Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0f5d5a9a-9050-3524-83ff-942659cd8b88.roa
File:                     0f5d5a9a-9050-3524-83ff-942659cd8b88.roa (raw, json)
Hash identifier:          oZjZhG2s8ytUdpQ6GNBrA1tgXm6h4q+RfrCSPg+W4l8=
Subject key identifier:   98:1E:01:D1:93:B5:78:6D:6C:17:2B:8E:D5:A4:AC:98:34:DE:36:A1
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328583AA7C392ADDB87F25BB1E5FBC0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0f5d5a9a-9050-3524-83ff-942659cd8b88.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     15169
IP address blocks:        104.134.229.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:c3:92:ad:db:87:f2:5b:b1:e5:fb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=ce38ee24-623e-4a5f-baf5-1c7360677e43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:29:07:fa:97:85:46:62:af:c2:a1:26:95:01:
                    25:94:20:70:b2:b0:e0:d1:ba:a1:1b:9b:da:75:ce:
                    2c:35:09:72:33:83:f9:19:ab:34:49:14:4b:07:43:
                    87:54:5a:a4:9d:4a:f1:70:b0:ab:b1:ed:55:76:89:
                    ab:4d:52:da:29:db:f4:f3:9c:7c:3d:82:17:57:66:
                    d7:37:a6:ae:3c:2b:16:a0:1f:5d:5d:27:f2:63:45:
                    7d:13:98:7a:62:15:3d:30:55:96:cb:b3:cb:f7:18:
                    c4:87:71:b8:00:cd:2d:83:3b:ba:fa:99:dd:af:4f:
                    73:b5:64:78:9a:03:1d:cf:08:75:4c:67:4b:11:c7:
                    a1:17:b8:89:0f:64:e5:75:63:8a:7e:96:6e:5d:56:
                    84:cc:66:18:bf:2d:62:49:03:31:14:09:de:5a:c1:
                    a0:cc:d7:0c:a1:40:59:e0:9a:b3:2a:34:09:fb:83:
                    84:92:6f:4a:4d:45:a5:f0:d6:51:5b:cc:0c:4b:51:
                    e0:32:d2:b3:e2:74:9b:49:0e:6a:79:a4:d7:97:dc:
                    fc:7d:69:51:aa:59:65:ea:9d:35:09:5b:31:7a:fe:
                    16:8e:34:c1:75:7d:28:69:17:29:be:3c:24:03:7e:
                    2b:6c:50:59:2a:54:28:88:10:5f:ff:ac:8c:83:55:
                    65:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:1E:01:D1:93:B5:78:6D:6C:17:2B:8E:D5:A4:AC:98:34:DE:36:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0f5d5a9a-9050-3524-83ff-942659cd8b88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:53:e5:00:95:14:1a:83:d6:c0:f8:5f:cd:25:e8:fd:d9:76:
         8e:b1:8f:e3:48:b5:5f:be:15:16:01:50:c1:f7:79:e9:78:d4:
         5f:a3:fa:da:77:bc:a3:d2:10:ad:37:24:6d:8b:74:02:7f:76:
         89:dd:6c:25:71:e0:c1:23:3f:a7:6d:b6:fa:62:4c:4e:e9:b7:
         f0:1e:d7:9b:02:3a:e1:14:68:ea:ce:89:c7:a5:69:81:b6:f3:
         40:0a:60:c9:54:9c:cd:77:fb:6e:8d:33:a0:89:9e:68:9d:bb:
         61:a2:f7:ec:33:e2:ce:68:fa:40:71:7f:cd:21:3b:76:6a:a3:
         d8:60:c1:9e:49:68:ee:25:ea:c4:e6:10:12:a0:59:a5:f5:5a:
         49:c3:53:48:d1:6b:ba:e6:8a:67:df:c2:0f:59:8b:a4:7e:2f:
         05:ee:49:de:b4:d1:28:ca:18:b6:f7:f4:fc:0f:f8:90:74:cc:
         2f:24:07:5b:49:8a:1b:65:f1:aa:7d:02:1f:02:df:63:50:e0:
         87:22:5c:9d:81:8a:e9:3f:fc:d7:04:29:d1:ab:42:3f:dd:54:
         19:c2:99:82:c6:30:15:da:6e:20:ef:b3:c5:da:e8:ae:42:1f:
         7e:d3:a2:3b:70:55:c2:fa:d9:4f:f9:29:c9:48:b7:c3:07:99:
         3e:73:39:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----