Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/0daba25e-6729-3915-8213-06f400e7af04.roa
File:                     0daba25e-6729-3915-8213-06f400e7af04.roa (raw, json)
Hash identifier:          iCUo/J6bIdGorREGj7gR/jGruB1P8jFcfyZbjgKxIPY=
Subject key identifier:   6E:F0:FF:15:81:D1:57:78:21:3C:D6:CA:BB:F1:70:01:AA:8E:E8:03
Certificate issuer:       /CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Certificate serial:       DFCC91906CAD9EF8CC47370693DC710F48BC89
Authority key identifier: 39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/0daba25e-6729-3915-8213-06f400e7af04.roa
Signing time:             Mon 10 Nov 2014 17:42:10 +0000
ROA not before:           Mon 26 Nov 2012 05:00:00 +0000
ROA not after:            Sat 26 Nov 2022 05:00:00 +0000
asID:                     12915
IP address blocks:        2604:4000:8000::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            df:cc:91:90:6c:ad:9e:f8:cc:47:37:06:93:dc:71:0f:48:bc:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
        Validity
            Not Before: Nov 26 05:00:00 2012 GMT
            Not After : Nov 26 05:00:00 2022 GMT
        Subject: CN=64d35786-a703-443c-b977-82b5a6642968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c5:8f:72:b0:e7:c5:18:e2:37:2e:50:d9:51:
                    8a:cc:b3:b4:e7:d6:10:f7:bd:c5:02:fa:58:c9:15:
                    7c:ce:07:93:e4:8e:1e:11:1d:be:a0:cc:e1:d2:05:
                    76:84:9a:e1:ea:2e:bd:5c:b2:b9:3c:4e:2a:79:53:
                    70:1b:40:d8:26:89:03:11:9e:0f:00:ba:05:6d:92:
                    90:ff:81:f2:30:c2:f3:49:41:5b:60:0d:60:90:62:
                    7c:4b:a4:05:bd:a7:55:1f:1a:54:8a:68:61:d0:56:
                    6f:b2:aa:f7:2c:12:fc:9f:62:5b:1a:67:1c:67:d6:
                    e8:e8:aa:98:56:60:de:92:98:c6:ac:7a:3d:ec:c0:
                    27:8e:c1:f3:6e:0c:93:40:8e:4e:43:f6:03:b0:ea:
                    34:04:82:61:cf:a9:d8:8b:3f:72:42:75:9a:ce:e0:
                    68:ed:e6:23:e1:46:29:1c:ab:95:61:03:35:f8:4a:
                    e6:75:bf:ed:81:52:7c:2b:41:e8:93:9d:c2:92:61:
                    e0:39:90:50:f0:df:55:5e:5a:76:90:ba:d2:82:e6:
                    5d:51:0e:77:bd:e8:04:fd:23:4b:ef:ff:cf:8c:1b:
                    6d:39:b2:65:cb:f2:d3:eb:be:e8:55:d9:e5:ad:de:
                    23:e1:4f:a4:0d:da:41:b1:92:85:97:da:23:64:b5:
                    14:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:F0:FF:15:81:D1:57:78:21:3C:D6:CA:BB:F1:70:01:AA:8E:E8:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/0daba25e-6729-3915-8213-06f400e7af04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl

            X509v3 Authority Key Identifier:
