Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/dd33bfab-037d-3543-b602-1289a303a6dc.roa
File:                     dd33bfab-037d-3543-b602-1289a303a6dc.roa (raw, json)
Hash identifier:          1rsz9+4PtmFg/UDX/+PhjWvzwG3iLUF1o3U4iW6YLBo=
Subject key identifier:   CC:2C:9F:1C:E4:73:A0:1B:4C:CB:5F:94:F6:5C:E7:BC:F8:C6:65:74
Certificate issuer:       /CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Certificate serial:       010D0C9F4328583BBAFDABC7811DC101A6FDD800
Authority key identifier: 39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/dd33bfab-037d-3543-b602-1289a303a6dc.roa
Signing time:             Mon 26 Nov 2012 05:00:00 +0000
ROA not before:           Mon 26 Nov 2012 05:00:00 +0000
ROA not after:            Sat 26 Nov 2022 05:00:00 +0000
asID:                     32133
IP address blocks:        2604:4000:2000::/37 maxlen: 37

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:ba:fd:ab:c7:81:1d:c1:01:a6:fd:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
        Validity
            Not Before: Nov 26 05:00:00 2012 GMT
            Not After : Nov 26 05:00:00 2022 GMT
        Subject: CN=30b393b8-b16d-4043-930b-92cdfb6608d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:24:c2:43:36:42:ce:67:3f:65:38:ca:bf:77:
                    80:0f:13:29:90:2b:97:d0:1c:34:2d:35:1e:4c:ba:
                    80:c3:46:2e:04:48:0d:81:88:89:7a:47:35:7c:62:
                    70:3a:e8:42:87:56:cc:48:c1:f3:44:0f:e7:09:6b:
                    db:b4:1f:61:46:d4:b0:d4:af:f9:4c:19:18:42:f7:
                    d7:75:5a:1b:a9:4b:ea:70:bb:d3:99:e0:2d:ae:d1:
                    85:68:78:31:d3:1d:90:f3:20:bf:d0:e9:87:5d:40:
                    b3:1c:e7:ab:5d:ef:53:c2:63:8c:a6:7e:c3:3f:89:
                    f3:f5:1a:38:bc:93:8a:5c:14:75:e1:bc:2c:cc:f8:
                    88:45:b4:1c:cb:15:0a:0c:c9:df:88:ae:10:3d:78:
                    2d:5b:18:db:e7:85:02:d5:4d:bb:ee:fc:1b:78:96:
                    42:c4:44:3d:1e:02:44:39:8c:21:ae:8d:01:54:b9:
                    be:61:c6:7a:da:c0:a5:c0:fe:c2:22:e8:2e:81:40:
                    24:a2:b0:14:c2:9f:84:ec:f5:fd:3e:b5:82:c7:64:
                    62:8f:fd:e3:8f:a3:a1:26:8c:6e:34:a2:49:8a:9e:
                    7c:08:b1:e0:dc:25:3b:a5:c9:aa:bf:e2:b2:cf:68:
                    ea:fb:d5:cb:58:f0:79:c5:2e:73:c3:5b:99:88:c1:
                    e4:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:2C:9F:1C:E4:73:A0:1B:4C:CB:5F:94:F6:5C:E7:BC:F8:C6:65:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/dd33bfab-037d-3543-b602-1289a303a6dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl

            X509v3 Authority Key Identifier:
