Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/91b93de6-6446-4623-a181-5425af4f85cb/0aa3bf5d-961a-3b43-91e3-2d53994514d7.roa
File:                     0aa3bf5d-961a-3b43-91e3-2d53994514d7.roa (raw, json)
Hash identifier:          BBHBn+KGWvcDjAESZ0Bm6vrcGw0RctG0WLle7v9t3OM=
Subject key identifier:   86:07:0C:F0:E7:26:0E:49:98:70:83:99:63:10:DA:86:96:CC:64:14
Certificate issuer:       /CN=91b93de6-6446-4623-a181-5425af4f85cb
Certificate serial:       010D0C9F4328583A6B1441D9C1CCF7D4B6953880
Authority key identifier: FF:17:C4:E9:06:5A:45:02:E5:72:C0:A9:7E:3D:59:08:C6:24:D3:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/91b93de6-6446-4623-a181-5425af4f85cb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/91b93de6-6446-4623-a181-5425af4f85cb/0aa3bf5d-961a-3b43-91e3-2d53994514d7.roa
Signing time:             Thu 20 Dec 2012 05:00:00 +0000
ROA not before:           Thu 20 Dec 2012 05:00:00 +0000
ROA not after:            Mon 19 Dec 2022 05:00:00 +0000
asID:                     54113
IP address blocks:        2606:50c0:8000::/46 maxlen: 46
                          2606:50c0:8000::/48 maxlen: 48
                          2606:50c0:8001::/48 maxlen: 48
                          2606:50c0:8002::/48 maxlen: 48
                          2606:50c0:8003::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:6b:14:41:d9:c1:cc:f7:d4:b6:95:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91b93de6-6446-4623-a181-5425af4f85cb
        Validity
            Not Before: Dec 20 05:00:00 2012 GMT
            Not After : Dec 19 05:00:00 2022 GMT
        Subject: CN=596eee96-0573-4529-b3d8-d24bf6037aae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:91:89:16:a1:c6:f8:2e:59:df:7e:33:d5:b1:
                    f8:b4:38:cb:f1:46:16:1d:8d:b6:79:f6:5f:bf:03:
                    87:e6:c1:8b:c2:ea:21:ba:cf:cb:00:df:e0:ba:4d:
                    7a:0a:c6:96:63:bd:bb:2a:be:cf:85:42:41:60:22:
                    77:17:18:60:ac:fc:95:d7:98:8a:87:8c:c0:ac:09:
                    34:b1:bd:a3:08:d2:0d:c8:da:d0:ea:61:19:87:aa:
                    c3:20:46:58:d4:1c:92:9a:43:ad:a4:90:17:63:57:
                    63:16:94:fe:14:89:61:14:39:26:7c:76:5d:73:ec:
                    42:73:81:65:05:a4:88:6b:27:45:b4:1b:fd:c3:2a:
                    b7:9f:c9:d5:b3:a8:93:e1:83:c2:bd:15:49:84:63:
                    0e:09:28:c2:3a:1b:cf:16:d1:00:44:97:37:c6:9c:
                    94:18:25:54:49:da:b3:89:0b:ba:4d:30:94:5e:5e:
                    3b:6c:0e:bd:8f:94:59:d5:f8:f2:ee:3e:a6:a4:15:
                    8f:90:69:43:5c:13:f1:87:23:94:25:76:28:36:fa:
                    df:4f:ba:e5:28:89:a6:93:6b:de:e7:95:63:45:f6:
                    d3:6c:08:6a:a5:05:9f:f7:0a:1e:cc:62:cd:9f:6a:
                    55:4d:04:b4:84:9b:8e:50:38:d7:dd:a3:63:95:e0:
                    a1:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:07:0C:F0:E7:26:0E:49:98:70:83:99:63:10:DA:86:96:CC:64:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/91b93de6-6446-4623-a181-5425af4f85cb/0aa3bf5d-961a-3b43-91e3-2d53994514d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/91b93de6-6446-4623-a181-5425af4f85cb/91b93de6-6446-4623-a181-5425af4f85cb.crl

