Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ce83f38-0d3b-4311-91ef-cb578f36f935/ef3b8c4f-c709-3618-9989-c3e8f81e7a85.roa
File:                     ef3b8c4f-c709-3618-9989-c3e8f81e7a85.roa (raw, json)
Hash identifier:          DjIdoyrCxxHQ0djCHZAyhfoQSF6+bYVIMzDrqaQ5/6w=
Subject key identifier:   51:BE:8D:DE:31:5D:82:C4:6B:FF:BF:1F:66:BC:52:3C:C9:C9:6B:1E
Certificate issuer:       /CN=1ce83f38-0d3b-4311-91ef-cb578f36f935
Certificate serial:       E704BC7C003EF9D4B8BD8D244B000FF169BBA5
Authority key identifier: 92:98:CF:11:C0:E1:E7:5B:A9:35:C9:B4:4A:C3:1B:E0:FA:87:40:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ce83f38-0d3b-4311-91ef-cb578f36f935.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ce83f38-0d3b-4311-91ef-cb578f36f935/ef3b8c4f-c709-3618-9989-c3e8f81e7a85.roa
Signing time:             Tue 16 Oct 2012 15:31:03 +0000
ROA not before:           Tue 16 Oct 2012 04:00:00 +0000
ROA not after:            Sun 16 Oct 2022 04:00:00 +0000
asID:                     54497
IP address blocks:        199.116.64.0/21 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            e7:04:bc:7c:00:3e:f9:d4:b8:bd:8d:24:4b:00:0f:f1:69:bb:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ce83f38-0d3b-4311-91ef-cb578f36f935
        Validity
            Not Before: Oct 16 04:00:00 2012 GMT
            Not After : Oct 16 04:00:00 2022 GMT
        Subject: CN=41bc4b15-a170-4809-8b69-a7c15b2e9ea0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:93:38:47:2f:ef:c7:d5:a5:ca:94:dd:83:55:
                    9d:4f:74:47:ae:9e:a5:bc:69:ea:cd:97:95:64:a0:
                    26:2a:94:e1:28:37:7f:a3:52:bd:5c:aa:5d:8e:ab:
                    e0:48:57:df:b4:8c:f2:d7:02:1e:e6:38:cb:7f:dd:
                    ad:47:c0:7e:a3:6f:60:29:08:82:02:b3:95:8e:3e:
                    40:70:78:88:a2:b2:ef:6b:e1:7e:f8:78:04:a6:77:
                    25:57:55:17:18:72:20:20:e3:57:91:09:ce:5b:13:
                    de:4d:95:46:d8:80:0f:f5:e0:71:e1:49:e5:91:2e:
                    88:9d:02:99:39:4d:87:60:ee:4d:b2:b6:1e:a9:44:
                    0d:24:8c:d2:b2:42:66:74:79:b0:97:9f:e4:e9:87:
                    3e:de:c3:ff:88:d7:3b:e3:9e:f8:7a:14:69:f4:21:
                    cd:38:ad:ad:97:dd:7b:c1:85:17:77:2a:ed:b7:33:
                    99:33:89:db:b4:56:df:b0:37:cc:74:ec:ea:95:3b:
                    ee:6d:70:ed:0b:8b:a2:7c:86:d0:7f:38:01:82:56:
                    84:bf:01:58:37:e3:be:e7:f0:02:95:e8:8a:cf:69:
                    4e:4c:23:31:30:5d:46:e0:6d:dd:55:1d:d9:6b:29:
                    61:79:8a:5e:7c:e0:50:cd:79:3f:c8:2a:fd:f1:19:
                    e5:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:BE:8D:DE:31:5D:82:C4:6B:FF:BF:1F:66:BC:52:3C:C9:C9:6B:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ce83f38-0d3b-4311-91ef-cb578f36f935/ef3b8c4f-c709-3618-9989-c3e8f81e7a85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ce83f38-0d3b-4311-91ef-cb578f36f935/1ce83f38-0d3b-4311-91ef-cb578f36f935.crl

            X509v3 Authority Key Identifier:
                keyid:92:98:CF:11:C0:E1:E7:5B:A9:35:C9:B4:4A:C3:1B:E0:FA:87:40:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ce83f38-0d3b-4311-91ef-cb578f36f935.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.116.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a9:dd:4c:6e:9c:d3:4c:01:79:54:61:2f:11:e9:be:c9:e5:33:
         99:3e:10:19:51:9a:ee:7f:64:b2:7f:c2:4f:5c:48:c4:07:22:
         5d:e8:8a:ec:f9:f7:75:25:99:1e:bc:4f:93:28:fa:2c:b8:96:
         1c:1c:8e:3d:d9:09:e0:49:54:0a:9d:ff:3a:91:ac:18:13:b4:
         ee:b6:96:ce:b6:12:51:67:1e:8d:21:78:71:4d:f5:7f:2e:03:
         5c:dd:75:64:4a:f1:3f:e9:c3:30:65:48:96:77:74:f2:63:f1:
         b2:fe:33:b9:33:81:5e:ae:1c:91:e4:ec:1d:95:37:7b:d7:48:
         8e:6e:65:fe:8b:9d:55:11:d2:c5:05:94:08:de:fc:a9:14:cf:
         96:48:5f:ec:5a:c6:c9:b9:5b:43:53:e5:64:36:07:de:73:b9:
         f0:b6:1a:d8:10:87:eb:6e:f5:11:b9:5b:a3:0e:75:6d:39:ad:
         3e:99:a9:4e:17:d0:5a:8f:e7:9f:ef:58:aa:ee:14:cf:a1:61:
         31:fb:47:c9:8e:47:0e:01:c1:39:fd:98:ee:02:6d:4e:db:39:
         d8:9b:43:e9:9e:05:71:ee:e9:99:31:1a:60:75:fc:9d:0a:6d:
         32:ca:fc:26:a4:ca:97:1c:73:a8:e0:13:43:c4:04:ba:19:f1:
         f2:0a:09:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----