Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/5c5ecb71-d622-3ce8-b3ab-d99d45c82197.roa
File:                     5c5ecb71-d622-3ce8-b3ab-d99d45c82197.roa (raw, json)
Hash identifier:          BSvObKIstRSaTRq9Mw/GnnYoHPH9M8KW2OMe+d79EeQ=
Subject key identifier:   16:42:EA:89:02:67:F9:42:F9:99:FA:1B:5F:CF:9B:2B:00:1D:78:EF
Certificate issuer:       /CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e
Certificate serial:       7579191A480D6CC29EEA1705013F5F8D1A491C
Authority key identifier: F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/5c5ecb71-d622-3ce8-b3ab-d99d45c82197.roa
Signing time:             Thu 18 Jul 2013 17:48:31 +0000
ROA not before:           Fri 12 Jul 2013 04:00:00 +0000
ROA not after:            Wed 12 Jul 2023 04:00:00 +0000
asID:                     11892
IP address blocks:        159.182.14.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:79:19:1a:48:0d:6c:c2:9e:ea:17:05:01:3f:5f:8d:1a:49:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e
        Validity
            Not Before: Jul 12 04:00:00 2013 GMT
            Not After : Jul 12 04:00:00 2023 GMT
        Subject: CN=c67dfbe6-b3bd-4c0b-9c7e-8228cc47ccb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d0:3c:87:ec:8c:84:de:81:65:4f:3a:c3:64:
                    06:f6:be:2e:b6:1c:c3:21:96:b6:e2:9a:a2:51:e7:
                    e7:4f:76:d0:8f:be:11:14:c4:c2:4c:ee:84:47:db:
                    04:b9:97:9a:29:f9:bc:2d:1d:f7:2d:3d:c1:2f:fb:
                    db:b9:03:a0:1f:27:69:c8:2a:aa:77:f0:d2:de:ce:
                    c3:11:74:b2:32:cd:f6:49:2d:45:0f:99:43:e1:e7:
                    75:70:4e:a2:1a:01:cd:9f:63:2b:f1:bd:b2:fd:ff:
                    08:7b:2f:32:d5:a1:22:b3:6a:d5:e1:0b:6b:bd:03:
                    ad:ee:9c:d8:cb:60:2e:f2:d1:6a:8e:43:89:9b:3c:
                    df:69:4e:99:94:a5:cd:a9:4e:a5:40:7c:40:f6:63:
                    f1:98:8c:6a:07:a7:3d:2e:1f:d1:a5:c9:8f:98:e2:
                    88:45:45:46:21:cd:a3:a2:fd:18:82:09:d5:14:c3:
                    cb:5b:3c:1a:75:f6:4e:83:4a:5e:6e:82:12:e2:a6:
                    05:01:e4:0b:9c:89:28:bf:34:6b:b2:61:b2:1e:fa:
                    36:14:d2:81:78:e6:8e:4b:7f:d4:95:a4:1a:f9:62:
                    33:7e:b0:2e:32:3e:3d:d4:c7:98:5f:9a:aa:c4:71:
                    28:f8:9a:8c:07:0e:0a:2b:0c:de:12:1a:a4:d4:f9:
                    92:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:42:EA:89:02:67:F9:42:F9:99:FA:1B:5F:CF:9B:2B:00:1D:78:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/5c5ecb71-d622-3ce8-b3ab-d99d45c82197.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl

            X509v3 Authority Key Identifier:
                keyid:F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.182.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:6f:be:af:62:c4:57:a4:a9:33:64:cf:e9:68:8c:b8:d1:2e:
         00:48:6c:13:ba:6a:05:eb:be:d8:d6:56:82:1f:7a:3f:6c:4c:
         37:5b:9e:d7:f2:11:d0:0d:32:18:eb:f0:e7:2b:ee:8e:49:d3:
         da:7d:a3:f5:9b:1a:18:cf:07:ac:c5:4d:72:f9:c3:a2:92:94:
         99:a7:78:2f:cc:75:d4:ba:fd:5e:7c:3c:91:1b:2e:e7:65:15:
         5b:54:3c:29:61:7b:cc:e1:a8:a5:0b:f2:2d:20:43:a2:3f:f1:
         e7:09:58:7e:69:7e:26:9f:43:de:45:16:a8:77:44:3a:2e:fc:
         1a:d0:c2:3b:ed:83:22:a5:90:6a:19:82:4a:9f:ce:ad:06:9f:
         51:f3:49:d2:98:eb:0a:a9:57:b9:90:0f:1c:5f:79:e0:27:d4:
         1e:5d:83:69:2c:8b:3f:a2:7c:cc:34:12:40:22:77:2a:7a:9f:
         95:80:cc:88:ab:e1:56:bb:eb:05:6a:d9:87:94:53:78:88:61:
         58:2d:e6:ce:f7:50:d0:a0:09:f7:a8:a5:cb:44:a3:d2:37:2c:
         28:fd:0e:90:0a:c5:a9:cc:db:ae:23:56:63:26:fb:7c:4d:38:
         25:53:3d:a3:2b:e2:56:e2:bc:54:ed:56:cb:b3:d1:81:a0:0a:
         8e:9b:94:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----