Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/00f761bf-b2e6-3341-93cd-b7fc843a0a17.roa
File:                     00f761bf-b2e6-3341-93cd-b7fc843a0a17.roa (raw, json)
Hash identifier:          1/Aqjl/DVDFu6+t3HkDc1RV/rf8HvFUgWCiuujrzaFE=
Subject key identifier:   80:63:3C:63:B3:41:E4:52:4E:AE:8F:A8:7D:04:F4:B5:CA:40:53:B0
Certificate issuer:       /CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Certificate serial:       4D5FD0A154405F9968F0362701E11232BC8D68
Authority key identifier: 39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/00f761bf-b2e6-3341-93cd-b7fc843a0a17.roa
Signing time:             Mon 10 Dec 2012 17:17:57 +0000
ROA not before:           Mon 26 Nov 2012 05:00:00 +0000
ROA not after:            Sat 26 Nov 2022 05:00:00 +0000
asID:                     32491
IP address blocks:        64.98.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:5f:d0:a1:54:40:5f:99:68:f0:36:27:01:e1:12:32:bc:8d:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
        Validity
            Not Before: Nov 26 05:00:00 2012 GMT
            Not After : Nov 26 05:00:00 2022 GMT
        Subject: CN=0495db88-0b37-4c35-b3de-88c7389c97ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:b3:ed:a4:37:91:d7:81:d2:ee:c4:db:30:97:
                    7a:75:f0:de:a0:ee:e2:1b:73:25:87:b9:ce:7c:f4:
                    8a:5e:87:c2:42:21:e4:5d:bb:e2:7e:e0:4c:c3:5b:
                    09:60:79:98:e1:92:44:da:2c:e3:f5:f1:25:29:a6:
                    fb:96:00:ba:59:e7:15:50:47:7b:4d:43:7a:ee:1a:
                    b2:d9:79:15:e3:19:24:ec:4f:00:ef:bb:12:c0:e7:
                    28:23:b6:4c:f2:30:b2:92:36:85:3c:81:22:6b:1c:
                    27:c1:bd:03:ab:52:f6:b2:23:04:1c:b5:25:16:4d:
                    19:8b:1c:8a:d1:d0:84:29:c6:cc:04:1a:31:93:f3:
                    b1:c4:b2:7e:3b:3b:4c:9a:af:e6:fe:6c:3b:23:03:
                    b7:86:1b:56:28:56:58:41:3b:55:3e:ad:e5:14:56:
                    3b:66:03:50:12:ff:d0:64:93:04:35:33:86:12:9b:
                    06:21:26:9b:e2:68:86:81:0e:d9:f5:b4:89:26:b8:
                    e7:2f:0f:93:98:69:59:8e:24:50:91:9d:13:d5:50:
                    1c:68:b7:b4:02:61:57:b6:d2:7f:cd:5f:07:c3:ee:
                    1a:49:be:32:11:08:a2:54:23:e6:d3:ca:c5:62:05:
                    9f:46:0a:d8:a3:7a:ba:e8:10:3d:b1:b0:54:01:67:
                    26:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:63:3C:63:B3:41:E4:52:4E:AE:8F:A8:7D:04:F4:B5:CA:40:53:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/00f761bf-b2e6-3341-93cd-b7fc843a0a17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl

            X509v3 Authority Key Identifier:
                keyid:39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.98.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a3:35:0f:53:d2:96:a1:27:e4:6e:b8:6e:65:18:db:d5:50:34:
         f2:0b:9f:04:02:6d:f3:ce:a1:ff:c1:5b:2d:c9:4d:29:b7:d9:
         2c:fa:ea:41:e4:44:e8:1e:a2:34:5a:29:c6:af:9e:9b:4a:74:
