Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6c7f8d7-4c06-4480-bbd8-71cf97b216b6/e46efef8-472f-3832-9f2b-d98c61ca4ef9.roa
File:                     e46efef8-472f-3832-9f2b-d98c61ca4ef9.roa (raw, json)
Hash identifier:          9OmiGB065qGQdx9AKpaREEepibld96TyxVMcXSRouJ0=
Subject key identifier:   0E:C7:0A:42:5D:17:4A:F1:50:C6:30:28:C5:E8:D9:BE:8E:04:9E:F2
Certificate issuer:       /CN=e6c7f8d7-4c06-4480-bbd8-71cf97b216b6
Certificate serial:       C8935546D3B2100169DA98103AC381591124F8
Authority key identifier: CF:13:24:EB:7E:8B:4E:D8:7D:25:7D:FB:0E:78:8D:71:59:0C:52:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6c7f8d7-4c06-4480-bbd8-71cf97b216b6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6c7f8d7-4c06-4480-bbd8-71cf97b216b6/e46efef8-472f-3832-9f2b-d98c61ca4ef9.roa
Signing time:             Sat 03 Nov 2012 16:27:06 +0000
ROA not before:           Fri 02 Nov 2012 04:00:00 +0000
ROA not after:            Wed 02 Nov 2022 04:00:00 +0000
asID:                     6450
IP address blocks:        204.194.22.0/23 maxlen: 24
                          2620:95:8000::/48 maxlen: 64

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            c8:93:55:46:d3:b2:10:01:69:da:98:10:3a:c3:81:59:11:24:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6c7f8d7-4c06-4480-bbd8-71cf97b216b6
        Validity
            Not Before: Nov  2 04:00:00 2012 GMT
            Not After : Nov  2 04:00:00 2022 GMT
        Subject: CN=d393f51e-0317-46f3-9ff8-f6ed5bd84822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b8:37:24:03:d6:13:31:99:62:80:30:16:b1:
                    51:e5:3a:14:f5:64:b8:ae:9b:4e:98:97:7f:37:a8:
                    b9:9f:ed:b7:1f:17:8d:bf:f0:11:3a:15:70:c3:07:
                    95:4a:a4:5e:f0:47:e6:2a:9a:36:7d:a4:fe:92:da:
                    2c:e7:14:0c:76:c9:1a:c3:10:ba:65:45:d4:30:7a:
                    0f:d1:78:6d:a4:94:db:05:4c:ad:06:fb:f2:30:a5:
                    c3:43:df:16:18:2f:37:67:32:2f:34:7d:69:42:21:
                    cf:53:23:2f:b9:32:d0:ab:1f:1c:85:8b:6c:db:42:
                    28:ac:fa:80:f7:3a:e3:a5:e2:63:0e:c3:86:ad:ed:
                    09:1f:07:1f:8a:d4:20:69:54:44:2d:1c:62:a7:9a:
                    6b:d7:c0:f0:b9:e5:fc:28:4d:4f:25:9c:4e:34:1a:
                    b5:90:81:4b:40:6c:f6:89:aa:c9:b8:69:87:46:9c:
                    eb:f1:a1:69:89:b4:f1:21:f9:0b:00:e7:15:93:94:
                    1d:02:03:16:35:19:85:2c:14:ac:75:0f:c4:93:8a:
                    92:49:5a:3b:a3:bc:22:70:de:a1:93:54:b7:6a:d0:
                    88:7d:29:18:3c:9a:bd:f8:7d:b1:73:0c:f5:37:dc:
                    28:9d:bf:45:50:66:2e:ae:9f:7c:6c:22:08:25:29:
                    fe:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:C7:0A:42:5D:17:4A:F1:50:C6:30:28:C5:E8:D9:BE:8E:04:9E:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6c7f8d7-4c06-4480-bbd8-71cf97b216b6/e46efef8-472f-3832-9f2b-d98c61ca4ef9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6c7f8d7-4c06-4480-bbd8-71cf97b216b6/e6c7f8d7-4c06-4480-bbd8-71cf97b216b6.crl

            X509v3 Authority Key Identifier:
                keyid:CF:13:24:EB:7E:8B:4E:D8:7D:25:7D:FB:0E:78:8D:71:59:0C:52:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6c7f8d7-4c06-4480-bbd8-71cf97b216b6.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.194.22.0/23
                IPv6:
                  2620:95:8000::/48

