Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/e0f708ea-1f49-30ff-840c-7f7dccc5d219.roa
File:                     e0f708ea-1f49-30ff-840c-7f7dccc5d219.roa (raw, json)
Hash identifier:          VuneDktSYcrnAwUs7w6joU7uvU3TtrElHD2tXTqMU6M=
Subject key identifier:   21:4F:30:BD:51:84:30:48:15:FE:A8:0B:DC:C3:F0:31:2F:ED:2E:A0
Certificate issuer:       /CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e
Certificate serial:       843AA342DE4DAA0C0EE32A8AFF796D3843063B
Authority key identifier: F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/e0f708ea-1f49-30ff-840c-7f7dccc5d219.roa
Signing time:             Wed 19 Nov 2014 03:26:32 +0000
ROA not before:           Fri 12 Jul 2013 04:00:00 +0000
ROA not after:            Wed 12 Jul 2023 04:00:00 +0000
asID:                     11892
IP address blocks:        159.182.111.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            84:3a:a3:42:de:4d:aa:0c:0e:e3:2a:8a:ff:79:6d:38:43:06:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e
        Validity
            Not Before: Jul 12 04:00:00 2013 GMT
            Not After : Jul 12 04:00:00 2023 GMT
        Subject: CN=e37b3d06-0e74-4243-9937-9b29a7d9e8f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:aa:09:ef:cf:90:33:fc:d8:9c:95:db:aa:71:
                    85:dc:b4:df:fe:c5:ca:78:20:5d:4f:75:fe:30:96:
                    62:61:95:06:be:3e:66:f6:ae:06:2f:3d:2b:78:bb:
                    e0:22:e5:9d:7d:ee:06:ec:85:a6:b1:fd:6b:9c:87:
                    7c:ee:3f:05:68:f5:a6:6f:53:60:89:1f:79:2d:99:
                    36:d9:b6:ea:63:6a:16:8a:2f:2a:90:49:d7:8c:30:
                    f6:2a:59:36:b3:c1:47:81:e0:4e:ab:39:d1:51:ca:
                    da:e3:3b:02:7f:12:a4:05:c9:db:7f:b6:92:20:be:
                    63:3f:ed:f4:d8:d1:a8:b7:36:cd:f9:23:9c:60:b1:
                    35:48:61:73:5c:47:b3:af:51:2e:e1:de:ce:86:83:
                    36:76:84:1b:a1:69:a2:ff:88:99:bb:c9:1c:76:6d:
                    77:00:26:65:1f:2a:e4:03:75:3c:40:fe:22:31:4e:
                    65:d1:c0:ae:85:64:69:74:dc:11:9d:87:a1:f5:ab:
                    88:5c:4b:42:cb:17:4b:6b:15:9f:02:90:e8:cf:64:
                    65:3c:0b:8b:fd:ed:7d:c8:6c:00:41:d5:dd:b6:3b:
                    51:69:b6:cd:36:34:3b:25:39:0f:ec:8a:22:f4:82:
                    ea:18:d9:5d:b1:62:64:af:05:0b:0f:39:61:92:ea:
                    52:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:4F:30:BD:51:84:30:48:15:FE:A8:0B:DC:C3:F0:31:2F:ED:2E:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/e0f708ea-1f49-30ff-840c-7f7dccc5d219.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl

            X509v3 Authority Key Identifier:
                keyid:F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.182.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:83:51:d9:a9:07:11:84:4a:2f:b5:29:30:2b:45:a0:83:13:
         42:e5:de:b7:95:14:94:ea:56:2c:cb:9d:39:e7:89:b8:91:f0:
         31:b3:58:d5:09:4e:f7:5a:9c:ed:00:f5:a8:9d:54:6c:dd:91:
         0c:55:6e:75:6c:c0:28:4e:2d:33:98:e9:22:54:7d:5b:7e:a6:
         40:1b:46:44:78:08:98:4b:c5:be:95:70:d8:e5:cc:67:27:4a:
         05:25:95:f3:f1:af:ed:d0:83:14:83:08:30:6f:81:19:82:ac:
         4b:80:c1:31:d8:a6:98:64:6f:22:f0:b1:17:f9:ea:62:4d:0f:
         d7:09:df:76:3c:eb:c4:67:ed:95:3e:58:9a:09:cf:d8:7a:07:
         5b:b6:6d:17:04:03:39:24:d9:f0:b8:4b:e2:ca:92:a8:b5:2d:
         cc:df:3b:10:c8:78:94:6d:bc:d8:59:17:20:26:8e:06:d6:b3:
         ff:2d:60:19:85:d3:cf:3e:53:24:25:40:00:cf:aa:f3:d6:76:
         15:78:fb:d4:ed:20:72:9a:f8:05:78:69:6d:59:65:b7:e2:9b:
         63:8b:1d:e9:f4:3b:18:40:b6:5b:c3:25:ac:10:40:ea:7d:b7:
         83:5c:5f:b4:f5:87:e3:9d:8f:3c:6f:2d:29:02:16:0e:9d:be:
         67:e4:24:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----