                keyid:39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:4000:2000::/37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:82:77:23:c0:97:58:13:77:f7:67:7b:88:f4:db:2c:0e:17:
         c7:0f:5e:0a:b4:e5:86:0b:a6:91:f4:50:4a:34:45:c4:c1:27:
         dc:13:2d:69:60:69:67:52:ee:e8:94:cc:bc:e3:50:cf:fb:e9:
         1a:13:b8:79:a1:5f:88:2a:d1:e6:5d:55:27:22:59:c2:b1:50:
         57:f3:76:fe:f9:19:7d:53:69:34:17:cc:e2:17:dc:9d:35:52:
         55:44:e8:4c:82:ee:76:4a:ef:5e:fc:c1:5b:c9:3a:c2:b2:99:
         53:2c:26:a2:60:5e:07:9e:41:e1:87:d9:95:00:ef:92:f6:4e:
         9b:45:5a:44:2d:df:16:07:76:0c:6f:b2:0c:ce:5e:27:a2:48:
         95:01:d4:94:03:6b:f7:b0:59:b0:dc:99:6f:37:da:ea:c0:ef:
         31:dc:89:5d:da:97:9d:34:d8:0b:56:b9:28:4d:85:6a:57:13:
         12:8e:32:6f:ef:01:e7:ab:ca:e2:aa:c8:c4:9d:e1:23:fc:e2:
         11:a9:0d:2c:39:5a:70:e2:26:62:c6:45:a2:c6:3b:68:e6:63:
         33:f5:23:36:35:7c:1f:03:d5:be:ec:95:d2:32:87:13:c2:1e:
         6d:2e:3f:e9:e6:4b:d2:1b:19:ff:88:27:c9:29:52:b6:f0:9b:
         6c:89:93:61
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWDu6/avHgR3BAab92AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzA3OTM2ODMtYWEwNy00OTM1LWEyYzItZWM0MjNlYTdk
ZDBiMB4XDTEyMTEyNjA1MDAwMFoXDTIyMTEyNjA1MDAwMFowLzEtMCsGA1UEAxMk
MzBiMzkzYjgtYjE2ZC00MDQzLTkzMGItOTJjZGZiNjYwOGQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCTCQzZCzmc/ZTjKv3eADxMpkCuX0Bw0LTUe
TLqAw0YuBEgNgYiJekc1fGJwOuhCh1bMSMHzRA/nCWvbtB9hRtSw1K/5TBkYQvfX
dVobqUvqcLvTmeAtrtGFaHgx0x2Q8yC/0OmHXUCzHOerXe9TwmOMpn7DP4nz9Ro4
vJOKXBR14bwszPiIRbQcyxUKDMnfiK4QPXgtWxjb54UC1U277vwbeJZCxEQ9HgJE
OYwhro0BVLm+YcZ62sClwP7CIugugUAkorAUwp+E7PX9PrWCx2Rij/3jj6OhJoxu
NKJJip58CLHg3CU7pcmqv+Kyz2jq+9XLWPB5xS5zw1uZiMHksQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFMwsnxzkc6AbTMtflPZc57z4xmV0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMDc5
MzY4My1hYTA3LTQ5MzUtYTJjMi1lYzQyM2VhN2RkMGIvZGQzM2JmYWItMDM3ZC0z
NTQzLWI2MDItMTI4OWEzMDNhNmRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzA3OTM2ODMtYWEwNy00OTM1LWEy
YzItZWM0MjNlYTdkZDBiL2MwNzkzNjgzLWFhMDctNDkzNS1hMmMyLWVjNDIzZWE3
ZGQwYi5jcmwwHwYDVR0jBBgwFoAUOdwqnqE5xltso0hvdvSX3QTCyKowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMDc5MzY4My1hYTA3LTQ5MzUtYTJjMi1lYzQy
M2VhN2RkMGIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYDJgRAACAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAGoJ3I8CXWBN392d7iPTbLA4Xxw9eCrTlhgumkfRQSjRFxMEn3BMt
aWBpZ1Lu6JTMvONQz/vpGhO4eaFfiCrR5l1VJyJZwrFQV/N2/vkZfVNpNBfM4hfc
nTVSVUToTILudkrvXvzBW8k6wrKZUywmomBeB55B4YfZlQDvkvZOm0VaRC3fFgd2
DG+yDM5eJ6JIlQHUlANr97BZsNyZbzfa6sDvMdyJXdqXnTTYC1a5KE2FalcTEo4y
b+8B56vK4qrIxJ3hI/ziEakNLDlacOImYsZFosY7aOZjM/UjNjV8HwPVvuyV0jKH
E8IebS4/6eZL0hsZ/4gnySlStvCbbImTYQ==
-----END CERTIFICATE-----