Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b3c022e-4679-4530-ad3a-1df3041efdd2/91b59029-6c2a-3a4d-91f0-ce00aca572b3.roa
File:                     91b59029-6c2a-3a4d-91f0-ce00aca572b3.roa (raw, json)
Hash identifier:          GK9TMOP3oTEnk6P2nyt4NFiOulPT/fjRxNAWx48AeqQ=
Subject key identifier:   9F:40:52:99:E0:4D:70:D0:C5:5F:F8:22:81:E5:6E:DB:82:9F:6B:76
Certificate issuer:       /CN=2b3c022e-4679-4530-ad3a-1df3041efdd2
Certificate serial:       010D0C9F4328576D51CC73C042CFC15B93DF3D8C
Authority key identifier: FE:C8:AB:1C:76:C7:3A:F5:45:0F:87:45:C2:CB:BC:0D:3E:BC:F5:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b3c022e-4679-4530-ad3a-1df3041efdd2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b3c022e-4679-4530-ad3a-1df3041efdd2/91b59029-6c2a-3a4d-91f0-ce00aca572b3.roa
Signing time:             Sat 22 Apr 2017 04:15:32 +0000
ROA not before:           Tue 20 Nov 2012 05:00:00 +0000
ROA not after:            Sun 20 Nov 2022 05:00:00 +0000
asID:                     395639
IP address blocks:        63.245.218.0/24 maxlen: 24
                          2620:101:80f4::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:5b:93:df:3d:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b3c022e-4679-4530-ad3a-1df3041efdd2
        Validity
            Not Before: Nov 20 05:00:00 2012 GMT
            Not After : Nov 20 05:00:00 2022 GMT
        Subject: CN=13592953-af25-42dc-8125-885e377a9b3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:75:3a:7b:20:ec:28:23:fc:ae:6a:81:da:de:
                    d7:44:e4:f8:d1:0c:63:97:ba:e8:95:01:a5:69:e7:
                    e9:b1:e4:4f:22:b8:60:22:9d:c1:c0:ad:60:bc:3f:
                    c3:5a:85:f3:8b:f1:fb:ad:54:2e:26:02:7e:f1:af:
                    b8:f2:b1:0f:ae:e5:59:f5:e8:ee:0a:c9:cb:82:87:
                    48:3e:15:0e:d2:a5:6e:a0:54:f2:8e:54:b5:01:c5:
                    f0:72:77:18:8c:df:90:ee:96:51:f7:af:20:14:e0:
                    dc:6a:4c:67:94:f4:d9:fa:77:35:bc:11:16:5e:f3:
                    6e:13:22:19:56:5e:70:4c:90:e9:3a:81:f7:1b:7b:
                    77:5c:ab:81:45:d2:d8:37:1f:af:ae:21:d7:82:5e:
                    e8:8b:4a:e8:a5:11:5a:71:4f:56:fd:67:4d:61:16:
                    2e:18:c0:0a:36:92:19:77:48:81:2d:80:d6:c5:5a:
                    09:63:aa:17:a0:31:d4:28:32:db:8a:99:63:b5:9c:
                    d0:c6:a7:9d:86:a3:8a:ed:a1:3c:9d:98:8c:1d:b3:
                    90:f3:92:85:c0:ca:ea:5a:e0:10:83:75:0a:e7:51:
                    b5:59:41:23:23:cd:f7:a2:ff:80:78:99:35:5f:80:
                    e1:67:99:4c:16:60:4d:25:ab:ee:ae:50:ba:a1:83:
                    c9:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:40:52:99:E0:4D:70:D0:C5:5F:F8:22:81:E5:6E:DB:82:9F:6B:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b3c022e-4679-4530-ad3a-1df3041efdd2/91b59029-6c2a-3a4d-91f0-ce00aca572b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b3c022e-4679-4530-ad3a-1df3041efdd2/2b3c022e-4679-4530-ad3a-1df3041efdd2.crl

            X509v3 Authority Key Identifier:
                keyid:FE:C8:AB:1C:76:C7:3A:F5:45:0F:87:45:C2:CB:BC:0D:3E:BC:F5:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b3c022e-4679-4530-ad3a-1df3041efdd2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.245.218.0/24
                IPv6:
                  2620:101:80f4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:6f:98:2d:4f:73:aa:32:1c:c5:f8:2a:e7:3e:46:d4:30:b8:
         b4:59:f2:5f:19:fd:f8:82:7e:a7:96:59:b6:83:8b:da:aa:f2:
         9a:3c:4a:74:1c:d8:4f:8f:ec:97:8c:87:6e:6d:a1:24:7b:af:
         93:d8:e0:15:4e:23:28:9e:9f:a2:0c:4b:91:15:ab:d1:3b:01:
         7a:e2:b9:87:d3:f7:3e:bf:4e:c6:81:25:8b:79:62:d9:aa:f5:
         04:9a:f2:b9:ea:13:76:00:8b:53:fd:7f:a0:fa:ec:b3:e0:b7:
         78:78:fd:b7:c6:71:0f:0d:52:e0:ce:01:00:e3:5c:7e:75:c5:
         a7:74:36:ad:1f:fd:b8:2c:c1:c0:65:99:a0:e5:6e:d2:c2:d7:
         4c:d7:8e:18:81:85:77:37:e6:3b:37:b7:24:f4:4f:0f:91:98:
         7e:53:0b:96:17:e9:e9:16:0e:c1:aa:c8:76:71:cf:21:f0:6e:
         cb:2b:47:14:3c:e7:9d:0e:7b:89:8f:a7:89:9b:ef:3a:60:eb:
         a5:f9:19:fe:2f:59:ae:a0:e4:4d:df:2b:53:42:b9:ab:a0:96:
         c0:c4:25:9b:38:eb:37:5f:a4:44:38:3e:4a:9e:c3:f4:7f:95:
         e7:ae:38:2e:a6:13:12:80:7c:48:c9:fe:b6:a1:05:aa:81:eb:
         1a:ea:79:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----