Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/013da40e-1774-3926-a720-63556fb86f02.roa
File:                     013da40e-1774-3926-a720-63556fb86f02.roa (raw, json)
Hash identifier:          LiUXdiEKqhQ9RDwwY4aTBz6GPKZEYkt5+7y7TM8FbIw=
Subject key identifier:   A4:59:47:46:4C:3D:BC:B5:54:AE:16:EC:83:A7:FC:A6:79:B1:0A:C9
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328583AA7BEADE5FFDA77F11E560F80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/013da40e-1774-3926-a720-63556fb86f02.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     41264
IP address blocks:        104.132.96.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:be:ad:e5:ff:da:77:f1:1e:56:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=90efb796-899e-4411-b499-4def97f5fcbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:e5:ad:81:ea:ff:70:04:a5:c5:c7:37:6b:e1:
                    7a:9d:4c:08:7c:eb:00:eb:9a:a5:62:75:8d:b6:12:
                    4a:5c:ad:40:93:ec:8e:06:07:0e:ee:2b:1a:98:0d:
                    2a:1c:14:2e:88:2f:f6:33:44:fc:b8:6a:4d:bb:a6:
                    d2:26:f0:47:3d:bd:17:a0:6e:20:60:b0:f8:7a:19:
                    a2:40:8d:14:41:76:8e:ee:d6:cb:0c:4f:6e:9c:b7:
                    60:29:ef:2d:8e:75:6f:25:99:62:5f:79:56:41:05:
                    c3:2a:49:b1:e2:6d:d4:cb:e0:8b:11:b3:85:86:6f:
                    42:0d:e8:7f:1d:42:2b:b7:43:c0:91:a7:ee:06:af:
                    f0:a9:78:24:3d:4d:df:08:71:d4:d8:c8:a9:39:77:
                    1e:1f:ce:66:04:b1:84:28:30:46:90:4b:e0:b8:bc:
                    f9:b5:88:90:cd:37:b5:f6:cc:e0:84:29:3f:37:82:
                    7f:f4:7b:ba:88:da:88:57:c4:53:b1:22:e2:57:44:
                    a9:9f:56:3c:43:a4:a1:e0:b0:26:f1:ac:93:60:c9:
                    ca:f2:e1:b5:5c:e9:47:56:38:ae:b4:e6:0d:cd:c5:
                    ca:b6:d5:7a:a1:74:4f:95:f8:2a:7f:e7:a4:9f:56:
                    72:96:af:d9:96:ff:cc:50:a5:7f:ac:26:9f:d0:1b:
                    f1:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:59:47:46:4C:3D:BC:B5:54:AE:16:EC:83:A7:FC:A6:79:B1:0A:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/013da40e-1774-3926-a720-63556fb86f02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:2e:7f:77:97:4d:78:e8:c4:dd:7b:64:ba:d3:dc:3d:51:15:
         21:f9:34:6f:6a:1f:78:e7:1a:05:37:02:54:cd:9d:52:2e:4f:
         16:c9:a8:30:37:aa:ce:24:93:be:66:a2:19:26:43:e0:8e:37:
         1d:8a:e6:ce:15:27:96:c2:67:84:06:87:b5:c8:c8:d4:9e:5b:
         4c:31:b4:f1:d5:e8:1f:66:c8:7d:0f:e0:97:39:9b:1d:f2:4d:
         fc:29:2b:14:a4:89:ce:c9:43:fb:16:28:45:0b:70:2e:6a:e1:
         29:43:fc:83:9e:b5:0e:8f:d2:61:21:14:22:f2:83:31:10:9f:
         0c:7b:ae:14:40:70:a1:3f:57:d7:4f:e5:6b:e0:ea:03:fe:42:
         e8:c2:48:74:d1:d7:54:dd:84:4b:cd:ee:10:ef:70:bc:a5:b5:
         0e:25:e8:8b:8f:f8:ca:3f:a8:d6:be:16:e0:f9:c5:bd:5d:77:
         66:13:f9:3e:c2:95:56:ee:d1:bf:a5:82:96:d9:28:96:00:81:
         c7:02:c5:4d:18:7b:da:ff:8c:1a:f3:17:a7:a6:85:01:ed:3b:
         f1:26:97:13:06:0e:25:f2:e7:d2:9a:04:b5:4e:e4:9c:49:27:
         62:11:6e:4f:5d:be:c0:bb:1e:36:d5:67:d0:c2:a7:cf:f9:32:
         0b:e5:47:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:35 2023 by rpki-client on console-fra.rpki-client.org