Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c9036196-58eb-3718-b250-cd575581c4b0.roa
File:                     c9036196-58eb-3718-b250-cd575581c4b0.roa (raw, json)
Hash identifier:          /IpsYuzeYmMiQf2onVEbzn3T5z/3P+GURmuTxPCD+BA=
Subject key identifier:   66:7B:65:C0:B1:BC:D2:32:03:FE:36:E4:14:AA:BD:9C:D6:65:ED:D5
Certificate issuer:       /CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Certificate serial:       010D0C9F4328576D51CC73C042CFC1565AE36165
Authority key identifier: 39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c9036196-58eb-3718-b250-cd575581c4b0.roa
Signing time:             Fri 05 Aug 2016 13:27:46 +0000
ROA not before:           Mon 26 Nov 2012 05:00:00 +0000
ROA not after:            Sat 26 Nov 2022 05:00:00 +0000
asID:                     32491
IP address blocks:        64.98.176.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:56:5a:e3:61:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
        Validity
            Not Before: Nov 26 05:00:00 2012 GMT
            Not After : Nov 26 05:00:00 2022 GMT
        Subject: CN=408a5162-5b55-4115-8340-f7a84aebc699
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:91:d6:ea:ca:74:17:a2:e7:61:42:82:a3:aa:
                    46:93:53:af:07:e2:7d:e2:02:4d:3e:09:fd:99:1d:
                    76:8f:bc:1d:da:5f:64:6e:d6:5a:91:0d:b5:e2:34:
                    52:a3:fb:4c:00:86:19:3a:10:7b:56:82:90:48:b3:
                    3a:3d:81:be:12:d7:80:06:66:f5:a2:81:63:a3:03:
                    fb:cf:24:a7:e8:95:51:02:c8:c6:9c:40:e7:d5:c4:
                    db:bf:e5:78:f2:9b:cc:a4:f1:1e:06:84:61:68:a2:
                    51:69:3f:c9:2f:33:92:93:43:56:28:cf:e1:c0:dc:
                    1e:65:8f:e6:69:25:03:a1:c5:4a:b7:2f:c7:c6:15:
                    9d:3e:3c:0b:3a:0e:90:de:ee:17:5e:07:ae:ef:80:
                    bf:c5:46:f3:d8:09:4b:01:77:d1:f0:67:2d:f2:f7:
                    69:7e:b8:be:62:16:16:72:39:6a:22:ba:d3:fd:27:
                    e4:ab:81:d8:6b:8e:bb:ec:30:4a:7e:86:0f:33:82:
                    af:55:55:4f:c8:24:6d:c4:4f:4e:bd:83:63:0c:96:
                    a3:64:d4:ab:d5:a9:c8:93:71:46:78:f6:41:bf:2a:
                    84:3a:01:22:40:af:29:ff:a5:8a:a4:4c:a1:e5:39:
                    33:f3:0b:63:09:69:67:ab:fc:a5:60:be:15:65:7b:
                    ac:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:7B:65:C0:B1:BC:D2:32:03:FE:36:E4:14:AA:BD:9C:D6:65:ED:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c9036196-58eb-3718-b250-cd575581c4b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl

            X509v3 Authority Key Identifier:
                keyid:39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.98.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:98:29:c4:25:09:64:e1:2c:fc:9e:70:f7:0c:b3:0a:7d:cb:
         95:4f:85:28:55:94:94:dc:eb:01:d2:18:2f:1b:0f:6a:fe:4b:
         14:ab:ae:59:68:5a:40:26:89:42:10:3a:29:b7:55:e6:b7:2f:
         0b:50:63:fb:84:11:52:71:e9:79:6e:3d:86:93:6f:8e:59:56:
         f9:05:91:2b:4a:c6:a0:96:e8:0c:1a:e6:73:ea:49:64:65:4a:
         e2:fc:6e:24:52:f7:99:d6:05:d4:21:65:56:fb:f3:b2:cd:16:
         ee:e0:61:06:1c:8e:c2:1d:7b:0c:51:80:f8:ea:21:b4:f9:84:
         a8:51:b5:14:74:1f:ff:57:7a:91:8f:02:3a:63:da:f4:a3:fe:
         33:95:0a:c9:63:3c:9b:4f:f9:d0:af:2f:ab:5d:18:15:9f:4d:
         be:57:bc:03:61:94:a1:55:58:2c:08:b0:9d:94:66:8d:7c:43:
         b3:00:f7:6f:8e:fd:5b:b5:79:2c:e1:28:e6:2e:cd:1e:1b:8c:
         12:1b:4c:19:15:60:b4:7c:1e:52:33:4c:e2:d7:69:6e:dc:a6:
         33:f4:de:df:3a:16:ec:7e:13:ef:5f:29:c7:fa:71:0c:af:b4:
         f9:60:4f:2f:96:e9:a0:aa:fc:88:dc:75:1f:66:90:92:01:1b:
         39:c8:ed:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----