Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/46e358c5-770b-3f33-9664-682b8ebb9a35.roa
File:                     46e358c5-770b-3f33-9664-682b8ebb9a35.roa (raw, json)
Hash identifier:          YtvjpyJR/Wij0D7vOoBFWOWZSSVlk2gjh060RP41iuU=
Subject key identifier:   F3:D6:3C:1B:99:5F:5E:1C:F5:BF:05:88:89:EC:CF:37:73:7F:D9:FC
Certificate issuer:       /CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Certificate serial:       010D0C9F4328576D51CC73C042CFC156B8C6D764
Authority key identifier: 39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/46e358c5-770b-3f33-9664-682b8ebb9a35.roa
Signing time:             Tue 23 Aug 2016 19:00:54 +0000
ROA not before:           Mon 26 Nov 2012 05:00:00 +0000
ROA not after:            Sat 26 Nov 2022 05:00:00 +0000
asID:                     22070
IP address blocks:        64.99.224.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:56:b8:c6:d7:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
        Validity
            Not Before: Nov 26 05:00:00 2012 GMT
            Not After : Nov 26 05:00:00 2022 GMT
        Subject: CN=b517e89e-43f1-400f-8106-2fe879778f4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5a:1e:54:64:31:9c:6c:5e:ca:9e:12:e5:6d:
                    ba:33:ee:c0:e3:76:f9:74:cf:2b:5c:b8:cc:46:75:
                    85:30:77:a7:ed:37:8d:df:bc:3e:11:34:d9:2f:0a:
                    1f:01:62:7f:ce:a5:1a:11:b0:5c:0d:f4:73:84:bf:
                    38:57:ff:0e:98:2f:56:a2:03:36:6f:87:93:b6:07:
                    4b:41:08:a1:14:2b:69:39:81:96:91:71:83:09:3b:
                    38:68:5a:71:62:eb:58:b5:37:10:77:91:c6:d5:0e:
                    cb:3e:37:a6:7e:16:d9:8e:d8:fc:f4:4b:44:e5:b1:
                    8f:35:41:8e:b0:36:7a:90:90:b3:ae:91:63:2a:db:
                    de:78:b6:f2:05:af:73:41:34:2f:57:9c:50:f2:18:
                    68:04:fe:02:cb:a9:4b:98:1c:f7:81:a8:34:71:dd:
                    04:8c:82:19:fe:1f:9d:71:cf:a1:37:ce:aa:65:27:
                    0f:63:4d:af:dc:2a:2c:9b:95:c9:35:59:2c:ff:b7:
                    16:37:f9:65:44:8e:9d:f8:93:f1:ae:c2:ca:a5:a9:
                    22:20:c8:e1:60:3d:3e:d9:ca:58:4a:57:85:3c:70:
                    c0:19:44:0c:e7:74:33:92:f5:79:df:06:ef:ea:cd:
                    b7:2f:68:49:e7:8d:e5:25:8e:3a:0e:ad:b9:81:83:
                    e5:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:D6:3C:1B:99:5F:5E:1C:F5:BF:05:88:89:EC:CF:37:73:7F:D9:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/46e358c5-770b-3f33-9664-682b8ebb9a35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl

            X509v3 Authority Key Identifier:
