Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/d24dadd3-c69d-3cd2-9a46-dc0c84ddf3f8.roa
File:                     d24dadd3-c69d-3cd2-9a46-dc0c84ddf3f8.roa (raw, json)
Hash identifier:          cOw4P6+mBYQMRk8wtwq7WCLil44VH5odsSFmI+1x9Pk=
Subject key identifier:   8B:12:39:7E:E0:7A:39:B5:B4:BF:8F:A1:57:82:CB:09:D3:7B:79:D6
Certificate issuer:       /CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Certificate serial:       010D0C9F4328576D51CC73C042CFC1565AEA4310
Authority key identifier: 39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/d24dadd3-c69d-3cd2-9a46-dc0c84ddf3f8.roa
Signing time:             Fri 05 Aug 2016 13:35:17 +0000
ROA not before:           Mon 26 Nov 2012 05:00:00 +0000
ROA not after:            Sat 26 Nov 2022 05:00:00 +0000
asID:                     32491
IP address blocks:        64.98.32.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:56:5a:ea:43:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
        Validity
            Not Before: Nov 26 05:00:00 2012 GMT
            Not After : Nov 26 05:00:00 2022 GMT
        Subject: CN=d58e614d-7d20-48ee-b5c2-24fccffa2dfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:10:a2:24:06:b0:f4:24:48:82:e3:59:e2:57:
                    99:7d:a3:8e:8a:d9:ee:9d:93:42:f1:bf:02:61:4c:
                    07:34:75:db:1d:cc:c9:4e:16:bf:f0:3c:a8:41:b8:
                    86:bb:8e:f0:1e:13:b7:2c:07:1a:52:86:e6:8b:5f:
                    9b:8c:24:be:ff:d0:f1:8e:58:e6:de:a1:e4:d5:b7:
                    0f:6d:4d:43:1c:9f:97:81:1a:cd:0e:c0:4e:dc:4e:
                    76:fc:5b:25:74:d0:da:3b:ad:4a:ce:05:42:e5:cd:
                    ce:d5:ff:f0:e0:50:1d:9c:83:8e:17:7b:2f:03:d8:
                    fd:df:29:92:f3:5f:01:5e:b0:d0:a5:b8:4d:e4:76:
                    75:85:71:7d:8e:37:56:0a:8c:8f:5a:62:1c:e1:d1:
                    80:7e:27:1c:f4:c3:f7:34:71:e2:67:05:cd:c5:39:
                    41:d2:98:cf:aa:bb:dc:bf:2a:09:ca:3f:af:30:c8:
                    04:49:90:90:39:de:c6:db:51:d5:7a:86:e2:5b:db:
                    7b:58:d4:ef:af:68:99:71:9c:f4:a8:18:1d:5f:1d:
                    24:f2:66:ce:77:a5:31:a4:57:b7:b0:e3:c3:43:0f:
                    d2:7d:00:0e:31:f1:f7:c0:5f:d0:5e:f8:c2:a1:de:
                    5e:ed:6e:4e:48:6f:33:9c:04:f0:3f:a8:bb:8a:38:
                    c0:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:12:39:7E:E0:7A:39:B5:B4:BF:8F:A1:57:82:CB:09:D3:7B:79:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/d24dadd3-c69d-3cd2-9a46-dc0c84ddf3f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl

            X509v3 Authority Key Identifier:
                keyid:39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.98.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:4d:35:e0:25:f5:12:77:1e:fc:26:63:5d:d2:05:ee:b7:9f:
         9e:c8:32:d7:f6:0c:fc:38:21:3a:00:ea:ae:70:3f:5f:d0:f2:
         ff:81:a0:2b:72:f2:bb:90:e1:fe:35:01:07:3c:21:df:57:4f:
         74:4a:e4:02:fc:f2:b3:9b:26:90:86:3e:b7:58:87:c4:fb:b8:
         7e:76:f1:a9:b8:4c:a1:35:fa:cf:78:70:23:b1:85:28:cd:7e:
         e1:bd:f3:0c:89:6d:c7:2d:34:77:2a:87:4b:5a:22:d0:24:42:
         a1:bf:05:0d:be:68:ac:b2:48:d2:60:cf:a6:d7:4e:af:85:2b:
         c2:7d:d0:04:cc:5a:1b:c4:4a:96:88:92:9e:7d:5d:c1:e1:c9:
         f7:42:57:3c:64:9e:37:9c:8a:ce:9c:f9:a1:84:f5:e6:c3:e3:
         cd:57:c8:db:a1:96:e4:cb:80:60:a1:53:22:98:a0:63:9c:85:
         96:a5:2e:42:75:24:e4:c5:0a:a4:da:4d:c1:ae:08:0d:55:24:
         7f:a0:95:54:8b:cb:61:21:22:e8:a1:ac:b9:8e:db:4a:56:9c:
         2b:0b:b9:ce:ff:14:f1:c9:67:ca:5e:38:29:22:4c:a6:2a:16:
         23:e1:8e:b2:42:ab:4c:7f:e8:87:d5:9a:f7:49:f3:78:ca:3e:
         a7:d8:82:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----