Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/07239472-0712-3b61-a8cc-c8b12a8cfefa.roa
File:                     07239472-0712-3b61-a8cc-c8b12a8cfefa.roa (raw, json)
Hash identifier:          RdJTV79cU4KbPleQwuOrmDV4tvj23Eosl3xqWuQs9kI=
Subject key identifier:   9D:FF:33:08:0D:0B:23:0B:E2:89:C8:66:2E:B9:6E:8B:26:51:E0:C2
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328583AA7A38E4DAE244A05C20A6740
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/07239472-0712-3b61-a8cc-c8b12a8cfefa.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     41264
IP address blocks:        104.133.2.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:a3:8e:4d:ae:24:4a:05:c2:0a:67:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=af363dc5-cad2-4bb4-a183-597681258313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:87:9c:ff:6d:46:e9:e9:5a:46:65:d2:81:f2:
                    a5:12:5a:07:81:1f:3d:0d:19:5e:29:3b:d6:9a:b3:
                    de:e0:47:9f:03:00:57:89:98:54:4f:e7:af:3e:db:
                    dd:fd:31:4b:42:4a:ab:0f:76:e0:b1:64:c3:a5:10:
                    68:75:1f:eb:c3:af:b9:d7:3a:48:e0:50:2e:f2:7c:
                    0c:84:f3:e7:aa:b6:b2:65:7b:2b:2c:19:cc:57:6a:
                    fa:0a:21:71:fb:00:06:d4:84:fe:56:b1:60:48:1c:
                    9b:74:cf:a2:5b:dd:8b:e8:62:0f:ac:b8:fe:2a:fd:
                    32:a1:19:ce:84:03:ae:93:75:b8:f1:6a:3f:f1:43:
                    19:f5:40:ea:57:fb:16:0d:e0:02:44:06:ea:8c:c2:
                    13:ef:62:45:7d:b8:a4:90:b6:64:28:b6:7f:27:14:
                    cd:0e:e4:72:22:4e:c4:72:76:4d:ba:7c:08:50:4e:
                    85:09:0d:0a:dd:d4:f1:cc:06:6b:2e:8a:d6:de:4f:
                    26:36:33:ed:4e:78:c4:9b:e9:a0:d0:e0:27:fe:57:
                    29:77:ed:99:0a:e2:03:d3:d0:82:98:87:7e:7d:01:
                    2a:44:af:82:74:53:14:fc:3d:84:a3:10:aa:ca:b8:
                    84:68:2d:e8:0f:ef:18:55:a0:a9:dc:50:2c:27:dd:
                    16:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:FF:33:08:0D:0B:23:0B:E2:89:C8:66:2E:B9:6E:8B:26:51:E0:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/07239472-0712-3b61-a8cc-c8b12a8cfefa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:0e:56:49:98:12:d7:e1:b1:0d:0a:d7:58:f9:a0:13:2a:fd:
         53:19:58:7d:0c:75:63:12:e1:30:68:2a:c7:d4:ad:56:fd:4a:
         dd:44:d8:c7:68:44:62:bb:5f:7f:fa:48:d7:7c:b5:63:56:bc:
         5e:38:fe:cc:80:08:27:75:f2:4c:da:80:c0:96:8a:0d:84:eb:
         f4:91:f6:56:f9:d8:18:76:7c:d2:4b:1c:54:c4:38:4a:8d:89:
         de:c9:29:c2:d1:ce:66:55:e8:69:02:73:80:c8:61:b6:bc:3e:
         91:f1:66:e8:27:d1:0c:d6:3a:97:e4:e0:ca:7e:50:74:9e:86:
         de:ac:37:77:14:15:0d:ba:8e:90:94:0d:bb:13:8d:52:a6:76:
         42:93:2a:a7:cc:72:59:dc:59:6c:48:c7:90:e7:78:c4:8c:71:
         86:ba:0b:32:b1:f5:ba:2e:96:a2:27:a6:a8:ca:f6:07:e2:59:
         8c:d2:8d:c9:26:25:29:91:c5:31:85:06:1f:bb:f6:23:b0:7a:
         40:14:f6:f5:83:5b:4c:4a:2c:36:58:82:6d:67:4c:85:97:d4:
         bb:b8:89:a8:08:20:01:73:cb:c4:70:37:31:b1:de:7e:7c:8d:
         7b:f6:ac:d6:84:60:f2:7b:e7:b7:f8:63:7f:4f:fa:58:aa:0d:
         fe:8d:02:64
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqno45NriRKBcIKZ0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
YWYzNjNkYzUtY2FkMi00YmI0LWExODMtNTk3NjgxMjU4MzEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4ec/21G6elaRmXSgfKlEloHgR89DRleKTvW
mrPe4EefAwBXiZhUT+evPtvd/TFLQkqrD3bgsWTDpRBodR/rw6+51zpI4FAu8nwM
hPPnqrayZXsrLBnMV2r6CiFx+wAG1IT+VrFgSBybdM+iW92L6GIPrLj+Kv0yoRnO
hAOuk3W48Wo/8UMZ9UDqV/sWDeACRAbqjMIT72JFfbikkLZkKLZ/JxTNDuRyIk7E
cnZNunwIUE6FCQ0K3dTxzAZrLorW3k8mNjPtTnjEm+mg0OAn/lcpd+2ZCuID09CC
mId+fQEqRK+CdFMU/D2EoxCqyriEaC3oD+8YVaCp3FAsJ90WnQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ3/MwgNCyML4onIZi65bosmUeDCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMDcyMzk0NzItMDcxMi0z
YjYxLWE4Y2MtYzhiMTJhOGNmZWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIUCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF4OVkmYEtfhsQ0K11j5oBMq/VMZWH0MdWMS4TBoKsfUrVb9St1E2Mdo
RGK7X3/6SNd8tWNWvF44/syACCd18kzagMCWig2E6/SR9lb52Bh2fNJLHFTEOEqN
id7JKcLRzmZV6GkCc4DIYba8PpHxZugn0QzWOpfk4Mp+UHSeht6sN3cUFQ26jpCU
DbsTjVKmdkKTKqfMclncWWxIx5DneMSMcYa6CzKx9boulqInpqjK9gfiWYzSjckm
JSmRxTGFBh+79iOwekAU9vWDW0xKLDZYgm1nTIWX1Lu4iagIIAFzy8RwNzGx3n58
jXv2rNaEYPJ757f4Y39P+liqDf6NAmQ=
-----END CERTIFICATE-----