Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/2728cf55-0fc5-39b4-af49-d5260baa3c32.roa
File:                     2728cf55-0fc5-39b4-af49-d5260baa3c32.roa (raw, json)
Hash identifier:          Zb93HqFNUtDonZ/3p7UxjS40n9mve29eUkOlMGDdwCI=
Subject key identifier:   67:94:29:8C:0D:35:0C:DD:5B:3F:23:31:AE:FA:4C:1C:C4:C6:FA:4C
Certificate issuer:       /CN=cb48baa8-6c83-45eb-b09b-5fbd1e42c57d
Certificate serial:       19A4C9EDF33F1BC315DD00F05784651A266F92
Authority key identifier: E9:36:DC:58:66:FC:68:02:BF:A6:99:DE:B4:DD:13:5E:4C:D1:27:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/2728cf55-0fc5-39b4-af49-d5260baa3c32.roa
Signing time:             Mon 08 Oct 2012 18:44:54 +0000
ROA not before:           Tue 02 Oct 2012 04:00:00 +0000
ROA not after:            Sun 02 Oct 2022 04:00:00 +0000
asID:                     237
IP address blocks:        2001:48a8::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:a4:c9:ed:f3:3f:1b:c3:15:dd:00:f0:57:84:65:1a:26:6f:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb48baa8-6c83-45eb-b09b-5fbd1e42c57d
        Validity
            Not Before: Oct  2 04:00:00 2012 GMT
            Not After : Oct  2 04:00:00 2022 GMT
        Subject: CN=2960b298-48dd-4ff9-a6a4-cd3a7d9d0120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:66:aa:35:c8:d2:35:e8:f5:40:b6:d9:31:fe:
                    5b:77:77:08:85:70:13:71:d8:05:a1:7d:09:d3:fe:
                    47:2b:9c:b6:0d:63:c3:59:de:ad:bb:4a:6d:69:7a:
                    ed:83:36:54:79:81:cc:38:f3:08:84:6b:2f:71:93:
                    d1:cf:a5:09:59:36:f5:a8:46:ab:ab:eb:98:a5:59:
                    90:02:4e:23:0d:f5:b3:b2:3c:07:8b:41:82:05:f4:
                    22:74:7b:75:21:4b:a9:32:96:23:fc:5a:ed:d6:6b:
                    6a:7a:73:92:c8:0f:c8:93:83:81:14:19:8e:94:82:
                    43:09:5d:3c:74:8c:9d:de:b7:42:7e:82:11:e3:70:
                    c8:78:67:a2:b4:66:68:16:7b:e7:8c:14:c4:73:09:
                    18:11:30:c2:9b:80:29:98:7f:17:a7:30:11:89:77:
                    f8:48:fb:78:af:42:f8:39:56:70:e2:97:53:ca:58:
                    0c:c3:8c:b0:f8:02:c5:3e:b5:0e:f3:95:45:df:74:
                    2a:8b:93:2d:f8:72:c6:06:f0:c1:80:90:6d:d1:7f:
                    a6:9a:6d:8b:1a:b8:72:3f:44:44:29:e5:8d:4e:c3:
                    2f:c9:b4:ff:bf:2c:54:77:86:4f:fc:62:25:d8:e3:
                    13:11:2f:cc:45:f7:b1:51:7a:ac:75:2b:de:29:fd:
                    7d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:94:29:8C:0D:35:0C:DD:5B:3F:23:31:AE:FA:4C:1C:C4:C6:FA:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/2728cf55-0fc5-39b4-af49-d5260baa3c32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.crl

            X509v3 Authority Key Identifier:
                keyid:E9:36:DC:58:66:FC:68:02:BF:A6:99:DE:B4:DD:13:5E:4C:D1:27:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:48a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:00:4b:d1:aa:91:de:10:d3:3f:d3:ff:15:62:72:f5:77:c6:
         0d:10:7a:a0:db:f0:d3:67:0d:b7:17:37:c3:88:42:97:a3:a2:
