Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/6e7c44db-6091-3500-9d81-905ff0044198.roa
File:                     6e7c44db-6091-3500-9d81-905ff0044198.roa (raw, json)
Hash identifier:          EEKx9GG3Fy0dRKTudyjQHNrfLAzhEy/BQzg87zeY+kY=
Subject key identifier:   76:90:E9:DD:63:67:3E:28:EC:26:14:BF:13:8C:8C:10:C1:EE:23:7A
Certificate issuer:       /CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e
Certificate serial:       D34B384496EE89ED9F115ADDDA5E0028E99EEF
Authority key identifier: F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/6e7c44db-6091-3500-9d81-905ff0044198.roa
Signing time:             Wed 19 Nov 2014 03:48:12 +0000
ROA not before:           Fri 12 Jul 2013 04:00:00 +0000
ROA not after:            Wed 12 Jul 2023 04:00:00 +0000
asID:                     11892
IP address blocks:        159.182.231.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            d3:4b:38:44:96:ee:89:ed:9f:11:5a:dd:da:5e:00:28:e9:9e:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e
        Validity
            Not Before: Jul 12 04:00:00 2013 GMT
            Not After : Jul 12 04:00:00 2023 GMT
        Subject: CN=b96e8303-1170-4c0f-a6fe-70642ef58a35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:18:f2:98:2d:3e:b1:20:2c:f6:33:c7:bd:a2:
                    e2:e1:d8:f0:fc:e4:ac:5a:cb:90:4e:aa:7a:9c:2c:
                    78:a6:4b:a1:26:b1:49:bb:ff:5b:0e:93:a3:e3:df:
                    26:16:f6:05:be:8f:d0:86:24:6d:0e:da:4e:26:44:
                    33:57:16:55:7f:fd:5e:ce:e0:d5:a4:85:4a:ac:c2:
                    87:fe:2e:1a:2c:44:05:d9:3e:bd:03:ba:46:ab:77:
                    5e:eb:71:51:c8:2f:52:32:7f:7a:12:8a:5f:ab:b6:
                    34:f2:7d:1a:59:05:49:6b:6c:8d:1d:cf:ed:6f:be:
                    73:f9:4a:32:f7:62:a8:c6:e1:8a:95:95:99:4a:f5:
                    8c:68:a0:42:94:32:95:77:3b:e7:c5:39:54:d7:83:
                    61:85:af:26:eb:ee:3a:42:b7:ee:15:48:83:49:6d:
                    8d:4e:bd:dd:e7:dd:fa:b8:b3:17:03:91:0b:66:fb:
                    0a:4d:34:57:0d:9f:73:ec:a2:ab:1a:41:8a:e6:61:
                    c2:bd:04:2b:23:b9:a8:69:7d:c6:5f:17:3d:2d:10:
                    1d:4b:d3:b3:73:5f:36:7b:86:b2:d0:4c:a5:a6:5f:
                    c7:97:7f:de:4b:8f:9f:7e:b9:7f:91:47:cc:56:54:
                    25:73:f8:bc:ab:bc:6d:00:f8:bc:c6:b3:4d:23:4c:
                    d9:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:90:E9:DD:63:67:3E:28:EC:26:14:BF:13:8C:8C:10:C1:EE:23:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/6e7c44db-6091-3500-9d81-905ff0044198.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl

            X509v3 Authority Key Identifier:
