Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/e377b711-0d0c-32da-9cf6-246a8b34634b.roa
File:                     e377b711-0d0c-32da-9cf6-246a8b34634b.roa (raw, json)
Hash identifier:          aL7E0j5sm0sbZIn6T1XzrG8aL6Afi/HSnLb5MjwQDFM=
Subject key identifier:   23:83:94:1F:97:8C:1E:EB:E1:34:11:76:74:46:FE:5C:89:48:11:64
Certificate issuer:       /CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e
Certificate serial:       E29CDC9D03B7BDB66D0F35F171ECE4CF1EC9D9
Authority key identifier: F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/e377b711-0d0c-32da-9cf6-246a8b34634b.roa
Signing time:             Wed 19 Nov 2014 03:32:58 +0000
ROA not before:           Fri 12 Jul 2013 04:00:00 +0000
ROA not after:            Wed 12 Jul 2023 04:00:00 +0000
asID:                     11892
IP address blocks:        159.182.115.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            e2:9c:dc:9d:03:b7:bd:b6:6d:0f:35:f1:71:ec:e4:cf:1e:c9:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e
        Validity
            Not Before: Jul 12 04:00:00 2013 GMT
            Not After : Jul 12 04:00:00 2023 GMT
        Subject: CN=bafd7e38-2a7b-40a8-84a4-d4dbde99d7e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:30:1e:9c:e6:0d:b5:03:f3:4c:76:f3:45:b2:
                    2b:0e:e0:05:72:c6:4c:5e:39:f5:b0:e9:b0:94:60:
                    e2:ba:c8:56:5e:8c:19:d6:1c:f9:53:91:51:ae:5b:
                    4a:85:0b:dd:93:f5:55:65:45:1f:a5:c4:99:2f:bb:
                    84:0b:d7:a0:ba:9e:08:32:b0:0a:16:cf:83:a9:8a:
                    cf:02:f8:85:b4:de:22:54:a8:20:6f:ce:16:88:d2:
                    84:46:5a:ad:b6:66:47:3d:37:1d:42:dd:65:a6:a6:
                    bb:c6:dd:f9:26:27:46:79:03:d4:3d:5e:ea:84:59:
                    eb:93:ae:5b:6f:69:99:33:5b:fb:40:17:4e:e1:ef:
                    66:2b:81:79:fd:32:e6:ac:b7:93:1b:aa:5b:49:b2:
                    93:6c:b9:5e:9b:23:00:c6:b2:5e:df:01:f0:bc:51:
                    e6:c7:1b:ff:32:55:bf:18:bd:af:a0:f1:50:48:d1:
                    71:c8:30:fd:c3:8d:e7:4e:38:49:ef:d4:93:4a:9d:
                    c3:11:a2:fc:ae:b5:af:78:1c:4b:56:6a:e3:1f:9d:
                    f3:5c:31:2a:98:5f:2d:66:16:6d:93:3f:db:0c:75:
                    ef:98:96:d9:48:e2:a6:a7:62:2a:9d:a4:e1:bb:85:
                    69:af:7d:25:ed:f0:43:dd:9d:61:7e:33:1c:07:ef:
                    42:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:83:94:1F:97:8C:1E:EB:E1:34:11:76:74:46:FE:5C:89:48:11:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/e377b711-0d0c-32da-9cf6-246a8b34634b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl

            X509v3 Authority Key Identifier:
                keyid:F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.182.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:06:50:12:80:df:b1:af:7d:c4:77:de:6b:e9:20:e8:f0:8e:
         14:99:ae:20:46:e1:47:4f:fc:7a:a0:b6:45:df:1d:00:d9:7b:
         a8:54:c8:44:6e:eb:76:ce:df:ef:4f:24:c2:d0:f1:aa:3a:08:
         56:58:a8:de:9d:1c:2c:76:e4:3a:2a:d9:d0:e4:80:41:65:b4:
         aa:aa:51:1a:ed:51:83:c4:7d:76:85:51:3e:1d:b1:17:e5:97:
         30:bb:c9:18:58:df:fb:18:11:f0:26:8a:a0:b9:8a:47:0f:6b:
         87:60:17:98:c7:ff:58:cd:75:bb:f6:37:b7:78:3d:db:89:61:
         a6:18:cb:16:43:5a:2d:77:02:1c:af:64:15:65:d4:7b:e5:08:
         34:da:75:74:45:0b:60:d5:5f:9e:41:6c:ea:d3:24:25:f3:ad:
         72:33:43:d9:b8:fe:d5:0d:ce:02:1b:13:94:5b:eb:c1:dc:44:
         a7:b9:4d:f4:ef:cc:5a:26:a2:0c:62:0e:aa:2c:fa:70:b8:8c:
         ca:3e:2f:0e:d7:bd:6c:f8:9c:6e:34:a4:46:2b:e2:7d:0c:20:
         11:d0:d0:ff:e9:37:de:da:7e:e0:14:06:15:a3:28:65:2e:f6:
         a9:0e:4e:45:98:7b:d5:48:05:15:4a:19:a5:0a:64:2e:1c:ab:
         bf:16:84:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----