Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/57cd65c7-d7a9-3e80-962d-27e512b7f493.roa
File:                     57cd65c7-d7a9-3e80-962d-27e512b7f493.roa (raw, json)
Hash identifier:          8p+79FJQwmsp90yK1SfiyKrghYc6sK6TH9pStJQqClw=
Subject key identifier:   16:D7:4E:48:18:54:0D:5A:87:B0:D0:7B:B7:76:EA:22:D7:8F:0B:1F
Certificate issuer:       /CN=ad6556d7-60a4-4318-9d11-464fb8396d3e
Certificate serial:       4680CAB51F7A281638948606900AD30F9336DD
Authority key identifier: 5D:C1:FD:9A:63:85:C1:8F:46:52:4A:B8:C4:62:F5:34:24:BC:AF:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/57cd65c7-d7a9-3e80-962d-27e512b7f493.roa
Signing time:             Thu 27 Sep 2012 14:11:56 +0000
ROA not before:           Sat 15 Sep 2012 04:00:00 +0000
ROA not after:            Thu 15 Sep 2022 04:00:00 +0000
asID:                     393225
IP address blocks:        199.212.0.0/24 maxlen: 24
                          2001:500:13::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:80:ca:b5:1f:7a:28:16:38:94:86:06:90:0a:d3:0f:93:36:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad6556d7-60a4-4318-9d11-464fb8396d3e
        Validity
            Not Before: Sep 15 04:00:00 2012 GMT
            Not After : Sep 15 04:00:00 2022 GMT
        Subject: CN=91a9b64e-c903-4356-bbc4-454c99432e34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e4:0c:91:76:c0:85:3f:58:11:94:bb:94:9b:
                    f9:10:84:16:8b:f9:1c:0f:77:ed:72:7b:aa:dc:c8:
                    fe:e9:27:75:31:4c:7c:07:e4:7f:00:9c:f3:fb:f9:
                    65:b7:ff:55:99:30:50:33:8d:11:a7:79:f7:cf:ae:
                    49:a4:b7:e7:b6:3f:78:cf:26:69:0a:4a:71:f5:12:
                    6e:0f:e5:cb:36:d9:f0:d6:21:84:5b:62:ac:a6:3e:
                    73:be:a7:ff:6d:ec:71:e6:78:1b:76:d2:d8:29:16:
                    dd:76:a6:96:54:70:3e:49:39:b4:ea:ab:05:83:ac:
                    23:ba:18:70:0d:11:e1:b5:d1:ab:73:df:c0:44:a3:
                    91:fb:9c:d8:fd:b1:e6:04:f2:d4:55:22:50:a8:4a:
                    e9:75:73:98:32:84:84:e2:ea:e8:7c:5d:30:22:04:
                    1f:fd:84:f1:c2:de:e2:0a:5f:a0:4a:62:93:e8:a6:
                    ca:a2:f9:34:f3:e9:ca:ea:b2:0e:ee:ff:f8:17:71:
                    28:be:c3:94:33:0c:99:56:cf:3e:3b:b5:37:77:57:
                    9d:43:f7:42:e0:ea:5b:96:0d:e6:d9:74:44:52:58:
                    f1:e2:9b:f7:a1:21:97:5c:c6:cf:0c:e0:68:3d:b3:
                    93:5f:47:48:86:50:1d:4e:63:ca:89:72:dd:24:b4:
                    74:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:D7:4E:48:18:54:0D:5A:87:B0:D0:7B:B7:76:EA:22:D7:8F:0B:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/57cd65c7-d7a9-3e80-962d-27e512b7f493.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/ad6556d7-60a4-4318-9d11-464fb8396d3e.crl

            X509v3 Authority Key Identifier:
                keyid:5D:C1:FD:9A:63:85:C1:8F:46:52:4A:B8:C4:62:F5:34:24:BC:AF:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.212.0.0/24
                IPv6:
                  2001:500:13::/48

    Signature Algorithm: sha256WithRSAEncryption
         03:25:24:df:67:fb:be:65:2f:94:73:75:c5:93:50:94:12:ac:
         e9:12:ab:d1:86:b7:93:b0:f9:74:08:72:c9:ff:4d:cc:91:1b:
         ec:70:cc:8d:ca:18:00:12:77:34:47:ed:1d:e8:84:93:13:19:
         5a:41:a1:b8:f9:69:32:63:39:1f:7b:74:26:71:2a:c4:b3:c1:
         2a:e9:96:26:0c:8f:5c:05:8d:26:15:25:3f:4a:d7:f7:1c:d3:
         44:00:ec:fc:8d:37:f5:aa:99:36:c8:e5:d1:78:19:3b:bc:5c:
         d1:83:dc:bd:e7:64:c0:55:74:38:fd:cb:5f:20:22:fc:b4:09:
         7c:a2:ec:70:00:48:5b:32:da:55:68:e7:91:a6:bc:7d:6b:ce:
         23:3d:59:25:e5:5f:88:56:a6:84:bc:90:60:a5:5e:cf:19:d9:
         1c:af:2c:88:be:5b:1d:aa:d8:41:13:04:51:aa:16:15:ea:92:
         a0:fb:d0:d6:66:90:f4:2d:c9:3f:7d:58:25:61:50:06:c2:28:
         52:29:40:6c:de:2d:40:1f:bb:34:41:48:10:10:a0:19:49:46:
         1d:6d:da:48:b6:ca:6a:40:c7:9d:0f:19:07:55:5d:6c:20:8c:
         ba:f3:b3:ff:fb:98:6f:5f:0f:89:e8:65:6d:99:b9:f8:01:09:
         7f:86:05:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----