                keyid:F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.182.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:01:94:d5:d8:cd:c1:56:a0:22:60:b6:d4:3e:4e:d4:3b:a2:
         18:db:6b:44:1c:66:5f:ee:b7:29:71:4c:de:83:16:65:5e:d9:
         10:a0:28:fb:0e:9e:06:0f:45:9d:49:11:4f:53:ee:de:43:41:
         16:6e:36:c9:78:d6:5a:6a:1d:17:7b:5e:b2:f4:f5:69:2b:e7:
         16:ed:6c:39:cb:b1:48:63:c3:65:92:db:07:bd:8a:4c:b0:76:
         41:4d:ed:0e:f6:c2:33:10:88:a9:c1:6e:c4:8c:6f:e8:be:18:
         d2:7b:86:d0:41:6c:f8:17:4f:da:94:db:09:1f:14:8c:2a:fd:
         3d:c0:b0:f9:91:08:f3:f0:4b:34:bc:6a:e0:4e:df:8e:54:a1:
         c7:42:30:e4:0d:3b:66:76:64:2f:a7:90:fe:1b:d6:d5:b8:eb:
         56:37:b3:6f:29:24:fd:d9:05:98:65:73:e9:19:30:67:87:b0:
         0e:bb:be:1d:cc:39:b3:7c:9d:5e:ba:7e:d3:d0:3f:9b:db:3c:
         0b:a3:4c:15:64:f0:72:73:1e:43:c9:64:33:ff:d6:f5:0c:94:
         66:7a:92:5a:41:c9:dc:90:27:99:20:7d:e5:4c:02:f2:05:56:
         1a:7d:d7:87:c1:b1:ee:32:ea:2f:6a:34:68:8d:1e:c3:04:ab:
         a8:c1:ab:1c
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUANNLOESW7ontnxFa3dpeACjpnu8wCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDRkMmNkMjA5LWY3N2QtNGZiNi04ZDI4LTk0NmQ0MmY2MGQ4
ZTAeFw0xMzA3MTIwNDAwMDBaFw0yMzA3MTIwNDAwMDBaMC8xLTArBgNVBAMTJGI5
NmU4MzAzLTExNzAtNGMwZi1hNmZlLTcwNjQyZWY1OGEzNTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBALAY8pgtPrEgLPYzx72i4uHY8PzkrFrLkE6qepws
eKZLoSaxSbv/Ww6To+PfJhb2Bb6P0IYkbQ7aTiZEM1cWVX/9Xs7g1aSFSqzCh/4u
GixEBdk+vQO6Rqt3XutxUcgvUjJ/ehKKX6u2NPJ9GlkFSWtsjR3P7W++c/lKMvdi
qMbhipWVmUr1jGigQpQylXc758U5VNeDYYWvJuvuOkK37hVIg0ltjU693efd+riz
FwORC2b7Ck00Vw2fc+yiqxpBiuZhwr0EKyO5qGl9xl8XPS0QHUvTs3NfNnuGstBM
paZfx5d/3kuPn365f5FHzFZUJXP4vKu8bQD4vMazTSNM2XkCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBR2kOndY2c+KOwmFL8TjIwQwe4jejCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGQyY2Qy
MDktZjc3ZC00ZmI2LThkMjgtOTQ2ZDQyZjYwZDhlLzZlN2M0NGRiLTYwOTEtMzUw
MC05ZDgxLTkwNWZmMDA0NDE5OC5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzRkMmNkMjA5LWY3N2QtNGZiNi04ZDI4
LTk0NmQ0MmY2MGQ4ZS80ZDJjZDIwOS1mNzdkLTRmYjYtOGQyOC05NDZkNDJmNjBk
OGUuY3JsMB8GA1UdIwQYMBaAFPjzgOQDCC34jmJhqOXRCg6X0XrnMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvNGQyY2QyMDktZjc3ZC00ZmI2LThkMjgtOTQ2ZDQy
ZjYwZDhlLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ+25zBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAUAGU1djNwVagImC21D5O1DuiGNtrRBxmX+63KXFM3oMWZV7ZEKAo+w6eBg9F
nUkRT1Pu3kNBFm42yXjWWmodF3tesvT1aSvnFu1sOcuxSGPDZZLbB72KTLB2QU3t
DvbCMxCIqcFuxIxv6L4Y0nuG0EFs+BdP2pTbCR8UjCr9PcCw+ZEI8/BLNLxq4E7f
jlShx0Iw5A07ZnZkL6eQ/hvW1bjrVjezbykk/dkFmGVz6RkwZ4ewDru+Hcw5s3yd
Xrp+09A/m9s8C6NMFWTwcnMeQ8lkM//W9QyUZnqSWkHJ3JAnmSB95UwC8gVWGn3X
h8Gx7jLqL2o0aI0ewwSrqMGrHA==
-----END CERTIFICATE-----