Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/8651e8e8-47db-3e8b-9696-2d0e790139ef.roa
File:                     8651e8e8-47db-3e8b-9696-2d0e790139ef.roa (raw, json)
Hash identifier:          bReGJ/r0/9sRXnHs+9O6RSQS36Oi6S+iRzdclnTkf6I=
Subject key identifier:   23:BB:2C:8E:75:EB:E1:A4:A8:68:08:23:56:DD:BD:8D:30:44:F9:CE
Certificate issuer:       /CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e
Certificate serial:       64BCEE53BF6152BF9864577814A2946F39D41C
Authority key identifier: F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/8651e8e8-47db-3e8b-9696-2d0e790139ef.roa
Signing time:             Wed 19 Nov 2014 03:43:31 +0000
ROA not before:           Fri 12 Jul 2013 04:00:00 +0000
ROA not after:            Wed 12 Jul 2023 04:00:00 +0000
asID:                     29016
IP address blocks:        159.182.214.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:bc:ee:53:bf:61:52:bf:98:64:57:78:14:a2:94:6f:39:d4:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e
        Validity
            Not Before: Jul 12 04:00:00 2013 GMT
            Not After : Jul 12 04:00:00 2023 GMT
        Subject: CN=2732ac36-36cd-4f08-bc44-31c1315d22c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b3:f4:ce:5e:0b:25:bb:3e:7f:d1:47:84:09:
                    e3:a6:75:14:41:fe:5d:1c:ac:18:e2:5c:ad:ea:c1:
                    72:f7:bb:6e:61:85:16:96:fa:5c:0d:91:0a:1a:2c:
                    d2:9c:cb:64:ec:f0:00:a7:68:c3:6d:7a:ed:59:99:
                    d7:54:c4:e0:ae:60:79:2a:6e:3e:d6:ee:92:80:1d:
                    f4:63:29:57:ec:70:af:d1:d8:c3:cc:34:81:81:f7:
                    32:0e:09:32:88:7a:14:03:be:40:d3:9e:b6:35:94:
                    26:a4:57:d2:e2:7f:c2:82:df:f2:15:40:6a:8f:2f:
                    9b:aa:25:a6:59:c8:1b:22:79:c8:aa:ad:9a:3a:db:
                    d3:f4:e0:78:5e:89:20:98:70:ca:1a:95:76:f2:8b:
                    d5:3e:1a:b5:38:db:7e:38:07:d9:b4:0f:c5:33:f8:
                    84:99:44:0c:7b:2d:71:ed:e0:3f:69:45:cd:0e:82:
                    92:cb:84:10:b8:35:82:3e:e3:e8:1a:f9:51:34:e1:
                    99:50:91:b9:9b:28:72:a1:90:9f:7c:18:9d:f8:ed:
                    ac:35:88:83:39:3d:2e:72:79:23:67:03:18:d7:88:
                    72:90:e4:4b:e7:a4:3b:5c:b7:d7:2e:7e:7f:0c:98:
                    d5:0f:ef:a7:d0:ce:75:65:b2:bc:dd:46:15:db:f5:
                    a0:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:BB:2C:8E:75:EB:E1:A4:A8:68:08:23:56:DD:BD:8D:30:44:F9:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/8651e8e8-47db-3e8b-9696-2d0e790139ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl

            X509v3 Authority Key Identifier:
                keyid:F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.182.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:d4:43:05:a1:2a:ac:57:24:16:ba:51:80:8c:b5:8f:5b:7e:
         ab:b5:3d:93:cb:52:42:44:72:28:82:26:bc:07:66:86:ff:d6:
         ef:cf:96:f9:32:21:83:65:bb:e4:1a:6b:70:7d:b5:43:21:b1:
         72:ef:05:80:20:d4:5e:ab:02:36:0f:2f:2a:07:47:b7:62:ba:
         27:31:90:f4:94:b9:af:d5:0f:34:62:a9:b1:c5:6d:64:d0:82:
         fc:7e:f4:57:f7:62:74:ba:ea:9a:91:3f:bc:22:e5:de:20:49:
         72:0c:4b:fc:72:76:fe:fb:08:65:56:6d:7b:a4:eb:c1:72:4a:
         e9:10:c7:c5:16:16:19:32:b4:00:f6:65:ce:2d:da:75:7b:30:
         59:ba:f1:2e:d0:7e:06:e2:f7:02:3a:c1:9f:3c:1c:06:b2:b4:
         f0:59:58:9e:93:31:8d:7c:87:83:80:78:55:25:eb:b4:f5:62:
         01:a7:64:a5:a0:e8:03:09:21:84:8c:7c:5c:7b:a5:92:1f:6c:
         9e:de:c5:5f:f6:6a:65:ba:0e:ce:ab:25:e4:74:a7:68:02:c2:
         37:5f:21:aa:39:de:77:7b:bd:de:7a:84:5f:dd:fa:54:98:46:
         49:f7:7a:cd:9d:ff:90:ee:39:6b:3a:04:e9:e3:4a:34:87:cd:
         81:5b:57:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----