Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1f24c355-64e7-3266-aff1-55328c29fb64.roa
File:                     1f24c355-64e7-3266-aff1-55328c29fb64.roa (raw, json)
Hash identifier:          pips5X3w+s36+cotDe//3/6ysJ+RVUq9Xr/R98scY+c=
Subject key identifier:   0D:90:28:F6:D3:E5:9B:98:B3:9C:07:12:F8:A9:7C:E5:B3:DE:1D:7E
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328583AA7C2234CC2B561ADF92F8600
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1f24c355-64e7-3266-aff1-55328c29fb64.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     41264
IP address blocks:        104.133.241.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:c2:23:4c:c2:b5:61:ad:f9:2f:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=3cb74f74-4951-4d4a-95bf-294e9abd00b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:bc:45:e7:c0:aa:82:5e:4b:42:a3:43:04:d6:
                    08:d8:3d:03:16:8c:8c:db:ff:9b:b5:0a:17:88:c2:
                    ce:ef:78:dc:83:36:ef:10:c7:18:34:c3:55:0f:9d:
                    e1:70:9f:13:c7:47:15:6b:7d:ed:00:02:4a:75:72:
                    a6:f7:3d:94:ba:06:d7:55:7f:5e:f2:26:8f:9b:a1:
                    28:0d:37:6e:22:fe:78:c0:88:bd:cb:61:cb:1f:89:
                    95:27:f4:f6:40:82:96:99:68:5b:52:ee:c4:1b:d0:
                    0a:73:5e:eb:4b:d0:5e:78:2d:e3:2c:64:c6:7f:9a:
                    70:3d:a0:c1:b9:13:87:28:3c:30:ed:42:77:89:ff:
                    dd:22:bf:8a:61:1c:f6:a4:d4:82:00:27:96:bf:5b:
                    8f:dd:80:69:f5:30:7b:a4:0f:1e:e4:93:b4:87:6c:
                    d1:97:4c:24:5d:64:af:e0:33:b6:68:8e:39:61:36:
                    ba:a4:33:12:f6:33:65:47:73:c5:0a:52:f6:06:33:
                    3a:b6:59:37:38:7b:2c:e9:a7:7f:d3:6b:8b:e6:0a:
                    91:f8:e8:16:81:d9:c6:39:a2:19:9f:ac:c2:6a:b7:
                    e1:50:dd:b4:ca:07:8e:4e:3b:10:10:14:40:ef:1c:
                    eb:b7:64:06:ba:16:67:00:c6:7f:61:b7:bb:43:16:
                    5f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:90:28:F6:D3:E5:9B:98:B3:9C:07:12:F8:A9:7C:E5:B3:DE:1D:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1f24c355-64e7-3266-aff1-55328c29fb64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:b0:c3:83:3f:f1:18:cc:1a:e3:ab:23:06:20:e7:e1:9e:33:
         d1:01:d8:03:8e:07:b6:22:cf:1d:ba:1b:a9:96:97:64:e9:e5:
         b8:08:cb:3a:f6:6c:2a:95:df:59:23:a4:68:02:84:e8:c6:32:
         2d:62:21:49:1e:4a:9f:18:44:ac:05:ce:62:2f:72:fe:13:ba:
         5d:02:fd:5b:0f:ee:3d:02:ee:57:9d:79:a5:53:03:c6:ad:7f:
         8d:f4:60:aa:00:49:92:0a:bf:63:e1:9c:b7:63:0e:fb:2f:d9:
         11:ac:9b:dc:87:8e:af:a4:0a:52:82:e1:53:dc:b9:bf:a1:da:
         b3:0b:22:e5:a2:92:ce:31:ef:93:f1:49:e0:fe:a8:91:2e:af:
         3d:63:aa:39:63:64:2e:86:ea:bd:a0:28:44:32:b0:b0:54:93:
         6b:68:e5:fc:4c:6b:f5:d2:4a:1e:ea:f0:3a:42:98:8c:f1:12:
         61:4c:d9:aa:95:9e:d1:03:3b:c9:89:01:20:68:d6:5b:b6:b6:
         33:9e:80:eb:ed:35:03:2f:af:a3:28:65:92:3b:a5:61:95:d8:
         67:3e:3e:9d:9e:da:98:5e:b6:7f:3f:9d:91:9e:c2:df:a8:0f:
         4a:b9:60:ba:84:00:4e:50:90:e6:67:96:23:e8:91:8e:87:c3:
         5c:9f:0d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----