Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/b9e2fb08-bafa-3caf-898e-0e9a06efe289.roa
File:                     b9e2fb08-bafa-3caf-898e-0e9a06efe289.roa (raw, json)
Hash identifier:          22CMXCvcciL5db11i9a8/6Pex8vyxY+fZqQeD6WR7a8=
Subject key identifier:   38:95:12:BA:3E:48:74:1A:1C:EE:7C:5F:1D:50:24:F0:9E:2B:6D:23
Certificate issuer:       /CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e
Certificate serial:       E74F0397E3B953948644D077C14A6C73988872
Authority key identifier: F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/b9e2fb08-bafa-3caf-898e-0e9a06efe289.roa
Signing time:             Wed 19 Nov 2014 03:12:46 +0000
ROA not before:           Fri 12 Jul 2013 04:00:00 +0000
ROA not after:            Wed 12 Jul 2023 04:00:00 +0000
asID:                     9823
IP address blocks:        159.182.43.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            e7:4f:03:97:e3:b9:53:94:86:44:d0:77:c1:4a:6c:73:98:88:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e
        Validity
            Not Before: Jul 12 04:00:00 2013 GMT
            Not After : Jul 12 04:00:00 2023 GMT
        Subject: CN=7045d73b-c4c5-484a-be89-b1cc47f1ed9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:31:01:26:38:cb:4e:6e:9a:5a:f2:2f:2a:c7:
                    e5:dc:e9:ca:1a:54:06:b3:f5:21:08:97:97:6b:69:
                    76:32:b4:4a:13:f6:94:54:6e:ac:61:cc:4f:81:06:
                    f7:cd:37:8a:90:71:ae:f9:81:51:65:50:38:6c:4d:
                    64:06:60:c4:96:bc:a8:7f:11:2a:25:6c:b8:fa:7e:
                    90:3a:e7:2a:63:95:e7:4d:33:29:9e:60:e0:6b:ec:
                    e4:52:60:7c:f5:29:59:ca:9a:85:72:60:85:b4:83:
                    bd:15:0d:a2:55:4e:94:ce:9c:39:86:4a:cf:ea:bb:
                    6a:cf:58:ba:f0:1a:0a:e2:7c:25:53:52:b5:31:02:
                    9e:f6:be:ce:ec:14:56:89:c5:73:8d:72:5b:fd:0d:
                    41:93:e4:35:9a:86:a4:cf:0f:f6:31:a9:fd:81:31:
                    1e:d4:a5:19:7a:10:2c:eb:84:f2:b9:07:50:c2:73:
                    f7:dc:4d:23:63:2f:1b:cb:e1:f4:99:80:89:41:57:
                    ac:9c:3f:f6:43:f8:eb:60:7f:ab:3c:6a:81:09:e7:
                    0c:b7:fe:ff:00:59:4e:9f:05:10:3a:a9:f3:66:b6:
                    e0:63:83:52:06:4c:eb:93:27:81:bd:48:22:49:1c:
                    ae:1f:4e:cf:e6:b1:d4:de:eb:51:c9:d5:6d:ec:d5:
                    6b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:95:12:BA:3E:48:74:1A:1C:EE:7C:5F:1D:50:24:F0:9E:2B:6D:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/b9e2fb08-bafa-3caf-898e-0e9a06efe289.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl

            X509v3 Authority Key Identifier:
                keyid:F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.182.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:14:0a:33:09:17:3c:73:05:8a:09:f9:71:c5:88:cd:44:37:
         eb:d2:69:97:95:10:53:1b:b4:fd:7e:14:25:5c:44:e2:52:5c:
         15:31:22:5b:db:46:8b:6d:0a:7f:b6:43:7c:22:ff:d4:e5:e7:
         de:14:01:9c:36:2d:5f:2c:06:bc:09:78:12:88:4d:c0:2f:cb:
         6c:c5:44:93:cc:99:cf:11:8e:30:9c:15:df:2b:57:db:08:b0:
         0c:24:2d:4a:04:5f:83:ed:94:43:54:52:27:d9:a3:c1:ac:8a:
         3b:eb:5b:ac:24:d1:62:b3:d1:a1:ce:f0:3e:a4:43:b3:de:0e:
         3c:7f:ac:91:76:62:cf:f3:3c:60:79:ab:eb:c4:1b:a7:b8:59:
         85:21:e5:e3:58:15:fb:9d:3f:42:84:98:08:54:f1:69:28:9e:
         fc:44:3d:82:2e:f0:6f:f9:f8:10:0d:46:6a:ff:9d:51:6e:aa:
         2a:87:3c:24:02:5a:7e:f2:f8:4d:dc:4e:01:a7:d2:fe:9b:a1:
         63:23:3e:af:c8:d8:51:07:19:e9:8f:36:af:f4:8d:3c:50:45:
         ac:f1:20:18:fa:b4:24:64:9f:ce:56:9d:b4:a8:cd:5d:08:63:
         e0:ea:3a:52:6c:e0:7e:43:91:76:87:09:5e:35:f8:ca:e5:e5:
         a0:f5:30:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----