Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0998b0aa-5712-363c-ab00-cca7d0268bca.roa
File:                     0998b0aa-5712-363c-ab00-cca7d0268bca.roa (raw, json)
Hash identifier:          H2RhH8luJK9QmLoIdpTEYUpv9QPoXiStxHZIYTmGKcY=
Subject key identifier:   77:41:79:1A:9A:25:A6:90:7E:49:E2:DD:A8:AE:47:FE:17:70:83:88
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328583AA7C0DCF6A939F33851149600
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0998b0aa-5712-363c-ab00-cca7d0268bca.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     41264
IP address blocks:        104.133.156.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:c0:dc:f6:a9:39:f3:38:51:14:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=fe512027-647e-44c1-9c93-540203b26d9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:8c:33:96:88:6b:2a:54:75:69:20:0d:38:f1:
                    f9:88:76:39:d2:9a:4a:0e:1d:e1:8f:67:63:e4:50:
                    52:2e:a3:b0:bf:42:57:b4:5f:57:78:3b:dc:94:f1:
                    62:24:63:6c:22:ae:50:cd:0e:fd:47:bb:08:7c:68:
                    61:6f:d8:07:8c:9f:21:99:5b:43:3f:45:62:a3:89:
                    74:98:e4:14:da:15:d6:aa:07:e1:ed:ca:4a:a1:76:
                    34:ab:0a:8b:c6:2e:03:2a:2a:e2:15:00:ed:c2:6d:
                    9d:71:67:ab:a4:85:c1:1d:39:cb:72:dc:34:69:7e:
                    d2:29:81:87:76:47:fd:1f:55:ef:08:24:8f:d7:5c:
                    7f:89:0e:ff:12:44:19:e7:95:d2:d5:ea:61:8a:c5:
                    c2:74:23:ba:6e:8e:58:ee:a7:cb:e6:f3:1d:3e:79:
                    2e:72:2e:14:01:9b:04:e3:ae:7b:b7:a6:8b:79:ee:
                    d0:e4:fe:02:37:1f:b0:8f:2e:5b:e0:00:28:bc:11:
                    46:cf:51:ed:42:0f:e6:f8:95:e0:26:db:17:59:a3:
                    d7:0e:91:f2:55:49:4d:c0:61:1f:2f:97:e8:f9:a0:
                    f0:f5:2e:45:0c:2e:85:48:5e:47:2e:09:52:f4:d3:
                    24:3d:a0:99:d1:ad:49:56:60:cf:8a:28:74:17:f7:
                    3f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:41:79:1A:9A:25:A6:90:7E:49:E2:DD:A8:AE:47:FE:17:70:83:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0998b0aa-5712-363c-ab00-cca7d0268bca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:29:35:13:bb:77:56:b2:7e:47:54:16:f3:f1:93:65:b5:03:
         e6:4f:12:19:c3:cb:d6:28:e0:07:3d:ac:22:89:19:14:13:e9:
         2c:2b:cb:8f:65:66:98:ca:f0:7e:ac:e8:2f:d8:8f:19:74:52:
         1a:8f:b4:7a:71:51:08:b6:f1:36:fa:40:36:58:4f:14:9f:ef:
         19:f2:12:00:ef:64:04:00:0b:f4:3e:24:b2:1d:5a:5d:01:db:
         b6:9d:4e:db:7b:a6:4b:0e:90:b5:dc:8d:e4:82:46:7b:26:c1:
         06:b4:1a:b9:ea:69:9a:72:c1:5c:68:39:d8:bf:1b:4f:a7:f5:
         b5:37:9a:42:fd:30:b5:46:83:28:cd:96:ec:9b:84:3e:9b:8c:
         fd:2e:08:3f:e3:d6:c4:2f:0b:57:d8:46:73:0d:82:7d:88:64:
         be:74:d8:01:44:31:b3:6c:3c:59:16:82:b8:31:e8:dc:44:7d:
         b8:dd:30:fa:9b:59:a5:46:b5:62:0c:40:c9:fc:fe:7a:6a:5f:
         75:20:8e:af:17:e5:7c:7e:64:2e:d6:02:ff:60:e3:ea:64:66:
         b2:9b:2d:8b:fc:41:3d:f3:04:e3:8c:07:1d:3c:fa:db:81:b4:
         8f:f3:6e:6f:04:26:c9:02:5b:d7:b8:13:6c:84:b6:e1:f9:de:
         cf:bc:f3:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----