Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/ba8f5dee-e77f-3e65-ad79-c24b9f676a20.roa
File:                     ba8f5dee-e77f-3e65-ad79-c24b9f676a20.roa (raw, json)
Hash identifier:          L7Gt0HD+k21bqFBx2V2xBDo8rkdZA8rc2zY+2WhTML8=
Subject key identifier:   07:60:DA:62:7D:1F:50:ED:44:83:21:58:80:36:DD:59:2A:76:B2:A8
Certificate issuer:       /CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Certificate serial:       010D0C9F4328576D51CC73C042CFC1692579714C
Authority key identifier: 39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/ba8f5dee-e77f-3e65-ad79-c24b9f676a20.roa
Signing time:             Mon 25 Feb 2019 16:25:09 +0000
ROA not before:           Mon 26 Nov 2012 05:00:00 +0000
ROA not after:            Sat 26 Nov 2022 05:00:00 +0000
asID:                     394497
IP address blocks:        64.98.8.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:69:25:79:71:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
        Validity
            Not Before: Nov 26 05:00:00 2012 GMT
            Not After : Nov 26 05:00:00 2022 GMT
        Subject: CN=1ef15815-8a93-4463-89eb-1f57d7c6435b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1a:07:31:a0:37:52:f0:cd:6e:ca:4d:85:0a:
                    34:70:ec:9e:b4:aa:b5:bc:a4:0b:7d:fe:2b:48:e7:
                    7b:08:6f:21:16:3b:69:3b:e5:f4:a2:cd:31:0b:34:
                    54:a8:2b:85:4b:ff:87:d6:3c:26:e1:c6:40:d4:c4:
                    f5:3e:39:ab:9e:b3:73:3c:b8:4c:5a:f4:bf:a6:3d:
                    e8:c8:74:16:54:9e:3c:dc:b1:48:9b:56:d3:24:fa:
                    47:72:05:0d:cb:42:3e:0c:89:d3:ec:df:1c:3d:44:
                    cf:09:2f:78:fc:f9:d4:7b:5f:98:05:b8:5f:2d:ff:
                    bf:0e:de:99:38:c1:59:60:d6:b6:f8:9c:dc:cd:d3:
                    eb:0d:6e:e7:3e:1d:cb:95:3e:54:b9:6a:f1:7a:9c:
                    19:50:11:ce:3d:41:d0:9b:c7:d0:37:d7:90:ac:6e:
                    01:a4:ba:e2:3c:96:24:81:a7:68:a0:08:39:a5:8d:
                    17:c1:19:1c:2c:d9:57:73:cd:86:aa:c6:85:52:17:
                    be:ff:5f:6e:0d:d6:62:99:35:f1:d6:de:eb:08:06:
                    e6:53:19:80:87:a0:b7:28:07:a7:88:9c:58:46:54:
                    09:99:d2:b8:7b:8c:6f:16:d2:ee:bc:6a:c8:08:c0:
                    cb:b4:aa:ac:b6:11:39:cd:1a:0a:8a:81:5c:5d:6e:
                    47:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:60:DA:62:7D:1F:50:ED:44:83:21:58:80:36:DD:59:2A:76:B2:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/ba8f5dee-e77f-3e65-ad79-c24b9f676a20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl

            X509v3 Authority Key Identifier:
                keyid:39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.98.8.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:81:47:fc:53:4c:c1:ba:1e:56:86:ef:37:9f:00:9b:64:d9:
         fe:bc:63:e4:a0:82:02:60:fe:79:0e:54:b1:13:20:28:b9:31:
         18:31:e3:eb:e1:74:49:01:36:3b:25:a3:1b:57:17:f9:57:41:
         fa:59:73:da:12:f3:23:f4:dd:ce:08:68:cb:b0:f2:2e:85:67:
         a4:4a:0f:22:cc:37:03:7a:ec:89:19:25:a1:2e:4a:0a:b3:42:
         ee:16:50:34:80:42:29:61:ef:f8:3e:89:66:ff:1d:36:e0:52:
         2f:bb:d6:a7:c2:27:ac:78:e6:86:a0:9b:d3:56:7e:a2:68:02:
         be:93:17:2f:d6:87:ad:d8:dd:a8:2f:5d:96:ea:fc:1f:e8:97:
         a9:ad:6d:75:fe:33:15:03:f1:6a:e1:28:6a:af:5f:ca:f8:cc:
         36:04:2a:86:7d:f7:25:30:17:b4:41:a3:bc:ac:13:45:01:f7:
         62:5a:c2:6b:bb:af:12:5b:49:26:ba:f9:40:60:b4:b2:18:66:
         65:85:a3:c7:8d:4d:d0:79:87:fe:65:9f:58:7b:13:a4:4d:bb:
         9d:8a:69:4e:ad:8a:df:34:b5:a5:f8:13:01:79:fb:23:04:60:
         b5:3a:c1:3b:80:69:73:ec:7f:07:ec:c0:c7:c9:a1:35:07:a0:
         1c:e7:ae:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----