Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/f11fdd1e-7f2d-3cdd-8c65-eb9d1c5daa75.roa
File:                     f11fdd1e-7f2d-3cdd-8c65-eb9d1c5daa75.roa (raw, json)
Hash identifier:          CWCTEYFg8njfsik4wt/T5hyglhdrVj4+KTvJnOi8orM=
Subject key identifier:   5A:1C:9F:6D:46:F7:61:8E:91:65:D1:05:4F:47:79:CC:94:22:91:E2
Certificate issuer:       /CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e
Certificate serial:       34311EFCC12AF42C519CDA3C30CBE0BECB65A1
Authority key identifier: F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/f11fdd1e-7f2d-3cdd-8c65-eb9d1c5daa75.roa
Signing time:             Wed 19 Nov 2014 03:51:44 +0000
ROA not before:           Fri 12 Jul 2013 04:00:00 +0000
ROA not after:            Wed 12 Jul 2023 04:00:00 +0000
asID:                     11892
IP address blocks:        159.182.232.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:31:1e:fc:c1:2a:f4:2c:51:9c:da:3c:30:cb:e0:be:cb:65:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e
        Validity
            Not Before: Jul 12 04:00:00 2013 GMT
            Not After : Jul 12 04:00:00 2023 GMT
        Subject: CN=37220f14-3d39-4700-afdc-35a5f17678c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ad:9d:83:ac:31:d7:bd:be:ff:6d:84:87:21:
                    f7:48:42:9c:5d:d2:a4:b6:a5:f2:50:4a:19:cc:98:
                    e2:86:06:df:ef:59:37:2b:d2:f1:90:20:bb:19:25:
                    7a:fd:f4:99:a7:0c:ee:cf:f3:a6:7d:34:fc:2b:67:
                    2c:70:51:db:f6:1d:88:88:ac:01:41:ee:05:2a:82:
                    e4:27:c7:81:90:28:bb:42:93:7d:c1:d9:35:d5:9a:
                    28:4b:7c:91:89:a6:5d:93:94:13:c9:46:c5:73:34:
                    64:2a:9b:be:d0:3f:0f:01:d6:0c:3a:c4:7f:d3:41:
                    78:af:34:22:89:ad:74:40:32:06:71:aa:f2:5b:41:
                    ec:9a:53:4f:a0:a4:7e:78:04:1a:a0:c6:8b:02:3a:
                    0f:36:13:63:8e:8c:38:fc:b7:62:55:78:64:f1:71:
                    07:7c:09:dd:9d:25:a0:30:47:5f:d4:c2:6c:28:62:
                    11:56:23:01:0c:07:54:ce:31:7d:d1:2a:2c:50:8f:
                    61:b4:8c:f3:19:f3:93:5a:1a:06:36:b1:dc:82:f8:
                    73:1a:a6:4b:34:82:be:78:5b:19:e9:c8:d6:86:98:
                    7e:fc:6a:86:c5:8a:b5:c4:f8:e5:c5:e2:6e:c7:4d:
                    ff:16:db:e6:ff:d5:20:f0:98:a3:d9:ca:56:07:76:
                    44:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:1C:9F:6D:46:F7:61:8E:91:65:D1:05:4F:47:79:CC:94:22:91:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/f11fdd1e-7f2d-3cdd-8c65-eb9d1c5daa75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl

            X509v3 Authority Key Identifier:
                keyid:F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.182.232.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:2c:54:37:ce:d8:e9:b0:d1:7e:f6:0a:55:e0:f7:5b:6c:1b:
         06:32:fa:82:4e:f5:c0:c5:7d:f2:61:5a:b9:04:78:7d:62:2a:
         03:65:92:49:ee:8b:65:8f:e9:97:eb:08:e5:91:9a:8d:80:00:
         76:6f:58:0b:24:65:f9:f7:2a:66:16:72:f2:00:dc:19:b0:4e:
         0f:d3:b8:eb:35:75:63:16:04:ff:ec:4e:44:3d:91:78:59:0e:
         b7:b3:e9:27:21:8b:b0:2d:34:51:0c:9a:8e:b8:6f:82:4e:ca:
         16:2f:a1:f4:4d:42:71:4a:98:89:0f:4a:04:96:99:ba:31:06:
         82:8b:e8:9d:18:5c:79:34:ee:74:40:14:1c:21:e5:54:b3:91:
         f2:e1:ae:59:9d:5a:d7:cd:8e:cf:6f:d1:2c:3e:0b:d1:5b:91:
         b4:72:ed:d3:4a:5e:12:17:c3:9c:0c:db:af:80:15:5e:7d:85:
         8b:9f:6e:7f:c4:c3:33:b6:41:c0:85:a4:4a:33:7f:3c:3e:0f:
         8c:ca:a2:20:b1:fe:88:02:a9:ee:ce:54:1d:76:50:82:39:fe:
         c5:4e:d2:fa:65:a3:d4:08:e1:c7:7c:7c:c3:64:56:3c:70:a8:
         18:f7:7b:c7:2a:f6:19:fc:cd:8c:75:67:30:bc:71:ba:36:e9:
         32:2a:77:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----