Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/0f1e43f6-2de4-382e-b3b7-f8f6e8dab31b.roa
File:                     0f1e43f6-2de4-382e-b3b7-f8f6e8dab31b.roa (raw, json)
Hash identifier:          uPZE0OrsJXOFaC2x/frlZL2n05gsYDPA/ZsldKFvhyA=
Subject key identifier:   96:66:18:76:E7:5F:63:20:4C:D3:DB:30:D6:24:0B:90:92:D2:5C:26
Certificate issuer:       /CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e
Certificate serial:       58A12D7BD4195BAF28A8943B3E342EF6769990
Authority key identifier: F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/0f1e43f6-2de4-382e-b3b7-f8f6e8dab31b.roa
Signing time:             Thu 18 Jul 2013 20:48:04 +0000
ROA not before:           Fri 12 Jul 2013 04:00:00 +0000
ROA not after:            Wed 12 Jul 2023 04:00:00 +0000
asID:                     11892
IP address blocks:        159.182.80.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:a1:2d:7b:d4:19:5b:af:28:a8:94:3b:3e:34:2e:f6:76:99:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e
        Validity
            Not Before: Jul 12 04:00:00 2013 GMT
            Not After : Jul 12 04:00:00 2023 GMT
        Subject: CN=c5872cbe-cc16-4530-bcae-150b53cf8f7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:52:57:a3:42:08:7b:f0:b6:75:63:24:36:f3:
                    f1:32:a3:c2:03:17:49:b2:37:b9:4c:7e:25:bc:a5:
                    62:75:4d:bf:f8:98:48:21:c1:fd:32:d0:43:dc:78:
                    d1:0d:8c:21:9e:fc:6d:9d:e1:5d:9f:5b:ae:80:43:
                    cd:a5:d5:fa:2d:c3:7b:04:69:96:a0:ed:57:0a:3d:
                    dd:f5:73:bf:a0:6c:ac:17:75:43:a8:c6:6c:a0:eb:
                    90:d6:8f:d1:02:54:dd:f7:90:a7:da:61:3d:69:58:
                    05:89:5f:32:fb:5a:62:d7:a9:ff:36:59:13:69:58:
                    2e:72:8a:c9:ef:6f:9a:39:84:a4:54:93:00:e3:46:
                    67:c2:c5:9b:3d:d5:77:7b:78:48:9a:73:d5:c7:40:
                    c3:c6:22:a4:7b:78:6d:f8:76:f0:a4:d5:99:60:19:
                    ed:24:2f:37:e9:d5:c9:9e:35:ce:9e:2e:bf:bd:a6:
                    75:55:46:44:ca:ea:ca:98:06:5a:99:36:d1:5d:e6:
                    5d:11:42:9d:1c:b4:8a:7e:89:d8:97:54:90:78:9c:
                    cf:3f:cf:45:0f:2d:74:3c:74:5e:bc:bc:a1:f8:e3:
                    11:24:a6:8b:13:c1:37:0b:5c:65:5b:05:8e:a2:50:
                    44:10:7e:ec:ed:3c:ac:0f:1b:e7:dd:19:63:3f:e6:
                    4a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:66:18:76:E7:5F:63:20:4C:D3:DB:30:D6:24:0B:90:92:D2:5C:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/0f1e43f6-2de4-382e-b3b7-f8f6e8dab31b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl

            X509v3 Authority Key Identifier:
                keyid:F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.182.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:86:70:fa:ed:31:48:ff:d3:54:21:a1:ee:fc:13:ca:07:fd:
         a5:78:09:4e:91:68:c9:50:7c:c2:ab:57:47:60:fa:da:14:28:
         f4:a4:b7:e2:84:2d:75:64:b4:66:d0:bb:38:7d:c3:6d:e2:09:
         b5:02:ac:62:15:f5:af:6e:bd:35:d2:1a:7f:54:01:9e:57:39:
         84:56:7f:25:e7:22:16:2f:f8:fd:64:0c:5d:71:48:d3:04:4f:
         ff:f7:f0:66:92:a2:1d:9c:64:9f:2e:14:54:37:3c:06:0e:ac:
         d8:06:c6:dc:8e:cc:8c:96:f4:1f:1b:ac:50:49:76:cd:bb:cb:
         c8:b4:e9:af:08:a0:65:c7:51:53:d1:84:9e:c2:a5:23:37:a3:
         19:6e:98:b3:26:af:4b:63:04:f2:12:58:86:f1:e1:81:f7:d9:
         ab:23:45:24:fc:60:f9:1e:60:86:8a:ff:2c:03:b9:1f:7b:16:
         a1:7b:77:58:ad:a5:a9:d6:5e:f1:c2:0f:7c:df:64:47:af:6b:
         c8:c4:00:3f:f1:c4:67:14:02:11:3e:fb:18:85:7b:40:37:73:
         cc:30:8b:37:e1:57:b7:9b:37:7b:bc:d8:e7:59:29:74:e7:54:
         1e:a8:ad:78:a7:fc:b4:6b:e6:ae:bc:6f:70:58:b7:f8:1d:5f:
         97:cb:1e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----