88:8d:d7:e2:d0:3e:bb:64:6f:60:9d:
         57:06:f3:c1:d7:86:bf:3e:42:64:93:eb:04:d7:49:74:7e:d0:
         a8:e6:43:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----