Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/970e8de8-8db1-33de-9768-1561d2d5e9bf.roa
File:                     970e8de8-8db1-33de-9768-1561d2d5e9bf.roa (raw, json)
Hash identifier:          89+biFJqozrKOO5GR7qro2nBZoAYiCc0AwAo5Y0412s=
Subject key identifier:   D1:4E:90:7C:67:65:24:A7:67:03:B4:7E:6F:81:24:23:73:D5:E5:6F
Certificate issuer:       /CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Certificate serial:       010D0C9F4328576D51CC73C042CFC15864175654
Authority key identifier: 39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/970e8de8-8db1-33de-9768-1561d2d5e9bf.roa
Signing time:             Mon 14 Nov 2016 18:26:40 +0000
ROA not before:           Mon 26 Nov 2012 05:00:00 +0000
ROA not after:            Sat 26 Nov 2022 05:00:00 +0000
asID:                     32491
IP address blocks:        64.98.145.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:58:64:17:56:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
        Validity
            Not Before: Nov 26 05:00:00 2012 GMT
            Not After : Nov 26 05:00:00 2022 GMT
        Subject: CN=7a391339-0491-4cf9-acd4-32ad5685cb2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:2b:de:5b:38:79:0b:3f:42:32:e8:c4:ea:24:
                    a5:d4:af:c0:c2:fa:cd:2d:08:4e:c8:98:42:66:e6:
                    39:10:90:a5:78:0f:ec:b5:06:6d:7e:ca:38:7d:1a:
                    d6:00:fa:75:e7:b3:b8:ba:0d:65:9d:33:7c:b5:22:
                    3b:25:7f:24:2b:2d:19:32:1c:3c:75:97:03:4e:f9:
                    38:fb:2a:3e:0a:f2:21:be:46:76:92:85:60:d9:a3:
                    0b:38:a8:5b:5d:43:de:e4:b9:5a:88:ad:38:94:3f:
                    a2:47:48:b3:1b:5c:32:48:5a:92:55:1c:00:6e:30:
                    d0:54:84:d1:d3:fc:54:7e:e9:a3:e8:cc:2d:23:90:
                    fa:ac:c3:68:2e:eb:f9:21:21:a1:8f:db:79:3b:6d:
                    f9:d1:e0:3f:d0:a1:58:d9:7f:d2:fc:95:7e:39:b6:
                    3c:42:9c:33:5a:8e:f4:ad:3f:2f:29:51:4f:99:06:
                    18:9a:38:45:78:22:75:e0:0b:a8:b4:0d:4f:77:96:
                    a2:0c:7a:f5:50:43:ef:df:5c:7a:4f:69:45:eb:19:
                    e6:e1:79:64:2e:a3:ab:63:8a:39:e2:58:56:8f:09:
                    c6:ef:23:03:f5:15:0e:f1:87:3b:62:5a:b3:57:34:
                    57:76:85:08:69:70:02:62:88:bb:a5:43:29:0a:3a:
                    f2:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:4E:90:7C:67:65:24:A7:67:03:B4:7E:6F:81:24:23:73:D5:E5:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/970e8de8-8db1-33de-9768-1561d2d5e9bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl

            X509v3 Authority Key Identifier:
                keyid:39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.98.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:3e:c1:74:09:60:e0:b0:49:be:b3:60:63:f7:85:46:f7:34:
         69:7d:f2:8f:91:bd:61:f5:7b:1c:61:95:56:5f:67:6f:7a:36:
         f0:ec:9c:34:bc:b8:99:56:83:67:a5:44:1f:1c:4e:af:c9:52:
         ac:82:0f:d3:e3:f8:fc:0f:d2:ad:8f:67:f3:47:51:9f:22:30:
         a1:ab:eb:b8:28:ea:ee:63:7e:23:7b:f5:89:30:03:3d:be:bd:
         61:02:1c:69:db:42:66:ad:8b:e5:e1:8a:1e:b3:80:6e:b2:56:
         24:a2:04:96:4c:37:02:eb:ee:a5:fa:64:d1:38:c4:94:7c:70:
         0e:ab:c7:27:72:b0:e6:07:6d:74:d2:e7:d9:83:1b:0f:19:09:
         37:9a:f1:8f:76:8a:fa:c4:d2:ab:be:26:ce:26:b2:6c:9e:91:
         2d:62:2f:02:9b:97:67:e5:41:84:d4:1f:bc:e5:3d:77:0a:b8:
         3d:77:da:20:ca:d5:e3:44:0c:66:a5:66:dd:bc:2c:c3:83:ae:
         b7:8f:ab:bc:e2:c3:6c:52:36:6e:4d:2a:4b:89:45:09:35:92:
         eb:01:83:1d:4d:aa:37:79:33:c5:cb:c7:0e:ee:33:c1:7d:cb:
         ce:2e:7b:e4:0b:bd:25:dc:40:df:8f:c8:67:56:78:be:40:68:
         6b:01:16:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----