Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/b6a16f1f-0e0d-3a3a-978e-6fc4389d9a9b.roa
File:                     b6a16f1f-0e0d-3a3a-978e-6fc4389d9a9b.roa (raw, json)
Hash identifier:          zZC4tAgqHUo/hhSaESR0lC0Vn89WGqjSOr+VI/rm8IA=
Subject key identifier:   17:B1:40:D8:AA:B5:EC:6F:E8:D5:93:25:82:D5:DC:59:0D:3C:08:BA
Certificate issuer:       /CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e
Certificate serial:       ACD2F0BAC4C0F91D71CA1F576172A678657D8E
Authority key identifier: F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/b6a16f1f-0e0d-3a3a-978e-6fc4389d9a9b.roa
Signing time:             Wed 19 Nov 2014 03:29:00 +0000
ROA not before:           Fri 12 Jul 2013 04:00:00 +0000
ROA not after:            Wed 12 Jul 2023 04:00:00 +0000
asID:                     11892
IP address blocks:        159.182.112.0/23 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            ac:d2:f0:ba:c4:c0:f9:1d:71:ca:1f:57:61:72:a6:78:65:7d:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e
        Validity
            Not Before: Jul 12 04:00:00 2013 GMT
            Not After : Jul 12 04:00:00 2023 GMT
        Subject: CN=0c7b55f3-7161-4737-bc67-c491ebed802d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3f:81:73:5e:aa:50:19:97:bc:85:8d:42:7b:
                    e4:90:35:c3:d1:16:19:5d:d3:a9:7f:b2:64:e3:2b:
                    fd:0c:9f:b5:95:23:21:23:32:2d:bb:f6:2c:5d:a8:
                    49:b1:89:b3:75:50:32:94:f0:9f:86:81:0d:bb:0e:
                    41:37:90:74:c0:6d:14:c5:05:01:bb:e3:46:ff:3b:
                    f4:50:c3:35:17:c6:1e:c5:29:d7:8e:0d:af:34:36:
                    bc:32:72:99:01:b1:3a:2a:ce:8c:af:dc:ff:be:ba:
                    04:93:45:70:4b:fd:a2:18:23:2a:c2:19:e7:79:e1:
                    3f:d1:45:19:24:b4:c6:9d:c4:c4:37:ad:26:77:e0:
                    f4:f7:47:1a:d0:34:6b:73:bb:46:68:2a:ce:b2:9a:
                    7d:5e:1e:c7:23:f8:09:11:c4:5b:af:39:b1:ac:e1:
                    cd:c0:45:eb:fb:8b:ef:16:af:af:b0:2a:b7:3c:46:
                    5e:00:d9:92:98:37:24:6f:f1:84:0a:7a:ae:f2:e3:
                    f5:f6:ad:f1:2e:fd:9f:67:1b:d9:f7:ee:34:bb:89:
                    fe:35:42:cc:59:fa:06:a0:da:77:1c:e9:ea:de:89:
                    e7:cf:a9:de:01:76:13:7f:6f:86:97:46:bf:cb:40:
                    36:26:4e:31:80:76:40:57:c1:4a:fa:de:c9:5a:02:
                    ec:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:B1:40:D8:AA:B5:EC:6F:E8:D5:93:25:82:D5:DC:59:0D:3C:08:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/b6a16f1f-0e0d-3a3a-978e-6fc4389d9a9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl

            X509v3 Authority Key Identifier:
                keyid:F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.182.112.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:b0:81:ce:69:5e:ac:27:39:56:23:c7:27:37:1e:8e:62:d5:
         4d:5f:a8:9a:94:d8:e8:01:c4:58:5f:e3:66:fa:55:2a:9a:ba:
         d4:90:21:34:df:57:a8:33:d7:f6:80:b1:1d:eb:6f:61:43:3d:
         aa:5c:c7:b2:52:44:71:92:3b:79:02:ae:70:62:17:f7:58:76:
         de:f6:ac:88:0b:c5:5f:7a:2e:94:57:7e:c6:01:06:58:9c:3b:
         40:87:c2:6a:ed:19:09:e4:ad:cb:fc:d2:94:e8:15:80:ac:04:
         47:26:64:34:fd:02:f0:ff:fc:14:9b:c5:e5:bf:58:c0:60:34:
         49:55:24:f8:12:f9:10:e2:42:d8:a4:b1:aa:52:96:ee:6c:a0:
         bf:d9:14:d2:98:23:27:99:94:f0:81:ba:5c:0e:82:7a:e6:dc:
         d7:25:d5:08:0e:44:fe:26:05:12:ab:90:d1:c4:c5:ba:27:de:
         cc:74:24:d9:93:e5:88:dd:23:be:46:b1:40:f4:3e:31:37:17:
         e1:4a:2b:ef:eb:2b:f5:04:4b:28:fa:13:69:7b:7e:15:a3:8f:
         a9:b4:8e:95:09:c4:d5:f3:d1:25:2b:12:ee:35:3c:7e:16:cb:
         87:d1:f9:9f:bf:56:a0:3f:8a:11:ac:5e:0b:b6:65:24:6b:c3:
         2e:dd:8f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----