Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/780693a6-d5b2-4f22-8cf4-13c2d3674271/3199a2ff-1fef-3f70-ab21-be6458d25125.roa
File:                     3199a2ff-1fef-3f70-ab21-be6458d25125.roa (raw, json)
Hash identifier:          D/Sk+5heb1wRQikcEi1reIhMmlUHr8cKk2nTeL42fsc=
Subject key identifier:   0C:95:28:EC:CF:50:41:63:7D:AB:92:A2:A8:24:CD:9B:F5:CE:C6:D5
Certificate issuer:       /CN=780693a6-d5b2-4f22-8cf4-13c2d3674271
Certificate serial:       010D0C9F4328576D51CC73C042CFC154BB7493C3
Authority key identifier: 43:74:87:75:7E:BD:FA:37:84:F4:52:40:F1:A4:28:54:B5:CC:B7:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/780693a6-d5b2-4f22-8cf4-13c2d3674271.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/780693a6-d5b2-4f22-8cf4-13c2d3674271/3199a2ff-1fef-3f70-ab21-be6458d25125.roa
Signing time:             Mon 16 May 2016 21:24:20 +0000
ROA not before:           Wed 20 Feb 2013 05:00:00 +0000
ROA not after:            Mon 20 Feb 2023 05:00:00 +0000
asID:                     32244
IP address blocks:        172.255.59.0/24 maxlen: 24
                          2607:fcc0:6000::/35 maxlen: 35

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:54:bb:74:93:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=780693a6-d5b2-4f22-8cf4-13c2d3674271
        Validity
            Not Before: Feb 20 05:00:00 2013 GMT
            Not After : Feb 20 05:00:00 2023 GMT
        Subject: CN=3a06981a-9aa9-4021-82e8-57c4d37f735b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:de:0c:9f:6b:6b:ca:75:45:6f:a2:68:27:cb:
                    bf:e1:84:73:f2:10:f3:27:c5:2b:75:87:d8:30:2d:
                    a6:b6:55:a1:01:4e:14:85:6f:48:71:0c:b7:2e:3c:
                    e8:20:e9:40:31:ea:f3:7c:8f:07:58:c7:7a:96:3b:
                    98:bb:f5:ff:7e:7b:1a:e9:7b:a5:b8:25:78:6f:88:
                    87:f7:7d:92:9d:da:9d:0f:ee:0b:1e:d9:47:06:c4:
                    40:6f:53:0a:53:13:a1:9f:03:ae:55:21:7d:87:b9:
                    37:14:aa:a6:03:cf:f5:dd:0b:41:12:21:9e:9e:50:
                    9b:bb:89:62:70:ae:b9:37:44:f2:c0:51:26:c3:2d:
                    c7:58:c3:53:e1:c2:e0:05:53:ef:96:ab:ec:b4:f0:
                    25:ab:ed:c8:81:26:3f:eb:f1:79:e0:4d:67:8a:5f:
                    c5:05:7f:a8:42:dc:6a:59:e0:75:e8:f1:b4:42:f2:
                    14:75:ad:08:5e:8c:55:e7:d5:14:d6:68:32:c4:94:
                    33:0b:b7:bf:52:97:f8:dd:a3:69:0d:ed:b2:dc:3e:
                    ba:ec:a7:b0:32:28:15:c8:21:92:97:71:4d:4b:9b:
                    28:47:87:93:96:d3:8e:78:03:7e:cd:5e:b2:f6:f0:
                    25:e9:35:49:27:40:51:fe:45:1d:c1:70:e1:ca:8b:
                    bf:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:95:28:EC:CF:50:41:63:7D:AB:92:A2:A8:24:CD:9B:F5:CE:C6:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/780693a6-d5b2-4f22-8cf4-13c2d3674271/3199a2ff-1fef-3f70-ab21-be6458d25125.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/780693a6-d5b2-4f22-8cf4-13c2d3674271/780693a6-d5b2-4f22-8cf4-13c2d3674271.crl

            X509v3 Authority Key Identifier:
                keyid:43:74:87:75:7E:BD:FA:37:84:F4:52:40:F1:A4:28:54:B5:CC:B7:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/780693a6-d5b2-4f22-8cf4-13c2d3674271.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.255.59.0/24
                IPv6:
                  2607:fcc0:6000::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:d0:8a:02:ea:dc:15:bb:86:2f:73:99:44:dc:55:2d:6e:f7:
         50:ad:dc:bd:ed:e3:1c:78:26:7c:db:43:8a:c7:2c:a8:39:94:
         ec:38:44:d5:fd:d1:dd:68:8b:c8:6f:6b:63:55:6c:6e:2a:37:
         b4:48:97:19:eb:75:67:e7:8a:ef:aa:66:09:5f:28:58:62:9d:
         27:1f:bc:4a:2a:85:68:73:0b:ec:ad:44:98:a6:f7:e5:4e:28:
         6c:be:9c:e4:a6:7c:a8:78:3f:f4:6c:d2:5c:7d:1e:59:95:14:
         54:4e:d9:82:90:40:85:9e:38:75:08:73:cd:b6:6d:3f:72:be:
         cc:aa:7d:67:86:a1:5b:0a:8e:4a:5a:2a:91:1e:4a:c9:81:b1:
         86:4f:dc:ed:80:54:4f:8a:d7:b1:18:90:77:a2:88:55:e4:52:
         b9:06:10:7b:c1:59:0d:b2:65:b1:8a:bc:01:72:14:0e:5e:ef:
         61:06:5d:83:89:9c:f9:9d:52:be:15:40:0e:aa:68:fb:24:19:
         1e:46:22:a8:21:69:54:83:92:b8:5e:eb:94:ff:f0:24:32:5f:
         8d:cd:9f:35:63:7f:04:9b:e2:b8:25:ad:f0:93:e6:c9:c2:bb:
         3c:fd:a2:98:ce:27:98:24:f4:12:61:28:03:7a:b2:5f:9d:04:
         90:5c:8d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----