    Signature Algorithm: sha256WithRSAEncryption
         64:b4:24:7c:a7:42:ec:5a:2e:dd:fa:52:c2:f2:35:d6:09:68:
         4f:25:bc:3d:33:a5:ff:48:78:e9:e0:ea:16:69:40:33:8d:29:
         5e:70:6f:dc:16:18:09:d0:e6:35:73:39:c7:7d:cb:17:7c:86:
         a9:fc:98:29:c9:ed:ad:87:c4:00:d9:f7:b3:76:b4:68:46:b0:
         72:c5:1e:ad:e9:1c:14:27:f9:09:f3:5d:17:bc:44:d6:e2:7e:
         0d:57:ed:95:ad:27:03:9b:5e:bd:78:02:40:56:d8:85:80:b5:
         f9:33:db:f7:2e:54:dd:de:97:80:a8:a1:c6:97:d3:2d:77:b2:
         99:72:ec:cb:3d:d2:8f:f3:83:07:99:53:5d:47:33:94:5d:da:
         48:2e:6a:20:c1:37:92:ff:e7:77:d7:e7:bb:00:7a:7b:cc:3b:
         c7:b6:2b:9c:e4:39:7d:fb:f2:66:da:60:a2:48:c0:39:b0:ab:
         75:f8:67:90:2a:28:b2:f0:94:4e:46:37:af:3b:d0:61:a3:91:
         6c:d8:1f:71:7e:88:80:74:74:97:85:a4:72:d9:fb:95:7b:22:
         21:18:20:64:85:3e:c7:66:83:b0:ee:40:e4:ac:a8:4a:1b:2a:
         fe:66:79:e9:5f:86:a3:ae:b4:14:bf:6e:54:fd:b8:62:b4:94:
         45:69:7a:c0
-----BEGIN CERTIFICATE-----
MIIGUDCCBTqgAwIBAgIUAMiTVUbTshABadqYEDrDgVkRJPgwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMMJGU2YzdmOGQ3LTRjMDYtNDQ4MC1iYmQ4LTcxY2Y5N2IyMTZi
NjAeFw0xMjExMDIwNDAwMDBaFw0yMjExMDIwNDAwMDBaMC8xLTArBgNVBAMMJGQz
OTNmNTFlLTAzMTctNDZmMy05ZmY4LWY2ZWQ1YmQ4NDgyMjCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBALS4NyQD1hMxmWKAMBaxUeU6FPVkuK6bTpiXfzeo
uZ/ttx8Xjb/wEToVcMMHlUqkXvBH5iqaNn2k/pLaLOcUDHbJGsMQumVF1DB6D9F4
baSU2wVMrQb78jClw0PfFhgvN2cyLzR9aUIhz1MjL7ky0KsfHIWLbNtCKKz6gPc6
46XiYw7Dhq3tCR8HH4rUIGlURC0cYqeaa9fA8Lnl/ChNTyWcTjQatZCBS0Bs9omq
ybhph0ac6/GhaYm08SH5CwDnFZOUHQIDFjUZhSwUrHUPxJOKkklaO6O8InDeoZNU
t2rQiH0pGDyavfh9sXMM9TfcKJ2/RVBmLq6ffGwiCCUp/r0CAwEAAaOCA2YwggNi
MB0GA1UdDgQWBBQOxwpCXRdK8VDGMCjF6Nm+jgSe8jCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTZjN2Y4
ZDctNGMwNi00NDgwLWJiZDgtNzFjZjk3YjIxNmI2L2U0NmVmZWY4LTQ3MmYtMzgz
Mi05ZjJiLWQ5OGM2MWNhNGVmOS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2U2YzdmOGQ3LTRjMDYtNDQ4MC1iYmQ4
LTcxY2Y5N2IyMTZiNi9lNmM3ZjhkNy00YzA2LTQ0ODAtYmJkOC03MWNmOTdiMjE2
YjYuY3JsMB8GA1UdIwQYMBaAFM8TJOt+i07YfSV9+w54jXFZDFIoMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvZTZjN2Y4ZDctNGMwNi00NDgwLWJiZDgtNzFjZjk3
YjIxNmI2LmNlcjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBzMIWMA8EAgACMAkDBwAmIACV
gAAwCwYJKoZIhvcNAQELA4IBAQBktCR8p0LsWi7d+lLC8jXWCWhPJbw9M6X/SHjp
4OoWaUAzjSlecG/cFhgJ0OY1cznHfcsXfIap/Jgpye2th8QA2fezdrRoRrByxR6t
6RwUJ/kJ810XvETW4n4NV+2VrScDm169eAJAVtiFgLX5M9v3LlTd3peAqKHGl9Mt
d7KZcuzLPdKP84MHmVNdRzOUXdpILmogwTeS/+d31+e7AHp7zDvHtiuc5Dl9+/Jm
2mCiSMA5sKt1+GeQKiiy8JRORjevO9Bho5Fs2B9xfoiAdHSXhaRy2fuVeyIhGCBk
hT7HZoOw7kDkrKhKGyr+ZnnpX4ajrrQUv25U/bhitJRFaXrA
-----END CERTIFICATE-----