Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/f83a8bd8-5b4d-31aa-b1c9-72b736cf8917.roa
File:                     f83a8bd8-5b4d-31aa-b1c9-72b736cf8917.roa (raw, json)
Hash identifier:          13pDEdF9ySG7AsPdtuUuoLbDw+uTkZYrT/FVL3viE0Y=
Subject key identifier:   EE:24:48:A3:5A:0C:8E:66:8F:EC:E6:B3:69:F6:6A:7D:B9:79:F8:AE
Certificate issuer:       /CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Certificate serial:       4313329ACAA6F56E21FBF82BF318E9F9D33B82
Authority key identifier: 39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/f83a8bd8-5b4d-31aa-b1c9-72b736cf8917.roa
Signing time:             Mon 17 Nov 2014 15:27:07 +0000
ROA not before:           Mon 26 Nov 2012 05:00:00 +0000
ROA not after:            Sat 26 Nov 2022 05:00:00 +0000
asID:                     15348
IP address blocks:        64.99.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:13:32:9a:ca:a6:f5:6e:21:fb:f8:2b:f3:18:e9:f9:d3:3b:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
        Validity
            Not Before: Nov 26 05:00:00 2012 GMT
            Not After : Nov 26 05:00:00 2022 GMT
        Subject: CN=cde23089-e242-421c-81d2-500f08496480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3e:a9:c2:7a:28:93:04:93:22:6e:29:17:c7:
                    ae:04:3c:da:07:68:6b:23:07:98:54:3a:4c:38:81:
                    fb:71:2b:c4:54:39:0f:89:ed:92:05:ae:11:fa:2e:
                    e6:ad:60:af:64:51:2c:a4:a2:1a:b3:8c:5c:32:2f:
                    4b:7c:af:d3:ed:e8:91:7d:d8:d1:43:f0:e0:bb:5d:
                    85:aa:44:5b:dd:62:d6:87:bb:b1:40:08:02:28:d3:
                    1f:28:d3:48:55:71:9e:0e:e3:80:49:9f:e3:17:ee:
                    e0:2f:6e:51:94:99:1a:e1:a2:cd:ea:1f:ba:d5:2e:
                    bb:45:6e:90:00:18:38:28:87:80:cf:5a:9a:16:08:
                    ef:b9:a2:7c:e5:51:c6:31:65:56:5d:67:53:81:60:
                    ff:07:d7:ae:3b:55:5a:c4:53:ab:dc:27:ee:9a:d2:
                    7d:5b:cc:6e:02:38:4c:45:8a:43:fc:f9:66:d4:92:
                    7f:bf:ed:f2:5f:a5:0b:fa:f5:36:bf:49:94:b2:59:
                    36:9f:a1:0f:a7:24:59:a6:0d:86:d4:73:8e:bb:7f:
                    1a:84:05:a5:e1:12:eb:1f:08:f3:44:2e:68:30:7e:
                    06:8e:66:58:d3:82:48:36:07:ef:89:2c:d2:d3:7d:
                    63:e1:f2:2b:32:ff:a6:b3:c6:27:c0:f2:94:a6:ec:
                    9b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:24:48:A3:5A:0C:8E:66:8F:EC:E6:B3:69:F6:6A:7D:B9:79:F8:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/f83a8bd8-5b4d-31aa-b1c9-72b736cf8917.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl

            X509v3 Authority Key Identifier:
                keyid:39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.99.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:18:7b:44:67:0d:b7:e1:c3:09:cd:41:66:72:40:63:96:c7:
         d8:6c:5e:85:7e:aa:de:35:8c:6d:9b:98:66:d0:4b:17:e4:fe:
         75:88:87:33:3a:97:ec:66:a9:0c:5d:13:2c:92:bd:2a:a4:7c:
         0a:0e:5c:7b:c6:87:e3:10:26:75:8b:eb:c5:ea:72:89:5e:bd:
         5b:1b:2c:a7:a7:82:a1:84:ce:eb:ce:99:ea:a0:3d:ad:59:37:
         0f:27:bc:0c:6b:31:47:74:39:87:b3:8d:59:d4:7f:14:0e:eb:
         f8:ad:93:60:e2:38:0e:d0:ce:a2:db:76:3b:ea:06:dd:aa:1d:
         a7:49:35:5d:d9:79:7f:12:24:53:2b:08:d4:db:c7:e0:74:4d:
         2e:2c:17:e0:ad:b4:70:21:a2:56:e9:5f:b5:88:bc:69:b3:f2:
         7b:4d:9a:71:95:9d:12:88:8b:00:e0:91:b2:28:c2:ce:26:55:
         63:ab:38:14:06:5d:e3:b9:a2:e6:58:f5:05:49:5f:1a:64:eb:
         85:8d:2d:e6:6e:67:cc:b1:b9:5c:c9:68:3a:47:90:db:e4:a7:
         ba:64:57:c8:f6:a1:fa:eb:8a:60:46:43:1b:a8:ed:31:c8:8b:
         64:ac:f6:62:d0:ed:80:54:f4:11:cf:5d:6f:d2:d6:b6:27:58:
         2e:02:5f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----