Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/062b5eb4-8adc-317b-92f2-801b3d2e357f.roa
File:                     062b5eb4-8adc-317b-92f2-801b3d2e357f.roa (raw, json)
Hash identifier:          WeUXEt+7zJsfVDcw01Ij2hLxxuv5Mky2U+Z6Bq7nYKE=
Subject key identifier:   D1:AD:C4:73:49:80:03:EE:21:D8:41:75:54:BD:0C:15:04:35:DD:25
Certificate issuer:       /CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Certificate serial:       010D0C9F4328576D51CC73C042CFC15864169138
Authority key identifier: 39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/062b5eb4-8adc-317b-92f2-801b3d2e357f.roa
Signing time:             Mon 14 Nov 2016 18:25:50 +0000
ROA not before:           Mon 26 Nov 2012 05:00:00 +0000
ROA not after:            Sat 26 Nov 2022 05:00:00 +0000
asID:                     32491
IP address blocks:        64.98.148.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:58:64:16:91:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
        Validity
            Not Before: Nov 26 05:00:00 2012 GMT
            Not After : Nov 26 05:00:00 2022 GMT
        Subject: CN=c806d099-dd75-4ba2-b8e8-f1e44ca4e728
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:52:ff:12:71:e5:04:6d:ad:be:74:58:bf:81:
                    e7:40:49:f4:77:be:bd:59:8d:f7:49:ce:26:79:27:
                    5c:f5:48:d4:fb:e3:0b:29:d4:06:53:63:67:52:0f:
                    ca:d3:32:5d:ab:a8:68:2b:1d:5e:d2:a2:61:c2:c8:
                    33:bf:02:45:85:e1:a6:ec:c8:38:36:41:30:b5:74:
                    a0:67:72:b6:7d:b3:b1:f4:73:a5:bb:19:8f:18:97:
                    04:5d:d3:c0:2e:ae:02:ec:da:5e:e5:42:56:f5:16:
                    cd:89:b7:fc:05:e3:7f:b4:da:df:48:35:e3:d1:18:
                    ef:07:f2:b3:93:f5:f2:6d:41:dd:26:0a:ae:b1:11:
                    bf:6a:c8:47:f7:ce:56:17:c3:6b:fd:29:43:9b:a1:
                    f9:bb:c5:14:1d:0d:f9:f4:67:b4:82:16:25:a3:7a:
                    49:ae:f2:8f:ee:12:d2:8b:2e:55:ee:a3:d3:41:b1:
                    57:8f:c1:c3:ef:28:17:82:21:b2:84:ac:2e:2a:8e:
                    e8:db:a6:21:46:c7:8b:35:7b:7d:22:01:6b:3e:89:
                    50:0b:30:1a:f4:fa:dd:4a:dc:08:6a:5f:7e:67:c1:
                    15:43:74:45:5f:61:5d:b5:4f:76:49:f6:18:f4:64:
                    64:40:ce:f4:b5:bc:b4:b7:63:97:c3:2b:73:6c:0b:
                    85:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:AD:C4:73:49:80:03:EE:21:D8:41:75:54:BD:0C:15:04:35:DD:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/062b5eb4-8adc-317b-92f2-801b3d2e357f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl

            X509v3 Authority Key Identifier:
                keyid:39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.98.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:3b:61:1b:ec:fe:c2:b2:b6:b2:de:db:10:c8:6a:e9:af:d6:
         91:5d:09:39:b0:47:56:44:f2:21:14:3e:9c:e0:e3:b7:e8:fb:
         ff:e3:94:16:fc:f7:40:67:97:36:7b:72:50:9b:95:3b:50:b6:
         03:71:dc:6a:56:93:14:79:ba:11:4c:3b:55:b9:06:50:e2:96:
         e2:b5:49:89:72:8e:8d:06:29:2b:9b:ee:0a:dd:c1:9b:60:7a:
         ad:79:0a:dd:8a:e1:2f:aa:ee:00:45:de:3a:b2:b4:d6:12:10:
         49:20:8c:6d:99:b3:dc:db:f2:c1:57:0b:ea:d7:0f:c3:1e:d0:
         31:be:78:65:37:40:1e:8a:d5:a3:da:e7:fd:ed:ab:1f:62:cc:
         19:34:48:61:60:b8:4f:0c:95:ec:64:c7:eb:df:3e:50:c3:07:
         1b:8e:e4:36:f6:a0:15:91:3a:69:68:79:a8:e3:e5:8f:31:0c:
         90:1e:2e:c2:63:25:50:6b:71:54:a6:cc:2f:2b:2f:a8:31:96:
         89:81:96:9e:08:94:c8:fe:e4:55:0f:04:58:87:d7:9d:50:bd:
         87:5d:dd:0b:4f:d6:07:ac:08:30:d1:56:b6:2a:d2:20:ae:78:
         fa:d9:ee:22:49:43:bf:c5:1b:b5:00:35:28:50:fb:31:33:71:
         7e:45:44:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----