                keyid:39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:4000:8000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:ed:47:9e:46:5e:5b:d1:40:48:f6:dc:3b:1a:ce:cd:15:33:
         04:0b:83:6d:ce:cb:39:8e:68:15:97:b9:be:97:3d:2b:c4:88:
         ff:06:5e:f1:39:3b:e4:28:42:d6:49:f1:ee:bb:1f:b2:17:2c:
         74:71:c1:1c:cf:0f:49:8e:b3:67:19:a3:48:78:ca:b4:df:07:
         b4:98:a4:b4:13:75:7d:65:b1:4e:ab:57:eb:68:09:64:54:0d:
         86:4d:10:24:ff:6e:79:d7:ba:18:7b:c5:f2:18:b8:10:b5:58:
         ef:86:91:ed:ad:3b:8b:6d:ad:f5:e2:ec:9e:11:1a:70:83:24:
         01:39:d2:f5:be:8b:0f:98:c7:30:18:64:a5:47:1f:7c:46:ca:
         ce:ac:e8:e5:6f:d8:5c:07:a9:a1:80:35:28:fa:6f:c0:7e:43:
         82:e5:9f:a6:ca:aa:4e:b1:d8:19:12:e1:3a:27:99:f9:63:86:
         c9:39:4e:3a:1c:85:c6:44:63:4e:24:ba:77:25:6d:d6:e9:b4:
         64:6a:7e:3f:3d:83:2d:4b:fd:34:37:bd:5c:53:67:a3:ff:3c:
         1f:dd:fc:4d:14:55:51:bc:a3:0f:3d:8c:7a:12:22:65:94:8a:
         9c:33:6e:a4:4a:3b:a7:41:d8:6d:9d:7a:87:da:4a:53:23:b7:
         7a:14:b9:5c
-----BEGIN CERTIFICATE-----
MIIGQjCCBSygAwIBAgIUAN/MkZBsrZ74zEc3BpPccQ9IvIkwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGMwNzkzNjgzLWFhMDctNDkzNS1hMmMyLWVjNDIzZWE3ZGQw
YjAeFw0xMjExMjYwNTAwMDBaFw0yMjExMjYwNTAwMDBaMC8xLTArBgNVBAMTJDY0
ZDM1Nzg2LWE3MDMtNDQzYy1iOTc3LTgyYjVhNjY0Mjk2ODCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAMrFj3Kw58UY4jcuUNlRisyztOfWEPe9xQL6WMkV
fM4Hk+SOHhEdvqDM4dIFdoSa4eouvVyyuTxOKnlTcBtA2CaJAxGeDwC6BW2SkP+B
8jDC80lBW2ANYJBifEukBb2nVR8aVIpoYdBWb7Kq9ywS/J9iWxpnHGfW6OiqmFZg
3pKYxqx6PezAJ47B824Mk0COTkP2A7DqNASCYc+p2Is/ckJ1ms7gaO3mI+FGKRyr
lWEDNfhK5nW/7YFSfCtB6JOdwpJh4DmQUPDfVV5adpC60oLmXVEOd73oBP0jS+//
z4wbbTmyZcvy0+u+6FXZ5a3eI+FPpA3aQbGShZfaI2S1FJECAwEAAaOCA1gwggNU
MB0GA1UdDgQWBBRu8P8VgdFXeCE81sq78XABqo7oAzCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzA3OTM2
ODMtYWEwNy00OTM1LWEyYzItZWM0MjNlYTdkZDBiLzBkYWJhMjVlLTY3MjktMzkx
NS04MjEzLTA2ZjQwMGU3YWYwNC5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2MwNzkzNjgzLWFhMDctNDkzNS1hMmMy
LWVjNDIzZWE3ZGQwYi9jMDc5MzY4My1hYTA3LTQ5MzUtYTJjMi1lYzQyM2VhN2Rk
MGIuY3JsMB8GA1UdIwQYMBaAFDncKp6hOcZbbKNIb3b0l90EwsiqMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvYzA3OTM2ODMtYWEwNy00OTM1LWEyYzItZWM0MjNl
YTdkZDBiLmNlcjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYEQACAADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEB
CwOCAQEADe1HnkZeW9FASPbcOxrOzRUzBAuDbc7LOY5oFZe5vpc9K8SI/wZe8Tk7
5ChC1knx7rsfshcsdHHBHM8PSY6zZxmjSHjKtN8HtJiktBN1fWWxTqtX62gJZFQN
hk0QJP9uede6GHvF8hi4ELVY74aR7a07i22t9eLsnhEacIMkATnS9b6LD5jHMBhk
pUcffEbKzqzo5W/YXAepoYA1KPpvwH5DguWfpsqqTrHYGRLhOieZ+WOGyTlOOhyF
xkRjTiS6dyVt1um0ZGp+Pz2DLUv9NDe9XFNno/88H938TRRVUbyjDz2MehIiZZSK
nDNupEo7p0HYbZ16h9pKUyO3ehS5XA==
-----END CERTIFICATE-----