Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/05863784-b128-3a16-b321-4fa06d56ab06.roa
File:                     05863784-b128-3a16-b321-4fa06d56ab06.roa (raw, json)
Hash identifier:          vxVTyFoPGW8ZanJGLWK/z4220Tyrqm99wnavFGDDEjo=
Subject key identifier:   AA:E1:67:58:24:69:48:0C:A5:48:77:BD:9E:8D:39:A7:ED:E5:10:D7
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328583AA7A0ABFD42F81DA7F7CE1680
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/05863784-b128-3a16-b321-4fa06d56ab06.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     41264
IP address blocks:        104.132.129.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:a0:ab:fd:42:f8:1d:a7:f7:ce:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=b402794b-848c-48b4-97ad-e2b9d9b3bdea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0f:b7:ca:3e:82:a3:cd:13:a8:34:6a:aa:b5:
                    37:d6:59:16:80:d5:74:fb:92:9f:d3:77:93:75:ec:
                    20:a6:f2:97:2f:ff:93:4a:ba:0b:90:cd:f3:1c:19:
                    71:40:85:b7:d7:b2:99:ca:e0:58:1a:e0:5f:1c:15:
                    07:73:19:98:a7:37:5c:90:6a:ad:7e:fb:0c:2a:46:
                    18:78:9f:1d:97:f1:8b:5a:d4:36:9f:c6:61:0d:c3:
                    66:73:df:2f:0f:9b:ee:e6:9e:02:75:c4:e8:0b:7d:
                    d0:22:be:a3:f8:28:6a:96:50:8a:1b:54:9f:bc:c8:
                    37:91:42:c8:3f:ce:d9:ef:fe:59:51:4f:82:01:05:
                    3c:8f:4d:07:37:8a:fc:21:da:9e:c4:fa:87:d1:e6:
                    19:93:6e:1a:ce:98:02:8c:48:c5:22:b8:12:3a:0e:
                    c1:ac:b8:92:5e:85:12:92:9b:f4:83:f7:ce:e9:06:
                    c6:f0:89:3f:04:04:90:7e:9c:22:e7:bf:1a:7a:6a:
                    cc:fb:a3:b3:37:81:20:23:d1:81:d3:5b:60:b7:0e:
                    81:8a:d6:12:5e:b9:65:9f:b6:bd:bf:f7:7f:37:5f:
                    8d:0c:1c:56:c8:0a:59:8c:cc:f1:c0:dc:90:06:b3:
                    a3:b8:b1:bc:8e:0e:3c:1f:2d:2f:28:bf:a0:f9:45:
                    e5:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:E1:67:58:24:69:48:0C:A5:48:77:BD:9E:8D:39:A7:ED:E5:10:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/05863784-b128-3a16-b321-4fa06d56ab06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:42:fd:f5:7a:57:e1:3f:68:19:07:fc:68:ca:6d:5d:b7:34:
         97:c4:7c:32:11:8d:f0:32:fc:06:82:28:84:a5:73:df:1f:65:
         75:f3:b1:f2:ec:fb:87:00:76:67:df:26:86:44:8c:8d:4a:ef:
         1f:67:24:3c:a1:4b:52:4f:52:20:29:88:92:e6:98:c4:98:ca:
         9f:7e:e0:59:ef:fa:1b:43:54:98:5c:95:64:bd:4f:bd:03:8b:
         e0:d5:52:e1:36:65:ff:04:8a:0b:60:9b:41:11:79:06:5e:f2:
         0f:07:91:e4:b4:92:d9:ca:18:ee:48:47:5c:05:64:e5:b3:ba:
         83:fc:15:6e:14:48:38:25:6c:55:f1:e0:0c:1d:c2:12:fc:d5:
         1b:8a:2e:93:d8:30:f0:63:80:ab:ed:31:ff:7b:00:e1:b5:8a:
         19:41:07:05:b8:d9:9d:da:5d:b8:bc:4c:58:5c:86:83:a2:24:
         1d:d8:1a:ac:ed:82:68:2e:63:79:fe:60:1f:ca:48:6c:fc:a2:
         14:64:aa:45:9f:ad:13:a2:d8:7b:44:80:2c:dc:dd:d1:0b:41:
         2e:4a:cb:48:22:bf:b5:3d:30:f0:27:5e:5b:26:17:b1:9e:69:
         78:db:7a:01:5b:15:b4:37:57:bd:a0:7b:15:55:be:9d:d9:a8:
         db:3f:ce:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----