Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/11d13749-45c9-385e-a992-0ca6b3fac90d.roa
File:                     11d13749-45c9-385e-a992-0ca6b3fac90d.roa (raw, json)
Hash identifier:          0CFyny5qaRQ1DSQNoWg8+RX+Ah8SHCovHvjkFigW1IQ=
Subject key identifier:   02:96:46:20:11:80:2F:B0:B0:5F:B5:5E:E5:6F:AC:55:2E:29:0B:73
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328583AA7AA1E690804D090FCE1BB80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/11d13749-45c9-385e-a992-0ca6b3fac90d.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     41264
IP address blocks:        104.134.244.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:aa:1e:69:08:04:d0:90:fc:e1:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=75cf7f56-f240-43c0-85a9-dfecc75c95fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:00:4a:2a:5b:a5:be:1e:36:ab:3e:5f:30:ec:
                    32:b5:82:d7:ea:e5:f3:5b:62:ab:de:7e:13:54:f3:
                    21:38:60:52:08:53:62:60:40:32:df:1f:1b:ac:6f:
                    13:84:ca:5e:78:6f:de:04:d1:c5:fc:50:fd:ee:5e:
                    fb:cb:1b:75:ee:8f:ce:51:53:d6:21:18:0c:25:32:
                    81:0a:6d:d1:b0:85:55:ed:9b:40:d1:aa:27:12:6d:
                    a6:6f:e1:10:74:4f:18:3a:6d:ce:f0:c6:6a:94:d5:
                    48:f1:04:20:1f:19:d0:19:a0:00:57:d2:d4:38:57:
                    fd:a7:b4:a0:5f:a5:3e:15:17:5b:eb:a0:e6:4f:39:
                    e9:46:2d:e2:24:0a:bc:7d:81:89:2f:6c:78:9b:e9:
                    1e:8f:b9:32:c2:2d:16:6f:22:6a:ae:54:b3:14:28:
                    2e:ed:47:43:2e:93:9a:de:81:95:de:26:9e:45:5a:
                    44:8b:90:75:c0:85:43:20:e8:73:fd:1d:54:55:c4:
                    05:6c:15:38:4f:2d:e5:77:52:51:6f:09:f6:40:db:
                    24:91:67:cf:85:1d:b1:95:df:cc:c0:61:c3:0d:d8:
                    fd:81:e8:ed:5c:41:de:cd:90:30:15:f3:23:58:db:
                    11:d9:5a:07:8f:07:a4:23:2c:88:42:a3:ad:24:71:
                    c6:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:96:46:20:11:80:2F:B0:B0:5F:B5:5E:E5:6F:AC:55:2E:29:0B:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/11d13749-45c9-385e-a992-0ca6b3fac90d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:85:c4:12:b3:5b:af:63:6c:7e:0d:e9:30:b8:d2:68:60:5b:
         df:f6:f8:36:a3:a2:5c:0b:30:63:de:a5:52:0b:46:e6:be:c9:
         d2:ed:df:af:94:5e:82:26:89:e8:0e:12:e7:4c:af:cb:67:49:
         b2:0d:71:3e:87:10:dd:1e:00:d3:df:e8:17:d2:bb:52:6f:34:
         64:f6:97:ab:d8:58:87:5c:dd:a2:c9:4c:0b:be:41:59:66:38:
         56:3d:5e:08:5f:85:ee:9a:0b:29:9a:d5:f7:06:f8:76:5b:f5:
         e8:88:9a:1b:49:b1:57:51:83:44:8b:29:2e:20:9d:ab:45:31:
         92:52:0d:a1:f6:67:e3:56:cf:25:ed:a0:84:c0:32:d8:c9:2f:
         92:4f:f6:ac:9a:6a:d1:f6:52:2f:5a:12:9b:38:85:ab:1d:96:
         94:f6:2f:c2:8b:d6:57:71:10:a8:b9:a2:ed:ab:15:37:7c:3e:
         f6:a1:a4:a0:2a:09:ba:b4:98:84:26:27:ba:b8:7c:e1:3b:f3:
         81:07:2f:e4:3d:71:fa:45:e9:eb:19:6b:26:5d:8e:1f:5f:70:
         a1:7b:a9:c2:25:7e:ac:0d:0d:62:04:8c:74:a7:ab:29:ab:01:
         ca:39:47:a5:8a:37:22:07:e1:af:71:89:2c:c0:63:9a:ba:55:
         03:ef:d4:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:02:11 2023 by rpki-client on console-ams.rpki-client.org