Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/f3f0470b-4ecf-381f-8960-a42f5d91a232.roa
File:                     f3f0470b-4ecf-381f-8960-a42f5d91a232.roa (raw, json)
Hash identifier:          tqoSfluENJlb828bgaun6duFEg7qWyD+VObN0WzPf6Y=
Subject key identifier:   02:E7:50:4A:01:91:14:3B:85:C0:9C:D0:66:47:A4:DA:7B:33:66:D0
Certificate issuer:       /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial:       DA2E910FC29ECA2D56F60C75D558EDAC18A245
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/f3f0470b-4ecf-381f-8960-a42f5d91a232.roa
Signing time:             Wed 08 Oct 2014 20:15:58 +0000
ROA not before:           Mon 24 Sep 2012 04:00:00 +0000
ROA not after:            Sat 24 Sep 2022 04:00:00 +0000
asID:                     237
IP address blocks:        198.109.76.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            da:2e:91:0f:c2:9e:ca:2d:56:f6:0c:75:d5:58:ed:ac:18:a2:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
        Validity
            Not Before: Sep 24 04:00:00 2012 GMT
            Not After : Sep 24 04:00:00 2022 GMT
        Subject: CN=61536545-5e63-4693-a52b-791db7d32f7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f3:c2:c8:21:50:00:11:d2:74:05:ad:c8:cb:
                    95:d8:cd:4b:f4:d1:f7:d9:e3:58:77:e9:e6:a5:54:
                    e6:b3:66:5d:5a:2d:88:e1:80:9a:5e:52:b2:2f:5c:
                    0e:27:ea:c4:13:a3:f7:15:75:d9:9d:f9:b8:5b:ea:
                    95:aa:1e:07:f6:9b:e2:d0:ae:98:d2:1a:38:e1:cc:
                    47:10:17:99:4a:40:03:a0:47:57:ce:aa:aa:ce:06:
                    a4:08:00:76:f0:f0:c0:f4:4c:dd:f2:ef:bd:80:c7:
                    b9:c8:d4:90:db:4a:6e:af:b9:eb:b2:1f:a6:a3:3b:
                    24:8b:95:f7:f0:e0:27:82:14:4a:67:9d:a8:e0:13:
                    bc:5d:fe:e8:c3:68:70:bd:e3:10:11:ec:72:16:d3:
                    fd:47:9e:f1:80:47:f3:e2:41:f7:03:0f:5c:2f:22:
                    e6:84:0b:1a:ac:d5:d9:82:4c:ad:50:8b:0a:a4:6d:
                    48:75:4e:44:90:b3:40:8c:d4:89:f5:a7:d0:40:95:
                    63:60:59:41:e3:b7:ab:b1:a4:4d:74:5a:58:a2:9c:
                    f6:a9:87:5f:29:4c:f5:53:52:b1:1b:95:a8:16:73:
                    81:1b:86:be:db:68:67:3d:6c:dd:0d:11:24:c7:a1:
                    93:26:a0:4a:55:f3:e3:9c:8e:af:c6:3d:8d:7d:74:
                    33:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:E7:50:4A:01:91:14:3B:85:C0:9C:D0:66:47:A4:DA:7B:33:66:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/f3f0470b-4ecf-381f-8960-a42f5d91a232.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl

            X509v3 Authority Key Identifier:
                keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.109.76.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:fd:86:de:53:50:bd:f9:e2:6b:99:ee:ea:32:37:5a:ad:00:
         ec:62:d7:d1:7e:ae:a2:f6:3b:7d:05:03:2b:a7:35:6a:b0:a9:
         85:2c:76:05:c5:f5:aa:b8:7f:4c:4a:5b:a3:fb:f8:58:5c:04:
         1c:1c:b3:15:01:91:0c:9b:ed:c0:4f:99:93:5e:94:69:d0:b7:
         1d:1e:c0:e8:b7:ec:69:50:27:a8:a0:96:cb:ce:ef:7f:f5:b8:
         b1:24:dc:4b:d0:c2:62:a5:11:f9:c5:49:53:4b:8f:88:d3:a6:
         be:a9:53:91:0d:d3:01:36:32:0b:b1:b6:8e:e8:51:39:8f:82:
         51:18:52:eb:5d:3e:26:51:b0:be:bc:0b:64:bb:5d:72:63:24:
         9e:80:59:d5:4b:59:21:f0:53:eb:97:9c:14:51:59:06:b0:5e:
         5b:78:5b:63:27:f8:40:71:c4:58:39:ee:59:e7:67:50:0e:55:
         13:84:71:37:ca:3c:49:94:53:cb:25:fe:0e:e1:39:a8:23:57:
         b5:3c:f2:03:77:00:3e:b6:06:6e:8e:8e:7b:ea:2e:0d:8f:59:
         51:c6:14:44:0e:28:d2:61:2a:12:37:90:6d:d0:95:5b:d1:0d:
         f8:1b:eb:c2:dd:7e:1d:d2:76:2d:45:e3:f8:c1:99:05:21:ca:
         30:51:02:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----