Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/172bec82-bbcd-3a2d-a15b-bdccb284cd04.roa
File:                     172bec82-bbcd-3a2d-a15b-bdccb284cd04.roa (raw, json)
Hash identifier:          Nm15hUzJAYkEOipgzO9W0MMmQxO23HO/E0myY+9x35k=
Subject key identifier:   B9:3A:4E:15:0E:19:11:FD:69:ED:60:07:65:3F:47:88:95:9D:FF:5C
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328583AA7A144CF0E2A4C8A296A82C0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/172bec82-bbcd-3a2d-a15b-bdccb284cd04.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     41264
IP address blocks:        104.133.57.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:a1:44:cf:0e:2a:4c:8a:29:6a:82:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=f248c7bc-164b-451d-a71f-ddde0bb87353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:2b:a0:10:c2:2c:40:1b:cb:d8:28:da:f6:d5:
                    14:3e:ee:f1:6b:7d:49:02:f7:6e:bd:82:00:f3:4b:
                    d9:53:cf:44:dc:cd:0b:87:10:84:2a:04:80:85:d0:
                    d3:a2:de:84:70:b0:bc:22:54:42:e7:92:31:2f:50:
                    20:26:7f:37:c6:5a:10:00:c7:31:29:be:a9:01:ed:
                    15:88:b4:39:49:9b:04:ce:10:db:31:6d:27:01:82:
                    6a:f6:7b:e5:ed:72:3e:77:bf:bd:5e:ba:ae:8c:6e:
                    07:64:d1:3a:80:fd:75:ef:3b:df:45:63:85:5c:40:
                    22:67:40:b6:85:2e:ba:2c:ab:c6:a6:5e:c2:ac:ec:
                    08:c9:bd:46:0e:cc:42:26:82:1e:7a:17:47:44:5f:
                    2f:f8:27:5d:b5:9b:53:a1:6e:17:4c:7d:6f:4d:b9:
                    0b:20:12:ef:53:2b:91:ba:44:ab:76:d6:78:88:33:
                    d8:27:9f:ca:a6:08:60:a1:07:0e:40:c0:63:11:81:
                    80:ee:2f:2e:0c:ad:85:41:39:87:25:82:e6:3e:17:
                    82:8f:3e:1c:f7:e9:70:a7:e4:bb:a3:9b:f4:a2:6a:
                    76:de:f3:13:91:04:88:df:0c:60:f9:0e:49:14:13:
                    da:b8:1e:06:28:5b:e6:74:21:65:79:e6:02:6e:66:
                    c2:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:3A:4E:15:0E:19:11:FD:69:ED:60:07:65:3F:47:88:95:9D:FF:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/172bec82-bbcd-3a2d-a15b-bdccb284cd04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:15:4b:5e:50:47:ec:b6:95:4f:ed:74:60:b8:e2:a2:06:93:
         bb:6b:f8:dc:96:a7:eb:e2:d5:5f:a4:4a:12:a3:28:b7:25:da:
         aa:54:3b:30:98:81:22:e3:9c:5a:24:f4:5d:b5:16:38:11:7e:
         db:96:62:f2:c5:ef:2b:ef:34:6c:45:31:b7:11:51:6d:28:32:
         7f:81:27:52:da:ad:3d:87:d4:b5:b8:de:fe:f0:97:52:59:92:
         23:89:24:8d:f7:10:4f:e2:d2:69:db:96:6f:9a:82:70:f3:25:
         14:22:66:4a:74:84:9c:ad:b8:18:30:7d:83:53:a9:14:7d:a2:
         34:ea:3d:66:5e:0a:06:d7:0e:60:1e:b2:51:43:a2:b2:fb:a6:
         5c:51:22:1a:0c:dc:95:84:e2:8e:f4:23:d0:4a:14:87:52:0e:
         e1:24:6c:b2:36:4a:85:49:4a:54:1b:12:72:8b:aa:72:6b:65:
         be:d3:17:04:20:b2:1a:7d:dc:02:b3:9e:48:bc:0f:62:e2:eb:
         33:8b:41:e2:cb:62:f8:d9:99:80:2b:2b:c9:6c:ac:02:66:4c:
         a2:fb:07:c5:9f:b8:5c:35:52:8a:48:90:79:50:0a:eb:bc:30:
         e8:cd:6b:e1:8c:01:99:0a:63:5f:6f:d4:10:77:29:73:90:3b:
         7b:12:c4:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:35 2023 by rpki-client on console-fra.rpki-client.org