Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/98d244da-11be-34c0-a4c8-9151d41c52cd.roa
File:                     98d244da-11be-34c0-a4c8-9151d41c52cd.roa (raw, json)
Hash identifier:          jHvQRoVqHk291nI4jELuahOPV3m4I3kCtkqM4G/bXEc=
Subject key identifier:   1B:5B:8F:2E:6E:4F:8A:42:6A:1B:67:ED:32:0B:39:46:9F:E9:18:BD
Certificate issuer:       /CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Certificate serial:       010D0C9F4328583C05E080ED9E1F234304ADEA90
Authority key identifier: 39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/98d244da-11be-34c0-a4c8-9151d41c52cd.roa
Signing time:             Mon 26 Nov 2012 05:00:00 +0000
ROA not before:           Mon 26 Nov 2012 05:00:00 +0000
ROA not after:            Sat 26 Nov 2022 05:00:00 +0000
asID:                     63363
IP address blocks:        64.96.2.0/24 maxlen: 24
                          2620:57:4002::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:05:e0:80:ed:9e:1f:23:43:04:ad:ea:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
        Validity
            Not Before: Nov 26 05:00:00 2012 GMT
            Not After : Nov 26 05:00:00 2022 GMT
        Subject: CN=da023169-552c-4826-8c57-a9f617c8593e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d3:fa:6d:2f:3b:0b:d9:e3:07:a9:9b:50:e4:
                    c6:46:45:01:1d:05:a2:fb:3d:9e:ef:8c:2a:c7:fd:
                    aa:d6:b3:9a:ee:49:c1:e0:bd:80:b6:2e:86:22:96:
                    62:84:80:44:c2:aa:3e:a6:93:27:f2:ff:a3:4d:38:
                    26:ba:6f:74:26:94:e4:0e:f6:f1:06:59:6b:0a:63:
                    0d:15:e7:e4:6f:72:0b:f4:57:f7:5b:9d:e9:fe:76:
                    ab:ac:97:90:72:87:cb:26:51:df:e8:e0:37:72:70:
                    ba:93:05:04:9a:ec:4a:b8:8c:e9:e0:9c:91:51:8b:
                    44:88:f5:30:72:0c:82:f2:ca:33:60:bf:42:40:37:
                    e1:f6:67:89:96:d0:0a:82:ff:d4:e6:4b:13:ef:ef:
                    4c:b2:a7:97:a4:af:45:c9:1b:bb:de:89:72:6b:67:
                    79:00:b7:81:36:8d:81:52:3d:e9:fc:89:82:8a:51:
                    58:4f:b0:3a:9e:58:7d:43:a3:5b:47:ea:6a:40:73:
                    bf:53:51:d5:c3:29:d7:06:4e:4c:f0:63:7b:6c:a8:
                    1f:71:a1:83:31:fe:a2:58:05:73:24:75:42:f5:9f:
                    ef:f0:31:5a:5c:ca:c8:ef:c0:34:0a:08:79:d0:02:
                    24:ee:73:ca:67:7f:6c:f0:4a:46:8b:a1:3c:1b:1b:
                    7a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:5B:8F:2E:6E:4F:8A:42:6A:1B:67:ED:32:0B:39:46:9F:E9:18:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/98d244da-11be-34c0-a4c8-9151d41c52cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl

            X509v3 Authority Key Identifier:
                keyid:39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.96.2.0/24
                IPv6:
                  2620:57:4002::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:1f:98:f5:52:b8:dd:c7:35:01:93:3b:0b:f5:4f:94:28:44:
         1d:49:cd:c0:ef:54:73:65:9b:fd:59:e9:ef:d2:13:a3:d6:db:
         b5:f1:0a:1b:72:1e:0b:a3:c5:08:d0:c9:9d:bd:33:7f:08:87:
         7b:e7:2f:d2:2a:c6:a7:b3:37:a8:5c:11:fd:89:b0:d9:18:cf:
         0f:0a:ba:50:11:3d:09:c4:7f:18:cb:66:f5:6e:d2:8f:43:f0:
         e1:1a:90:99:cf:59:06:07:70:cc:99:32:8d:da:e8:91:ff:e0:
         ed:2e:ce:03:87:ce:fd:ea:f9:c6:f2:1f:ad:c9:96:c9:81:4b:
         b4:60:b1:92:fb:89:a9:0e:6e:e5:3d:b4:dc:a6:58:7f:ee:bc:
         0f:40:66:c0:13:08:55:20:df:36:c7:d0:60:e2:24:c5:28:8d:
         2c:92:ee:68:61:84:66:62:99:bc:ac:12:6a:d2:24:ce:9c:ea:
         57:c2:12:1e:76:30:5a:81:c5:ff:cf:b5:be:57:5a:b7:15:7e:
         37:6d:14:f0:f9:f6:fa:24:7f:7f:36:93:af:ff:dc:82:10:80:
         a2:a4:dc:92:9e:45:50:dd:c9:ca:0d:76:17:db:0e:5c:7a:48:
         1e:2a:d5:1c:2f:f5:a0:ce:59:03:41:3c:f3:0b:64:f4:fb:91:
         a1:26:07:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----