         fa:18:f9:41:04:c9:72:14:50:dc:11:70:99:48:0b:40:ca:25:
         8b:5e:cc:34:8d:8d:5e:08:87:5b:57:e4:ff:c9:2b:ec:50:94:
         77:23:f1:e7:b5:ee:68:bd:c7:c6:cd:f5:95:b2:c9:8f:24:e4:
         a5:a2:30:ca:0c:66:f7:c4:7a:8c:c5:87:83:d0:56:5c:32:3a:
         b2:c1:64:6d:49:82:12:b4:67:e5:73:60:88:de:47:af:66:0e:
         db:51:d8:74:6b:09:c7:35:79:d5:60:45:24:dd:d8:79:bc:b9:
         cd:84:fb:bf:7d:f4:58:2e:8d:da:de:9b:ed:e8:1a:f2:5b:1f:
         f6:1a:2e:a6:43:38:e8:81:c2:c9:29:0d:2b:3f:b0:99:6d:ce:
         5d:09:3a:7b:be:a3:1c:66:42:d1:43:b0:7c:cc:a6:2d:80:f5:
         54:7b:b8:49:da:54:bc:38:ba:3a:85:f5:79:81:d6:cc:1c:a4:
         eb:0f:df:9b:56:db:ad:df:16:20:5a:ec:00:2b:c7:b1:dd:3d:
         1b:6e:9d:fb
-----BEGIN CERTIFICATE-----
MIIGPTCCBSegAwIBAgITTV/QoVRAX5lo8DYnAeESMryNaDALBgkqhkiG9w0BAQsw
LzEtMCsGA1UEAwwkYzA3OTM2ODMtYWEwNy00OTM1LWEyYzItZWM0MjNlYTdkZDBi
MB4XDTEyMTEyNjA1MDAwMFoXDTIyMTEyNjA1MDAwMFowLzEtMCsGA1UEAwwkMDQ5
NWRiODgtMGIzNy00YzM1LWIzZGUtODhjNzM4OWM5N2NhMIIBIjANBgkqhkiG9w0B
AQEFAAOCAQ8AMIIBCgKCAQEA57PtpDeR14HS7sTbMJd6dfDeoO7iG3Mlh7nOfPSK
XofCQiHkXbvifuBMw1sJYHmY4ZJE2izj9fElKab7lgC6WecVUEd7TUN67hqy2XkV
4xkk7E8A77sSwOcoI7ZM8jCykjaFPIEiaxwnwb0Dq1L2siMEHLUlFk0ZixyK0dCE
KcbMBBoxk/OxxLJ+OztMmq/m/mw7IwO3hhtWKFZYQTtVPq3lFFY7ZgNQEv/QZJME
NTOGEpsGISab4miGgQ7Z9bSJJrjnLw+TmGlZjiRQkZ0T1VAcaLe0AmFXttJ/zV8H
w+4aSb4yEQiiVCPm08rFYgWfRgrYo3q66BA9sbBUAWcm/wIDAQABo4IDVDCCA1Aw
HQYDVR0OBBYEFIBjPGOzQeRSTq6PqH0E9LXKQFOwMIHlBggrBgEFBQcBCwSB2DCB
1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9y
eS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1
N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMDc5MzY4
My1hYTA3LTQ5MzUtYTJjMi1lYzQyM2VhN2RkMGIvMDBmNzYxYmYtYjJlNi0zMzQx
LTkzY2QtYjdmYzg0M2EwYTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHIhoHF
cnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVl
NGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYy
LTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzA3OTM2ODMtYWEwNy00OTM1LWEyYzIt
ZWM0MjNlYTdkZDBiL2MwNzkzNjgzLWFhMDctNDkzNS1hMmMyLWVjNDIzZWE3ZGQw
Yi5jcmwwHwYDVR0jBBgwFoAUOdwqnqE5xltso0hvdvSX3QTCyKowDgYDVR0PAQH/
BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3luYzov
L3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEt
ZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1i
YTA1LTg3MTg3ZjAwOTliMi9jMDc5MzY4My1hYTA3LTQ5MzUtYTJjMi1lYzQyM2Vh
N2RkMGIuY2VyMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
HgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwBAYjALBgkqhkiG9w0BAQsDggEB
AKM1D1PSlqEn5G64bmUY29VQNPILnwQCbfPOof/BWy3JTSm32Sz66kHkROgeojRa
KcavnptKdPoY+UEEyXIUUNwRcJlIC0DKJYtezDSNjV4Ih1tX5P/JK+xQlHcj8ee1
7mi9x8bN9ZWyyY8k5KWiMMoMZvfEeozFh4PQVlwyOrLBZG1JghK0Z+VzYIjeR69m
DttR2HRrCcc1edVgRSTd2Hm8uc2E+7999Fgujdrem+3oGvJbH/YaLqZDOOiBwskp
DSs/sJltzl0JOnu+oxxmQtFDsHzMpi2A9VR7uEnaVLw4ujqF9XmB1swcpOsP35tW
263fFiBa7AArx7HdPRtunfs=
-----END CERTIFICATE-----