Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c83108db-d52d-37b8-8900-47d58c8a1f32.roa
File:                     c83108db-d52d-37b8-8900-47d58c8a1f32.roa (raw, json)
Hash identifier:          vxLGWSuQj55HS0uJ8I40TbFS88g72BGeCK7xW63Y8SI=
Subject key identifier:   2C:A4:1B:B8:04:13:96:3A:B8:9E:BB:F7:91:CD:56:91:61:EE:B0:C5
Certificate issuer:       /CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Certificate serial:       010D0C9F43285837E335104D41A0F7B70BE39880
Authority key identifier: 39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c83108db-d52d-37b8-8900-47d58c8a1f32.roa
Signing time:             Mon 26 Nov 2012 05:00:00 +0000
ROA not before:           Mon 26 Nov 2012 05:00:00 +0000
ROA not after:            Sat 26 Nov 2022 05:00:00 +0000
asID:                     32133
IP address blocks:        64.99.192.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:e3:35:10:4d:41:a0:f7:b7:0b:e3:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
        Validity
            Not Before: Nov 26 05:00:00 2012 GMT
            Not After : Nov 26 05:00:00 2022 GMT
        Subject: CN=8b6c4f16-eb16-4a66-af35-7d05a39d75b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f8:1b:b2:6f:1e:cc:f4:b3:d0:cc:62:36:a1:
                    73:af:9a:a2:85:46:a1:0c:f6:d3:cf:c8:89:fa:25:
                    0b:8f:19:fa:71:f2:4d:9d:e6:3e:69:f1:e5:d1:fe:
                    ba:0e:35:dd:29:a3:4c:d7:31:7b:05:20:09:e0:c6:
                    7f:47:9c:32:db:ee:b0:37:3c:fc:af:9f:bf:50:97:
                    b1:1d:52:8e:74:59:16:fb:f8:92:cc:0e:51:6e:a9:
                    13:c6:e6:fd:3e:fa:17:6a:3f:9f:55:ba:1e:2d:be:
                    1f:6f:d7:54:d7:e7:f0:93:4c:31:37:7a:34:e1:71:
                    02:e5:d2:9a:fa:c2:df:cf:eb:e7:b5:63:d5:c3:8b:
                    e3:19:25:14:85:05:df:ff:a2:3c:0e:e4:02:34:00:
                    b4:dc:78:a9:45:c6:19:9e:f1:1d:f0:5d:8a:dc:f5:
                    94:ed:e4:06:d9:b7:ab:bf:0f:dd:dd:9b:e1:b0:1a:
                    24:0a:f8:89:86:77:c3:1d:a4:8d:dc:c5:09:0f:71:
                    1d:2d:c9:11:df:15:55:bb:79:35:a9:7c:59:ea:25:
                    c8:cd:a0:76:eb:6a:d5:90:0d:e5:6f:0b:87:8c:a8:
                    17:cc:82:fc:38:51:5c:f4:e2:ef:d3:05:6f:45:38:
                    31:c9:98:5a:0c:d6:4d:bb:5b:36:91:82:39:8b:4c:
                    7c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:A4:1B:B8:04:13:96:3A:B8:9E:BB:F7:91:CD:56:91:61:EE:B0:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c83108db-d52d-37b8-8900-47d58c8a1f32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl

            X509v3 Authority Key Identifier:
                keyid:39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.99.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:b4:f3:63:2e:30:05:19:5c:aa:78:02:b2:1d:e6:be:ff:42:
         71:df:65:eb:6a:b6:6f:b5:fc:ef:a6:da:c9:d4:e4:4e:a9:d6:
         68:83:36:7e:96:b8:e4:31:79:20:de:be:91:57:f7:05:35:35:
         b5:24:44:08:ab:7f:94:fe:68:a1:1e:87:10:1e:cf:e6:22:21:
         ba:2f:6b:a6:a2:79:a5:ae:8d:a1:2d:7a:b5:2f:19:ed:a6:92:
         3d:c4:a6:db:44:9a:e7:bd:95:8e:48:ab:8b:0b:25:fc:c3:bb:
         2e:ae:89:b7:d7:18:37:3d:f6:67:c3:db:30:51:ca:25:bb:ff:
         00:37:ea:e7:82:96:2e:ed:1b:53:1a:d4:69:ec:73:0f:23:72:
         24:55:76:76:f9:a7:d4:33:92:5b:ee:3f:91:49:9b:5d:e7:9f:
         f4:63:42:31:11:86:33:05:6f:ee:b8:06:4a:e3:d6:4a:08:31:
         7c:01:7a:55:f0:21:4f:26:ee:e6:73:a8:c0:74:81:89:42:61:
         c5:06:62:9c:3d:5e:2f:6a:4c:3d:f9:fc:3f:58:0a:b8:e7:e9:
         64:b3:65:67:23:25:e6:dd:a8:82:26:54:73:93:11:41:c9:1d:
         06:e0:48:c1:02:92:b4:ba:48:f2:36:70:e9:3e:88:0f:88:65:
         1d:a1:fa:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----