            X509v3 Authority Key Identifier:
                keyid:FF:17:C4:E9:06:5A:45:02:E5:72:C0:A9:7E:3D:59:08:C6:24:D3:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/91b93de6-6446-4623-a181-5425af4f85cb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:50c0:8000::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:1c:8d:57:2c:59:1d:cb:11:ac:79:2a:a6:a1:80:83:5a:3a:
         a8:9d:3d:1f:cc:fb:f4:b3:b3:f7:9c:91:16:f1:66:7a:89:8b:
         e9:88:4b:59:09:64:6b:fa:32:62:e9:1e:6c:c4:85:db:ca:ba:
         92:25:01:f7:4d:f3:74:9b:27:ef:35:c5:4f:69:90:9e:b8:0a:
         6a:12:9b:7f:aa:b4:19:dc:a6:ae:a3:80:3e:ac:6c:5d:5f:80:
         30:c3:18:b2:f5:a3:08:b1:22:0b:ab:06:d2:dd:d5:01:1a:95:
         a8:66:52:fb:fb:14:d1:33:b5:47:5e:bf:ef:f2:79:ab:d6:ca:
         c6:2f:b0:ff:cd:19:76:8f:1e:ea:ba:1d:2a:21:bf:fe:6c:e7:
         01:63:6d:a0:06:b0:16:70:92:5e:6d:d9:0b:3d:cf:4a:b6:c6:
         a6:3c:92:b3:9e:b5:59:94:55:a3:f2:e5:da:a9:36:b3:c8:94:
         e0:6f:bd:58:bd:20:6a:13:89:de:c1:c3:78:69:1f:ac:c2:fc:
         2e:16:c8:bb:5a:8f:e0:ce:72:6f:b2:51:95:46:0b:94:aa:ca:
         11:84:11:cd:95:f0:8e:0c:78:f5:04:49:d7:78:05:6c:13:4f:
         b8:79:c7:00:72:ea:47:91:58:f8:db:aa:b3:89:01:40:41:f3:
         ca:66:3e:ac
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWDprFEHZwcz31LaVOIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTFiOTNkZTYtNjQ0Ni00NjIzLWExODEtNTQyNWFmNGY4
NWNiMB4XDTEyMTIyMDA1MDAwMFoXDTIyMTIxOTA1MDAwMFowLzEtMCsGA1UEAxMk
NTk2ZWVlOTYtMDU3My00NTI5LWIzZDgtZDI0YmY2MDM3YWFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJGJFqHG+C5Z334z1bH4tDjL8UYWHY22efZf
vwOH5sGLwuohus/LAN/guk16CsaWY727Kr7PhUJBYCJ3FxhgrPyV15iKh4zArAk0
sb2jCNINyNrQ6mEZh6rDIEZY1BySmkOtpJAXY1djFpT+FIlhFDkmfHZdc+xCc4Fl
BaSIaydFtBv9wyq3n8nVs6iT4YPCvRVJhGMOCSjCOhvPFtEARJc3xpyUGCVUSdqz
iQu6TTCUXl47bA69j5RZ1fjy7j6mpBWPkGlDXBPxhyOUJXYoNvrfT7rlKImmk2ve
55VjRfbTbAhqpQWf9woezGLNn2pVTQS0hJuOUDjX3aNjleChRwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIYHDPDnJg5JmHCDmWMQ2oaWzGQUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85MWI5
M2RlNi02NDQ2LTQ2MjMtYTE4MS01NDI1YWY0Zjg1Y2IvMGFhM2JmNWQtOTYxYS0z
YjQzLTkxZTMtMmQ1Mzk5NDUxNGQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOTFiOTNkZTYtNjQ0Ni00NjIzLWEx
ODEtNTQyNWFmNGY4NWNiLzkxYjkzZGU2LTY0NDYtNDYyMy1hMTgxLTU0MjVhZjRm
ODVjYi5jcmwwHwYDVR0jBBgwFoAU/xfE6QZaRQLlcsCpfj1ZCMYk09cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi85MWI5M2RlNi02NDQ2LTQ2MjMtYTE4MS01NDI1
YWY0Zjg1Y2IuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCJgZQwIAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIgcjVcsWR3LEax5KqahgINaOqidPR/M+/Szs/eckRbxZnqJi+mI
S1kJZGv6MmLpHmzEhdvKupIlAfdN83SbJ+81xU9pkJ64CmoSm3+qtBncpq6jgD6s
bF1fgDDDGLL1owixIgurBtLd1QEalahmUvv7FNEztUdev+/yeavWysYvsP/NGXaP
Huq6HSohv/5s5wFjbaAGsBZwkl5t2Qs9z0q2xqY8krOetVmUVaPy5dqpNrPIlOBv
vVi9IGoTid7Bw3hpH6zC/C4WyLtaj+DOcm+yUZVGC5SqyhGEEc2V8I4MePUESdd4
BWwTT7h5xwBy6keRWPjbqrOJAUBB88pmPqw=
-----END CERTIFICATE-----