Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c575412e-b204-31fe-a80f-ffe9e9a1a466.roa
File:                     c575412e-b204-31fe-a80f-ffe9e9a1a466.roa (raw, json)
Hash identifier:          3bx78n5JDkvoSVmqbZtbcH6DkypeIFH/Jbi2p4rycXo=
Subject key identifier:   5A:09:BB:E2:0C:25:4F:BF:14:3B:5D:65:9E:19:94:73:AD:BA:24:7C
Certificate issuer:       /CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Certificate serial:       5F1A0958ED37B3D3D8DABAD0680EA9016BBE2E
Authority key identifier: 39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c575412e-b204-31fe-a80f-ffe9e9a1a466.roa
Signing time:             Fri 04 Jan 2013 19:55:40 +0000
ROA not before:           Mon 26 Nov 2012 05:00:00 +0000
ROA not after:            Sat 26 Nov 2022 05:00:00 +0000
asID:                     15348
IP address blocks:        216.40.32.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:1a:09:58:ed:37:b3:d3:d8:da:ba:d0:68:0e:a9:01:6b:be:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
        Validity
            Not Before: Nov 26 05:00:00 2012 GMT
            Not After : Nov 26 05:00:00 2022 GMT
        Subject: CN=1c39b38c-31ee-427e-9a38-5a6b5ce2aa4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ec:de:81:2f:54:06:32:83:1b:a8:ba:4e:8b:
                    0e:c3:24:28:9f:f7:9f:0d:ac:1a:1e:08:3b:68:85:
                    ca:8b:3d:2e:6a:32:00:c9:42:85:0c:12:d7:e5:82:
                    82:8a:24:24:7a:23:0e:b7:e2:05:0e:61:9e:91:ed:
                    50:9d:fa:86:5a:d6:b7:51:a3:b9:0a:48:5e:d9:f9:
                    11:d5:4d:37:34:67:4c:45:f8:71:71:cc:df:8e:67:
                    1e:47:83:79:fd:eb:70:e6:ec:c1:a3:41:19:a0:c8:
                    d8:d7:5a:ee:f6:43:9f:fa:85:2d:ac:fb:48:29:1d:
                    7f:dd:0d:96:cb:d6:08:96:3c:56:ac:3e:18:08:e2:
                    e6:b9:14:ce:8b:f3:c1:2a:79:c3:33:d6:ce:9f:25:
                    35:9c:c5:4f:5f:bf:60:d4:68:22:ae:00:74:be:32:
                    5c:e3:8b:a2:cc:2c:3d:17:50:a8:ef:63:73:1d:48:
                    ab:4d:02:4c:91:8d:e8:68:90:80:7d:cf:a8:f9:27:
                    4b:bc:7b:0b:73:64:70:9c:b9:5d:cd:16:4f:c0:e7:
                    f6:ef:2a:84:f2:47:34:9d:5c:ee:f9:c9:f4:7a:f9:
                    46:a5:da:6a:7d:89:37:dd:03:fc:05:3e:b6:72:74:
                    1c:8f:95:4a:94:c6:e0:42:c9:5a:d6:52:7f:f7:1f:
                    d4:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:09:BB:E2:0C:25:4F:BF:14:3B:5D:65:9E:19:94:73:AD:BA:24:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c575412e-b204-31fe-a80f-ffe9e9a1a466.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl

            X509v3 Authority Key Identifier:
                keyid:39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.40.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         59:d5:0a:4c:fc:7e:3c:fe:37:6e:c8:12:71:20:64:9f:fb:22:
         bd:20:bd:05:4c:1b:fa:02:48:2f:c6:d6:6b:5f:ea:ff:a1:4e:
         86:98:70:52:83:32:b3:c7:26:1f:f1:b2:46:da:88:48:b2:52:
         53:da:99:3a:d3:1e:ac:5d:0c:f5:de:eb:54:56:99:f0:42:37:
         b6:03:11:b2:be:c8:0e:b7:bd:c1:54:b9:35:cc:f3:d6:52:db:
         b7:1c:95:78:4a:0e:42:ed:1a:f2:de:3f:f4:d4:aa:6f:37:83:
         e2:aa:23:24:15:2c:b5:f2:16:99:be:d0:46:cb:a8:2e:ff:e2:
         f9:f9:e2:17:40:9f:d5:1f:7d:a8:00:69:a3:db:0f:7c:66:d3:
         fe:64:9c:9b:2e:f1:7c:d0:e3:8d:d2:60:a5:af:f9:67:1d:5f:
         aa:8a:de:8b:1d:fe:28:37:0a:37:0c:10:94:f8:3e:40:0b:f0:
         03:77:66:ea:b2:81:56:59:65:91:2f:84:73:2b:df:1f:8a:76:
         cc:d4:29:8c:ba:4c:2a:44:b4:bd:90:03:3b:95:3c:d3:2b:93:
         a4:f7:fc:c2:54:45:3d:14:2f:24:41:01:8b:ea:8c:dc:86:e8:
         69:7c:c8:7e:50:61:0b:44:19:18:4a:1c:d5:fd:9d:6c:05:06:
         4b:94:0b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----