Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0fd39763-2ebd-3b77-9880-6f82419984c5.roa
File:                     0fd39763-2ebd-3b77-9880-6f82419984c5.roa (raw, json)
Hash identifier:          sYzbiobnuT0gKAvgeB8f12QLaZB4PtO/aie8OGhYYkw=
Subject key identifier:   55:8D:D5:81:DE:E5:D7:83:24:2E:8A:B3:C3:AE:DB:C0:CE:BC:8E:F2
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328583AA7B947EAE69E93B533976500
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0fd39763-2ebd-3b77-9880-6f82419984c5.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     395973
IP address blocks:        104.134.196.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:b9:47:ea:e6:9e:93:b5:33:97:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=adfcaa5a-d254-42ab-b616-21cd874062e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:63:b4:b1:1b:ea:55:e3:d9:a9:15:77:38:ac:
                    de:3a:63:10:0a:5f:33:f0:69:4e:31:a7:30:77:b8:
                    0b:f5:e6:0f:54:53:c7:4a:bd:66:e3:48:7a:a7:29:
                    9f:75:2b:cb:a3:f0:6b:23:0d:27:4f:de:f0:ae:5d:
                    48:65:f5:8a:6d:23:dc:a8:9f:5f:bb:2a:35:5d:83:
                    13:98:f2:94:be:49:1d:73:54:b2:2a:51:0c:22:81:
                    73:ff:b8:a9:4f:85:12:5b:14:27:b9:fc:ae:9c:76:
                    53:4b:8e:bd:25:ed:1e:d4:6d:74:3d:db:51:64:40:
                    ff:85:65:20:fd:48:fc:94:f3:7a:91:0d:ce:1f:49:
                    a2:a5:98:bb:57:da:77:e6:9b:d8:71:7c:8c:33:16:
                    ab:93:ad:c4:aa:73:84:38:f0:aa:78:9d:e5:a1:28:
                    33:91:3b:ef:b7:8e:35:7c:42:c9:6f:33:1f:e0:ee:
                    c3:63:51:9a:c0:1c:69:26:aa:3f:7c:b1:cb:b4:40:
                    7b:e3:2d:c3:7d:6e:3b:a0:a4:bc:64:b9:58:b0:84:
                    14:64:b2:2d:cb:a4:cc:48:b0:65:7a:16:0c:15:3c:
                    cd:3d:7c:f2:01:54:94:80:b0:56:0a:6c:51:12:31:
                    5d:92:26:04:db:ec:66:09:b9:d9:82:45:b9:fc:e9:
                    88:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:8D:D5:81:DE:E5:D7:83:24:2E:8A:B3:C3:AE:DB:C0:CE:BC:8E:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0fd39763-2ebd-3b77-9880-6f82419984c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:5e:e1:9c:e3:96:79:2a:4e:5a:72:ba:bf:5c:ae:cd:4d:ec:
         ca:16:03:54:0b:f9:18:55:73:57:19:aa:13:53:e5:7b:24:d0:
         8c:e6:8a:95:09:2f:92:8c:ed:5a:6d:e4:b0:f3:f3:48:9f:21:
         ca:4a:39:8e:06:53:85:06:40:80:e3:ea:b7:72:55:41:77:6c:
         12:d1:3c:38:ba:6f:fc:62:28:a1:f1:09:a5:2c:65:a8:60:73:
         79:35:0f:3f:d6:a1:f0:03:36:c3:67:7b:a0:12:49:10:de:d2:
         dd:d8:a2:04:0a:9d:b1:3b:88:88:6a:53:30:a5:0a:1e:78:e1:
         88:19:62:0e:b3:60:c8:00:31:f6:6a:33:52:98:fc:13:d8:22:
         f5:c7:9b:2b:b6:9c:fd:91:8e:85:72:bd:85:89:01:40:01:a2:
         43:9d:22:94:af:91:30:1f:9a:b0:30:2a:34:27:23:c4:22:00:
         1d:e5:69:d7:44:49:9a:61:10:c0:d2:d5:89:23:0c:9f:61:c9:
         8c:9e:f6:be:45:db:dc:4d:bd:70:73:29:42:f3:06:c5:bd:fe:
         bf:75:74:c7:ac:1a:1f:11:d5:e4:00:45:14:71:ca:58:a8:66:
         b1:cc:1d:66:9c:4a:1b:70:ea:4f:d9:3c:5a:b4:b7:6c:b3:a2:
         f2:25:2d:30
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnuUfq5p6TtTOXZQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
YWRmY2FhNWEtZDI1NC00MmFiLWI2MTYtMjFjZDg3NDA2MmU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumO0sRvqVePZqRV3OKzeOmMQCl8z8GlOMacw
d7gL9eYPVFPHSr1m40h6pymfdSvLo/BrIw0nT97wrl1IZfWKbSPcqJ9fuyo1XYMT
mPKUvkkdc1SyKlEMIoFz/7ipT4USWxQnufyunHZTS469Je0e1G10PdtRZED/hWUg
/Uj8lPN6kQ3OH0mipZi7V9p35pvYcXyMMxark63EqnOEOPCqeJ3loSgzkTvvt441
fELJbzMf4O7DY1GawBxpJqo/fLHLtEB74y3DfW47oKS8ZLlYsIQUZLIty6TMSLBl
ehYMFTzNPXzyAVSUgLBWCmxREjFdkiYE2+xmCbnZgkW5/OmIWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFWN1YHe5deDJC6Ks8Ou28DOvI7yMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMGZkMzk3NjMtMmViZC0z
Yjc3LTk4ODAtNmY4MjQxOTk4NGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIbEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHxe4ZzjlnkqTlpyur9crs1N7MoWA1QL+RhVc1cZqhNT5Xsk0IzmipUJ
L5KM7Vpt5LDz80ifIcpKOY4GU4UGQIDj6rdyVUF3bBLRPDi6b/xiKKHxCaUsZahg
c3k1Dz/WofADNsNne6ASSRDe0t3YogQKnbE7iIhqUzClCh544YgZYg6zYMgAMfZq
M1KY/BPYIvXHmyu2nP2RjoVyvYWJAUABokOdIpSvkTAfmrAwKjQnI8QiAB3laddE
SZphEMDS1YkjDJ9hyYye9r5F29xNvXBzKULzBsW9/r91dMesGh8R1eQARRRxylio
ZrHMHWacShtw6k/ZPFq0t2yzovIlLTA=
-----END CERTIFICATE-----