Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/215be103-640c-3e26-b22f-2ef9d9025cf0.roa
File:                     215be103-640c-3e26-b22f-2ef9d9025cf0.roa (raw, json)
Hash identifier:          d0swMflww2gxuJ9V/FFONp6/a+gzAuFOs0dxCVvOsi4=
Subject key identifier:   06:C1:77:C8:4B:DD:5C:A8:E6:D1:DD:35:E2:D5:36:3B:BF:E6:42:CE
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328583AA7B61EF2B2CE93CC399315E0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/215be103-640c-3e26-b22f-2ef9d9025cf0.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     41264
IP address blocks:        104.133.130.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:b6:1e:f2:b2:ce:93:cc:39:93:15:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=a02522a8-f1aa-480d-bc1a-6d870cfe8d76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7d:fe:31:ec:e0:ae:d0:ed:da:ab:71:fd:aa:
                    b1:e4:37:0c:62:52:48:c3:50:15:82:04:5f:c1:9d:
                    ef:d0:92:49:d0:e8:8f:97:e3:70:73:39:e2:ea:3e:
                    22:97:0b:3f:f2:d2:e4:ca:72:b3:cc:55:68:33:41:
                    80:e5:5b:33:f1:46:ed:33:b7:3e:4e:b1:0b:f3:6d:
                    35:49:d3:58:f7:13:f5:e5:ec:cc:19:de:48:ba:f3:
                    6a:ab:c8:b5:80:57:32:e2:f3:b8:20:f8:89:b2:7d:
                    f3:44:9e:bb:70:b1:e1:42:e3:a5:90:db:82:22:27:
                    50:46:35:6f:f2:72:6f:68:ba:5e:8f:ca:87:27:7e:
                    37:b3:d7:31:79:1a:94:54:46:ba:53:f7:e6:35:3e:
                    72:7d:61:d9:d3:73:5c:e3:a9:78:96:b9:13:51:f1:
                    3c:de:d1:23:b6:2e:15:d6:1b:27:8b:2b:3e:13:1a:
                    14:b6:b4:e3:91:d5:60:88:ed:10:f4:5b:d5:2e:4f:
                    0c:a7:58:3a:e6:13:a0:f4:18:88:54:34:86:ad:82:
                    23:9a:e2:57:ec:a7:1b:10:1d:6e:ca:bf:c8:89:bb:
                    79:bf:c2:bc:3b:02:42:ff:3a:0f:03:54:7d:f3:13:
                    ec:c4:0e:25:32:9a:b8:45:0c:34:09:50:d4:d4:cc:
                    2d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:C1:77:C8:4B:DD:5C:A8:E6:D1:DD:35:E2:D5:36:3B:BF:E6:42:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/215be103-640c-3e26-b22f-2ef9d9025cf0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:72:da:92:54:d7:67:60:9b:e3:b9:77:21:82:11:bb:4f:35:
         46:60:7a:0e:3d:00:4d:1a:64:60:44:22:d2:8e:4a:68:02:e5:
         cf:ed:d0:6e:d6:45:73:99:cc:51:da:d5:53:37:14:64:7a:a3:
         87:05:ab:29:5f:e6:ab:ee:95:5f:0f:cd:6c:fb:f3:1d:58:9b:
         65:e3:c3:ab:32:fc:4f:73:bc:c9:31:92:89:b7:5a:10:dd:81:
         f4:3b:3a:e5:66:88:ee:37:66:75:d4:ee:89:38:77:89:a0:bc:
         39:55:64:c8:61:e6:1c:c2:58:c7:32:9c:54:21:c6:09:84:c1:
         aa:90:91:3b:13:b4:f6:7f:7e:68:03:e2:6b:b3:f9:cd:87:2a:
         24:ab:a4:67:c9:16:ee:da:bc:01:44:b1:ef:dd:a6:43:0f:1f:
         3c:90:16:29:cc:06:f2:de:76:39:78:ba:d9:66:96:1d:51:8f:
         6b:39:b1:ae:27:47:9b:da:3b:8d:0a:69:e5:ac:52:4a:b2:c0:
         bb:d8:86:e3:e2:66:99:b6:d4:eb:2a:05:d8:90:ad:0d:32:f6:
         28:53:ce:77:7f:d2:08:bf:e9:63:9e:35:5b:f7:34:c8:fe:b2:
         7d:86:25:28:2e:6e:06:41:d9:68:36:c4:42:93:33:d9:6f:74:
         c9:fa:e1:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----