Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c4faa240-accb-34f7-8f8d-5d9e79de7654.roa
File:                     c4faa240-accb-34f7-8f8d-5d9e79de7654.roa (raw, json)
Hash identifier:          Lx238KREdNGJhmYfINzfztZK5VUoON0QiornAfR+3Oc=
Subject key identifier:   91:8C:1B:11:1E:1E:7D:44:F4:44:53:3E:62:5C:8F:34:A9:27:7F:1C
Certificate issuer:       /CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Certificate serial:       010D0C9F4328576D51CC73C042CFC15864126718
Authority key identifier: 39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c4faa240-accb-34f7-8f8d-5d9e79de7654.roa
Signing time:             Mon 14 Nov 2016 18:21:17 +0000
ROA not before:           Mon 26 Nov 2012 05:00:00 +0000
ROA not after:            Sat 26 Nov 2022 05:00:00 +0000
asID:                     32636
IP address blocks:        216.40.40.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:58:64:12:67:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
        Validity
            Not Before: Nov 26 05:00:00 2012 GMT
            Not After : Nov 26 05:00:00 2022 GMT
        Subject: CN=20abab91-c102-4d08-b94d-7e500030174e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:2d:18:3e:8e:5d:a8:9b:c7:4d:e7:9d:fb:b9:
                    0e:99:a1:06:84:ad:16:a2:e6:c6:e8:f2:03:33:8f:
                    1a:09:d3:18:bc:35:9a:63:9b:27:9e:2a:f8:6d:82:
                    f0:37:ff:a8:ce:41:82:4f:8b:4e:58:bd:ff:42:43:
                    f0:16:9d:41:59:19:d2:74:89:d2:1a:bb:90:8d:e2:
                    bc:fb:0c:f2:2b:98:33:ad:45:c5:28:0c:d3:61:60:
                    06:75:ea:0f:28:d4:e0:24:01:91:ad:92:dc:53:4b:
                    47:4f:e2:84:a5:76:40:89:fd:0c:91:86:01:c2:42:
                    8f:8c:22:2d:17:f2:07:0d:c4:9c:1b:9e:1b:26:a5:
                    5a:b0:4a:0f:99:b3:62:08:45:be:e8:45:67:70:51:
                    e5:a1:c1:31:b9:1d:80:be:86:e7:e4:59:ee:a1:50:
                    43:ae:f5:e3:89:c7:a0:8e:dc:f3:72:c5:27:4d:cc:
                    ba:92:e6:51:f9:8d:7f:61:6f:64:7e:47:f5:aa:6d:
                    3d:b2:35:56:4c:91:44:a6:e4:ba:84:5f:7c:ae:1c:
                    6f:1b:19:2b:70:cc:b1:43:85:62:fb:6b:6c:ef:fb:
                    10:40:b7:95:3d:a4:a9:f9:d2:33:ac:c9:0c:a6:5e:
                    37:45:35:38:4c:48:69:75:55:29:dc:a8:e3:71:ed:
                    28:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:8C:1B:11:1E:1E:7D:44:F4:44:53:3E:62:5C:8F:34:A9:27:7F:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c4faa240-accb-34f7-8f8d-5d9e79de7654.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl

            X509v3 Authority Key Identifier:
                keyid:39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.40.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:1f:25:9c:f8:0a:bd:a7:d2:dc:6e:98:0b:f8:0e:1b:bc:47:
         86:01:ac:51:76:fe:ad:28:c6:02:7f:92:23:0d:b0:86:9f:35:
         b3:3d:d4:8c:6b:2d:ae:d9:59:cc:2f:b7:92:dd:eb:a2:5c:cd:
         ca:5c:52:0a:71:fb:04:72:6f:bd:6f:c4:3a:45:69:6f:d2:bd:
         3c:48:59:31:6f:e1:56:a2:68:64:53:3c:b1:3e:63:3d:fd:61:
         b9:64:d0:a7:ba:01:53:fb:7e:10:0b:cf:db:f5:4b:f3:7b:5b:
         98:6e:19:5a:7d:55:b6:bb:0e:0c:c0:9b:81:ad:e9:bc:d8:7d:
         77:42:b8:98:61:7f:10:42:1b:18:5c:51:1f:06:32:52:8b:8f:
         0a:6e:2f:95:6b:15:31:74:62:43:ac:50:15:8a:28:d8:89:6e:
         b1:97:35:99:e3:b5:5d:28:8f:de:79:df:64:b4:b5:e1:68:72:
         bf:37:3e:ca:cc:be:6e:c9:1a:0e:88:55:78:7f:e8:38:77:b8:
         93:f7:fb:49:1f:61:87:ac:05:ea:81:6d:48:8d:06:e7:8c:75:
         54:1d:0a:51:7d:ad:e4:45:4d:b5:60:c8:f6:15:43:10:a1:c8:
         93:27:09:1a:59:20:4e:e2:d3:42:ad:fb:31:a5:e1:6d:73:37:
         ab:96:37:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----