         87:ed:8d:29:77:af:dd:32:e1:b2:16:e9:ff:5a:c5:77:57:15:
         de:38:dc:35:c3:a7:5c:71:c7:99:9c:7d:1e:61:98:78:a9:d0:
         46:45:08:d0:85:b0:dc:7d:ab:0e:93:9d:c1:4c:e6:f8:f3:f6:
         ba:dd:31:95:7f:b0:a3:2f:28:36:88:ea:31:b2:4b:34:71:9b:
         b4:1a:a6:e7:85:1c:bf:04:1a:cc:42:a9:38:7c:ad:80:92:a1:
         8c:18:9b:e1:73:9b:83:3d:3e:31:f9:61:7f:9e:82:87:07:4d:
         1c:15:bc:58:2c:6f:a7:33:f3:d3:35:30:4d:d8:c7:66:1f:2a:
         25:d5:62:63:f5:73:dd:16:60:5c:23:e2:ad:38:74:ef:7f:1a:
         fa:59:9b:ab:7a:55:07:6c:e2:18:f1:70:fb:a7:11:4b:a7:47:
         11:d9:e3:b7:26:a3:2f:6f:fa:48:46:85:9a:36:4b:13:27:25:
         ab:93:bf:60:f9:09:87:2e:c8:16:05:78:ea:fb:46:d6:8a:42:
         55:a6:dc:f4:3f:61:90:c4:10:02:a6:04:89:1c:59:f3:aa:30:
         b7:59:73:d9
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgITGaTJ7fM/G8MV3QDwV4RlGiZvkjALBgkqhkiG9w0BAQsw
LzEtMCsGA1UEAwwkY2I0OGJhYTgtNmM4My00NWViLWIwOWItNWZiZDFlNDJjNTdk
MB4XDTEyMTAwMjA0MDAwMFoXDTIyMTAwMjA0MDAwMFowLzEtMCsGA1UEAwwkMjk2
MGIyOTgtNDhkZC00ZmY5LWE2YTQtY2QzYTdkOWQwMTIwMIIBIjANBgkqhkiG9w0B
AQEFAAOCAQ8AMIIBCgKCAQEAzmaqNcjSNej1QLbZMf5bd3cIhXATcdgFoX0J0/5H
K5y2DWPDWd6tu0ptaXrtgzZUeYHMOPMIhGsvcZPRz6UJWTb1qEarq+uYpVmQAk4j
DfWzsjwHi0GCBfQidHt1IUupMpYj/Frt1mtqenOSyA/Ik4OBFBmOlIJDCV08dIyd
3rdCfoIR43DIeGeitGZoFnvnjBTEcwkYETDCm4ApmH8XpzARiXf4SPt4r0L4OVZw
4pdTylgMw4yw+ALFPrUO85VF33Qqi5Mt+HLGBvDBgJBt0X+mmm2LGrhyP0REKeWN
TsMvybT/vyxUd4ZP/GIl2OMTES/MRfexUXqsdSveKf19awIDAQABo4IDVjCCA1Iw
HQYDVR0OBBYEFGeUKYwNNQzdWz8jMa76TBzExvpMMIHlBggrBgEFBQcBCwSB2DCB
1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9y
eS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1
N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jYjQ4YmFh
OC02YzgzLTQ1ZWItYjA5Yi01ZmJkMWU0MmM1N2QvMjcyOGNmNTUtMGZjNS0zOWI0
LWFmNDktZDUyNjBiYWEzYzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHIhoHF
cnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVl
NGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYy
LTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvY2I0OGJhYTgtNmM4My00NWViLWIwOWIt
NWZiZDFlNDJjNTdkL2NiNDhiYWE4LTZjODMtNDVlYi1iMDliLTVmYmQxZTQyYzU3
ZC5jcmwwHwYDVR0jBBgwFoAU6TbcWGb8aAK/ppnetN0TXkzRJ84wDgYDVR0PAQH/
BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3luYzov
L3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEt
ZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1i
YTA1LTg3MTg3ZjAwOTliMi9jYjQ4YmFhOC02YzgzLTQ1ZWItYjA5Yi01ZmJkMWU0
MmM1N2QuY2VyMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
IAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAgAUioMAsGCSqGSIb3DQEBCwOC
AQEAXABL0aqR3hDTP9P/FWJy9XfGDRB6oNvw02cNtxc3w4hCl6Oih+2NKXev3TLh
shbp/1rFd1cV3jjcNcOnXHHHmZx9HmGYeKnQRkUI0IWw3H2rDpOdwUzm+PP2ut0x
lX+woy8oNojqMbJLNHGbtBqm54UcvwQazEKpOHytgJKhjBib4XObgz0+Mflhf56C
hwdNHBW8WCxvpzPz0zUwTdjHZh8qJdViY/Vz3RZgXCPirTh0738a+lmbq3pVB2zi
GPFw+6cRS6dHEdnjtyajL2/6SEaFmjZLEyclq5O/YPkJhy7IFgV46vtG1opCVabc
9D9hkMQQAqYEiRxZ86owt1lz2Q==
-----END CERTIFICATE-----