Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/def7a596-0764-36a9-b89e-81e1e061f959.roa
File:                     def7a596-0764-36a9-b89e-81e1e061f959.roa (raw, json)
Hash identifier:          fV58y4ONmTMMkMO18a98M6Q5lq1eo+Z2uarYUZOEaOo=
Subject key identifier:   CD:CC:49:F4:12:AA:3C:F3:62:09:55:FC:A5:F1:2C:8C:00:18:C3:85
Certificate issuer:       /CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e
Certificate serial:       3CE1876F999EF1AF8EE1A7D6AD2E4E366F13C4
Authority key identifier: F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/def7a596-0764-36a9-b89e-81e1e061f959.roa
Signing time:             Wed 19 Nov 2014 03:04:01 +0000
ROA not before:           Fri 12 Jul 2013 04:00:00 +0000
ROA not after:            Wed 12 Jul 2023 04:00:00 +0000
asID:                     11892
IP address blocks:        159.182.30.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:e1:87:6f:99:9e:f1:af:8e:e1:a7:d6:ad:2e:4e:36:6f:13:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e
        Validity
            Not Before: Jul 12 04:00:00 2013 GMT
            Not After : Jul 12 04:00:00 2023 GMT
        Subject: CN=85ade468-b04a-4eef-a0fc-e9dc0b94bef3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:70:9c:c1:42:06:06:a7:08:cf:09:57:f9:d6:
                    e9:73:48:45:e8:6b:ec:75:17:30:4c:ad:2a:f4:00:
                    d0:52:bb:e6:a5:5a:c8:82:b6:cf:7e:84:ab:f2:ea:
                    5c:0c:a9:2a:76:6d:30:7b:a2:9e:5a:c3:f0:fe:ec:
                    39:66:89:ef:f7:3f:f2:fb:37:2b:3f:aa:16:96:7e:
                    9f:1c:c6:ba:52:0d:f3:25:35:75:2c:dd:f6:97:ab:
                    39:c3:b3:5e:08:c6:2c:79:b5:54:0d:b4:58:73:6d:
                    6b:b4:c1:6d:8a:c1:b6:49:03:ca:ae:ab:ca:64:c6:
                    6f:c0:42:18:1b:dd:80:6f:a6:76:fc:2d:56:91:19:
                    4b:a1:b2:b7:c1:3b:bc:36:18:ef:f3:84:58:e8:3a:
                    0c:a2:f5:0b:b7:aa:7c:db:dc:a3:2f:fd:fc:16:ff:
                    7c:c2:01:9b:6b:39:23:19:a7:95:9c:aa:c4:93:8f:
                    d0:85:f1:e9:49:96:b1:48:27:92:09:fa:4a:b2:8d:
                    f3:5c:b4:1d:ce:3c:d9:2b:89:8a:58:50:6f:bd:21:
                    d4:e1:a6:32:7d:7f:42:ee:ee:dd:0e:1f:2b:5c:4a:
                    b5:b9:51:66:44:f8:4a:bf:83:b2:73:93:67:75:b8:
                    60:4e:12:90:43:22:9b:f0:72:fd:74:20:f2:43:07:
                    9b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:CC:49:F4:12:AA:3C:F3:62:09:55:FC:A5:F1:2C:8C:00:18:C3:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/def7a596-0764-36a9-b89e-81e1e061f959.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl

            X509v3 Authority Key Identifier:
                keyid:F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.182.30.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:0f:29:cb:e2:18:da:a5:7f:51:67:3f:0a:d1:14:9d:ba:aa:
         05:16:64:8e:5d:96:9c:cd:35:68:e7:68:a4:38:15:d3:c9:31:
         53:60:33:26:d8:b1:c4:a9:f3:5b:7d:58:6c:88:48:cf:dd:fe:
         fd:42:91:e4:e0:dd:e7:87:d8:2c:3c:b8:da:3b:8c:1a:aa:c8:
         f1:a1:df:7e:bf:8d:e0:b6:a5:f7:31:02:35:fe:26:e2:48:b3:
         c1:da:58:46:fd:4c:27:18:cd:bf:6d:92:82:74:af:f8:a0:2a:
         71:6c:d7:6c:dd:00:85:b7:87:97:45:89:8d:ed:b8:c5:e3:d6:
         6a:b0:11:3f:d8:1d:7b:5f:90:7f:57:b8:8c:bc:63:94:36:b4:
         04:ac:47:f6:6d:2a:34:5c:5d:1a:ac:c8:0a:42:f0:69:82:15:
         f2:f3:ce:7c:e2:a4:b9:93:21:33:1e:e9:ad:64:21:8e:63:f3:
         d8:cd:69:ee:f7:61:e9:95:bd:73:5f:22:6a:ec:28:6a:e6:e9:
         ab:48:ab:9c:5b:38:14:f8:f7:f6:b8:a4:09:08:45:a6:fd:9f:
         8b:09:a4:09:26:94:4e:60:91:af:6e:7e:14:4b:45:e3:53:48:
         87:03:0e:19:33:d4:9c:2b:4f:b4:5a:87:dc:3e:c7:f8:c6:54:
         65:7f:16:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----