Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/043ee994-0287-35f0-b6d7-d221d3f7feb8.roa
File:                     043ee994-0287-35f0-b6d7-d221d3f7feb8.roa (raw, json)
Hash identifier:          fOmpvLGti7JL2gMDBrqw1yym+cgjc3T3grasUkvHFV4=
Subject key identifier:   4A:88:04:83:8B:08:58:75:B8:1F:48:F0:FD:6A:A0:C3:AD:43:CE:BC
Certificate issuer:       /CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e
Certificate serial:       F82B49BDF6C89DFC5FABD336F0D1A3BD905AE3
Authority key identifier: F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/043ee994-0287-35f0-b6d7-d221d3f7feb8.roa
Signing time:             Thu 01 Aug 2013 21:31:49 +0000
ROA not before:           Fri 12 Jul 2013 04:00:00 +0000
ROA not after:            Wed 12 Jul 2023 04:00:00 +0000
asID:                     9823
IP address blocks:        159.182.64.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            f8:2b:49:bd:f6:c8:9d:fc:5f:ab:d3:36:f0:d1:a3:bd:90:5a:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e
        Validity
            Not Before: Jul 12 04:00:00 2013 GMT
            Not After : Jul 12 04:00:00 2023 GMT
        Subject: CN=6a3489d5-1f4d-43a5-b5d0-8c3a476de873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:bb:27:1e:2d:4c:1f:03:49:cd:40:53:da:30:
                    6b:6c:49:d9:98:24:af:58:31:df:61:79:1b:63:3c:
                    94:38:de:a8:54:f5:8c:1b:30:24:ed:e1:80:7b:de:
                    96:f9:f5:c9:a1:25:5b:9c:a5:78:7c:fa:9a:bc:ea:
                    82:44:f4:28:ce:8d:54:50:9a:c1:9b:68:3b:8b:b1:
                    6e:da:de:3c:6d:7d:9f:bc:4f:07:02:02:fe:c7:30:
                    a3:d7:a0:da:d9:61:1f:49:c3:39:ff:ce:bf:c7:b3:
                    ea:b8:83:e0:10:4c:b5:4d:83:d3:e4:4a:9f:c4:b2:
                    b0:9a:1f:74:ff:d2:7a:c5:18:bc:ab:2c:23:69:9b:
                    98:7e:6b:25:d5:7d:b0:f2:7d:fa:59:db:ce:7a:f1:
                    dc:6d:fe:c5:56:71:43:d3:70:d3:e0:1e:86:c5:c7:
                    ce:7e:19:69:58:e8:2c:97:24:3c:d2:00:63:21:fd:
                    c5:7b:91:8e:e6:a1:f7:6c:9e:81:18:bc:81:8a:11:
                    4c:2b:4a:35:0d:dd:de:24:d4:6c:9f:8f:43:32:0b:
                    b4:16:7e:a9:55:a9:1f:d8:96:ab:df:d1:01:20:2d:
                    cf:9c:b8:90:9a:09:49:e8:1d:af:84:f9:e5:20:f9:
                    d4:d1:0a:ae:5b:b4:b9:d5:58:5f:ee:97:76:c5:13:
                    1e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:88:04:83:8B:08:58:75:B8:1F:48:F0:FD:6A:A0:C3:AD:43:CE:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/043ee994-0287-35f0-b6d7-d221d3f7feb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl

            X509v3 Authority Key Identifier:
                keyid:F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.182.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:dc:8f:26:9f:a0:d4:70:e9:5a:df:df:1f:92:8d:24:25:51:
         c4:7a:41:5a:48:fa:83:01:e1:35:b9:25:67:99:ee:4b:25:70:
         9d:e5:2f:b2:40:23:a9:8a:96:da:2b:e1:6f:c6:a0:3c:68:30:
         3d:87:8d:c0:94:f5:ff:6e:52:b1:e1:8b:e8:dd:61:33:dd:34:
         fb:ba:7e:e8:05:2e:2f:2f:f9:0a:a4:e4:9f:ea:63:87:84:07:
         16:07:51:f5:51:5b:18:56:a1:ff:e6:3d:9c:ff:96:be:d0:00:
         36:8e:31:eb:b3:92:69:bf:e2:00:c8:a1:06:68:f1:48:c9:2f:
         fe:76:d2:df:75:82:c1:b4:b8:63:ff:bb:80:9d:de:bc:63:75:
         c8:d5:c0:98:98:ec:1d:b9:3d:c6:46:fb:0d:2b:c9:b6:df:49:
         ed:52:86:fb:06:b2:b1:52:e7:44:64:0b:dc:e4:3f:c7:e1:2c:
         59:12:36:29:4c:ca:71:63:18:37:67:35:65:ea:1c:03:0f:86:
         a0:50:b3:b0:f6:de:a2:f6:4b:d5:d5:24:a2:42:11:c6:60:23:
         1b:92:f6:91:5d:7d:34:50:4a:d4:03:af:37:83:4f:57:f5:b8:
         1b:67:c5:b7:f2:0c:20:a2:98:0d:d1:71:79:7a:80:8b:79:ba:
         c1:23:1f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----