                keyid:39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.99.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:5c:63:e1:57:26:ee:df:53:40:aa:31:05:b5:a0:51:36:81:
         46:ca:52:e9:57:1c:68:b9:83:e8:8e:d7:b6:8c:26:6b:9f:52:
         31:d2:66:b0:8c:3d:05:f8:96:e0:f4:f5:63:35:a5:08:a6:fb:
         70:8f:72:31:ce:13:33:a9:ec:54:e9:cb:22:c2:1e:c5:08:b8:
         08:39:1f:e3:f0:cd:2a:28:44:0a:e8:9f:49:9a:06:9e:bb:96:
         eb:e2:1f:95:33:da:93:32:ed:6b:9c:49:9e:48:62:0e:3e:c7:
         b2:81:50:71:a5:19:e6:ba:97:fd:1c:05:49:ca:a5:ac:5b:c6:
         82:b2:fe:f9:0a:86:90:cc:7e:9c:f4:52:96:ba:52:ff:f6:29:
         cd:1c:38:0d:a7:ae:a9:86:72:8a:fc:20:b8:6a:0b:d4:40:4b:
         7c:f6:cc:5e:28:06:29:fc:66:55:ef:03:f0:9a:03:26:c6:e2:
         a1:a2:ce:cc:c5:55:f7:0b:44:e3:54:84:b5:ac:7c:bf:bb:e0:
         a0:bd:a0:c3:6c:70:9b:a3:f9:62:a7:46:07:e8:23:fd:04:4f:
         70:5f:81:74:d1:7d:7d:6d:ba:ac:1c:1b:e0:6e:53:ae:9e:c6:
         e3:99:87:36:f0:3f:5b:d3:32:a7:b8:42:66:1f:7f:3b:b3:cc:
         ca:24:d2:13
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BVrjG12QwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGMwNzkzNjgzLWFhMDctNDkzNS1hMmMyLWVjNDIzZWE3ZGQw
YjAeFw0xMjExMjYwNTAwMDBaFw0yMjExMjYwNTAwMDBaMC8xLTArBgNVBAMTJGI1
MTdlODllLTQzZjEtNDAwZi04MTA2LTJmZTg3OTc3OGY0ZjCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAK9aHlRkMZxsXsqeEuVtujPuwON2+XTPK1y4zEZ1
hTB3p+03jd+8PhE02S8KHwFif86lGhGwXA30c4S/OFf/DpgvVqIDNm+Hk7YHS0EI
oRQraTmBlpFxgwk7OGhacWLrWLU3EHeRxtUOyz43pn4W2Y7Y/PRLROWxjzVBjrA2
epCQs66RYyrb3ni28gWvc0E0L1ecUPIYaAT+AsupS5gc94GoNHHdBIyCGf4fnXHP
oTfOqmUnD2NNr9wqLJuVyTVZLP+3Fjf5ZUSOnfiT8a7CyqWpIiDI4WA9PtnKWEpX
hTxwwBlEDOd0M5L1ed8G7+rNty9oSeeN5SWOOg6tuYGD5acCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBTz1jwbmV9eHPW/BYiJ7M83c3/Z/DCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzA3OTM2
ODMtYWEwNy00OTM1LWEyYzItZWM0MjNlYTdkZDBiLzQ2ZTM1OGM1LTc3MGItM2Yz
My05NjY0LTY4MmI4ZWJiOWEzNS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2MwNzkzNjgzLWFhMDctNDkzNS1hMmMy
LWVjNDIzZWE3ZGQwYi9jMDc5MzY4My1hYTA3LTQ5MzUtYTJjMi1lYzQyM2VhN2Rk
MGIuY3JsMB8GA1UdIwQYMBaAFDncKp6hOcZbbKNIb3b0l90EwsiqMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvYzA3OTM2ODMtYWEwNy00OTM1LWEyYzItZWM0MjNl
YTdkZDBiLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBEBj4DBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAGlxj4Vcm7t9TQKoxBbWgUTaBRspS6VccaLmD6I7Xtowma59SMdJmsIw9BfiW
4PT1YzWlCKb7cI9yMc4TM6nsVOnLIsIexQi4CDkf4/DNKihECuifSZoGnruW6+If
lTPakzLta5xJnkhiDj7HsoFQcaUZ5rqX/RwFScqlrFvGgrL++QqGkMx+nPRSlrpS
//YpzRw4DaeuqYZyivwguGoL1EBLfPbMXigGKfxmVe8D8JoDJsbioaLOzMVV9wtE
41SEtax8v7vgoL2gw2xwm6P5YqdGB+gj/QRPcF+BdNF9fW26rBwb4G5Trp7G45mH
NvA/W9Myp7hCZh9/O7PMyiTSEw==
-----END CERTIFICATE-----