Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/52e762b4-b22d-34da-a320-de2a339d631c.roa
File:                     52e762b4-b22d-34da-a320-de2a339d631c.roa (raw, json)
Hash identifier:          gbkyJcKvL+UN30jEhuIUtFyo83w/SaYYa1lsvozyU5s=
Subject key identifier:   90:AA:26:77:7C:D0:B1:4E:BA:7C:04:CF:78:65:B4:FA:11:C8:0C:58
Certificate issuer:       /CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e
Certificate serial:       C337B3A9EA73651D735BB5710469B805ECB37B
Authority key identifier: F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/52e762b4-b22d-34da-a320-de2a339d631c.roa
Signing time:             Sat 13 Jul 2013 06:16:31 +0000
ROA not before:           Fri 12 Jul 2013 04:00:00 +0000
ROA not after:            Wed 12 Jul 2023 04:00:00 +0000
asID:                     6461
IP address blocks:        159.182.54.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            c3:37:b3:a9:ea:73:65:1d:73:5b:b5:71:04:69:b8:05:ec:b3:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e
        Validity
            Not Before: Jul 12 04:00:00 2013 GMT
            Not After : Jul 12 04:00:00 2023 GMT
        Subject: CN=3f9b8b4e-e19c-492a-8396-c33922bfc8d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:fe:35:bd:74:00:35:6c:8c:95:a6:ac:c0:d7:
                    34:1f:8a:12:cb:a7:57:6d:9c:c3:74:d4:c6:05:4a:
                    72:d0:34:5a:2c:f9:ae:bf:b4:db:62:d8:04:44:b4:
                    b3:76:ec:d0:a7:39:4a:23:b5:4a:16:4c:03:9d:4a:
                    89:5c:cd:26:15:f2:28:b0:18:3f:65:24:a4:82:04:
                    91:7f:87:8c:f7:cd:e1:46:29:56:9f:e4:0f:55:26:
                    9b:e4:08:61:46:b9:fd:ae:6c:4b:0e:ba:0a:32:8a:
                    f8:c1:ab:f4:33:20:6b:cc:3c:a3:24:dd:43:1e:d0:
                    07:0b:2b:f8:2e:7b:d8:3e:b6:d6:08:86:f0:d7:86:
                    28:36:dc:44:c9:a2:ca:19:cd:f9:0d:83:ec:ff:a6:
                    17:54:95:2a:71:be:b2:38:e7:54:0e:d0:3d:ba:c2:
                    f1:7b:e9:46:bf:7a:20:04:b0:fb:e5:f0:47:0c:3e:
                    4e:2f:41:12:d9:57:5b:3a:b9:12:e4:be:f6:81:4a:
                    86:18:91:70:d4:86:7d:33:43:7d:b5:00:a3:89:4f:
                    a0:71:bc:b7:b5:15:d3:bd:86:e3:b0:2d:58:e2:cd:
                    8b:c4:41:94:2d:c7:43:54:d3:93:b1:ed:95:fb:b7:
                    1d:6f:fc:9f:d3:d6:b2:0f:50:b9:cc:17:db:62:e6:
                    be:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:AA:26:77:7C:D0:B1:4E:BA:7C:04:CF:78:65:B4:FA:11:C8:0C:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/52e762b4-b22d-34da-a320-de2a339d631c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl

            X509v3 Authority Key Identifier:
                keyid:F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.182.54.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:d1:12:ec:9d:56:29:55:68:3e:af:61:b7:f3:72:41:88:1a:
         78:f3:54:ca:bc:d1:80:df:1a:98:b7:f5:cd:9c:f2:ca:24:6c:
         8e:a7:06:af:f9:e2:48:d0:91:34:29:34:64:48:7b:9c:46:0c:
         2d:28:a1:d1:90:92:a8:24:37:d2:87:db:da:60:9e:8f:be:05:
         c2:9f:0b:f9:ce:8d:93:1f:e2:ae:06:00:cb:d1:22:a8:7b:a6:
         c0:30:5e:83:21:fe:ca:11:91:3a:7d:90:5b:9e:f4:a5:c1:ce:
         e6:ef:fc:5a:4d:82:07:65:b2:1d:ec:a3:e0:4b:96:40:58:54:
         cd:e9:8f:c2:63:08:43:5e:43:65:84:a2:f5:2f:4b:f3:6c:26:
         db:a7:cf:f2:e1:59:5b:d6:33:51:60:64:99:f1:98:e4:51:85:
         71:ab:c5:c1:bc:26:ea:05:84:6b:de:db:cb:31:45:42:30:4a:
         fd:bf:50:bf:35:88:99:cb:63:28:6b:b3:11:a9:7e:2f:05:7d:
         64:ec:04:52:b5:a6:87:ae:75:3d:22:45:7a:d1:c7:af:87:63:
         a2:52:78:c1:69:0f:84:33:0b:0b:20:e6:99:d0:6b:1b:89:7a:
         0d:b3:f5:00:3b:9e:2f:27:d6:d6:5c:b5:58:c7:e1:f7:41:4d:
         36:46:25:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----