Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/f1de03bf-5959-32c2-bb77-5f55937846b9.roa
File:                     f1de03bf-5959-32c2-bb77-5f55937846b9.roa (raw, json)
Hash identifier:          v8WSmbE/bnDa6jqJWTn8LN9IJkdOO1QAYrW5If8HjvI=
Subject key identifier:   E7:46:79:C0:0F:61:9E:DF:34:43:A2:9F:28:66:C1:F2:39:CF:AF:0E
Certificate issuer:       /CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Certificate serial:       010D0C9F4328576D51CC73C042CFC1565AE0FB60
Authority key identifier: 39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/f1de03bf-5959-32c2-bb77-5f55937846b9.roa
Signing time:             Fri 05 Aug 2016 13:25:09 +0000
ROA not before:           Mon 26 Nov 2012 05:00:00 +0000
ROA not after:            Sat 26 Nov 2022 05:00:00 +0000
asID:                     32491
IP address blocks:        64.98.128.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:56:5a:e0:fb:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
        Validity
            Not Before: Nov 26 05:00:00 2012 GMT
            Not After : Nov 26 05:00:00 2022 GMT
        Subject: CN=1ae4ea24-77ce-40c9-b70e-a6cfed2112b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a0:c3:2a:9e:30:3d:7f:eb:cb:64:57:a0:d3:
                    3f:54:0d:ea:5c:3c:1c:ee:82:b5:0b:b8:72:94:95:
                    1a:cb:1d:0e:dd:ab:f2:43:a5:bd:05:d6:52:37:95:
                    f5:44:f8:ef:76:a0:6e:0b:12:c1:1b:81:0e:45:28:
                    4f:62:51:c5:3b:cd:6f:5c:89:e3:4c:c6:7a:32:09:
                    a0:2b:e0:e8:c8:79:6e:08:8a:48:5e:99:1a:f0:f3:
                    cc:f6:ee:97:b8:77:68:15:53:d0:b3:39:20:20:f5:
                    ec:fd:b5:82:e1:1c:40:7e:40:5f:b7:57:6c:5d:ff:
                    07:b4:4e:9c:d8:e4:b3:ea:99:36:24:d6:f0:9b:21:
                    fe:55:6c:40:ce:3b:d9:74:d1:2b:86:f2:18:00:b6:
                    31:fe:12:06:97:14:bb:94:55:ef:52:cd:a5:b5:7d:
                    00:04:06:0f:56:06:34:93:f3:ec:9b:10:c3:c1:13:
                    72:f6:40:15:e4:33:4e:9f:66:52:de:53:48:33:4e:
                    97:5b:4e:73:e4:dd:8e:92:9a:01:ba:71:d4:40:98:
                    17:92:38:37:ac:b7:e1:01:b5:de:21:af:97:f4:8d:
                    a3:00:d4:68:22:2d:ca:4b:06:73:84:dd:20:ba:65:
                    2d:69:9e:5b:e2:d3:03:39:13:a1:3b:50:b0:27:b3:
                    50:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:46:79:C0:0F:61:9E:DF:34:43:A2:9F:28:66:C1:F2:39:CF:AF:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/f1de03bf-5959-32c2-bb77-5f55937846b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl

            X509v3 Authority Key Identifier:
                keyid:39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.98.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:ed:e4:e0:19:9d:5e:8d:29:53:45:75:c3:2f:54:49:6b:ea:
         10:aa:9a:25:62:b6:ee:a5:7f:6a:7f:62:00:a2:10:64:f9:cc:
         f1:13:74:6e:4d:1c:b6:75:20:fa:f8:eb:5c:08:31:da:d8:4a:
         e9:22:6a:a2:01:d3:d1:40:a9:6e:81:a5:66:83:59:d2:85:57:
         11:ea:a0:1f:7a:80:18:59:b9:03:3e:2e:93:72:8f:cc:de:51:
         52:3e:68:db:04:2c:b5:11:f1:44:17:ec:bf:2c:cb:50:e8:23:
         e3:c6:af:7d:e2:86:62:66:d2:0b:89:eb:95:7f:1a:fe:b5:d4:
         c5:61:f5:a7:e1:05:7c:a3:46:d1:63:d6:59:16:a0:69:d9:e9:
         67:57:0f:ef:20:e8:d1:97:7b:5a:db:55:e4:01:df:51:66:fd:
         ce:54:a0:02:5f:a9:52:3e:b3:36:94:da:ef:c3:43:ed:b9:fd:
         03:7a:ae:d5:ee:ab:92:3b:43:1d:b4:f0:0a:c2:10:17:17:47:
         1c:35:44:31:33:f6:92:8d:27:90:42:86:7d:93:7c:0a:3e:da:
         23:8f:ab:58:71:3e:8f:dc:07:eb:b8:21:a7:b4:27:98:03:f3:
         a9:e1:25:a9:a0:9c:53:56:3d:eb:99:d6:8b:db:0a:42:a8:8e:
         c7:4a:1c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----