Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/23675eb1-156a-3468-bf1f-f07c1be9044d.roa
File:                     23675eb1-156a-3468-bf1f-f07c1be9044d.roa (raw, json)
Hash identifier:          6JTbuSTLDsb4iNRb7BGnrTnx8j9WELO3rpIaVNmRcLo=
Subject key identifier:   29:C2:C0:1C:3C:45:CE:24:AA:9C:36:74:69:D3:12:ED:59:33:3B:62
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328583AA7B65851E281D2641091A000
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/23675eb1-156a-3468-bf1f-f07c1be9044d.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     15169
IP address blocks:        104.134.168.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:b6:58:51:e2:81:d2:64:10:91:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=4e3cdbe4-bf6c-42ef-9c37-5cf5bd4914de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c4:c2:ca:76:f9:1e:5c:51:b5:80:51:99:c6:
                    24:30:c8:4e:0f:35:f0:1a:93:52:35:0e:75:c3:5a:
                    a4:e9:4e:21:9c:5b:34:32:1f:a9:5f:c3:bc:12:2d:
                    54:80:91:eb:bf:d9:d5:36:a3:3d:f5:27:9e:a1:78:
                    59:eb:c2:a7:8d:4b:a1:8c:d7:4e:56:39:cd:cd:9b:
                    d2:e2:7e:71:2e:5a:38:ea:7e:89:6f:2e:01:9b:53:
                    70:4a:e1:be:ba:a9:95:f9:df:14:a7:c0:e7:bf:66:
                    71:9e:cc:60:56:0c:36:0f:fc:23:d8:be:29:40:f9:
                    80:79:6f:10:63:1d:88:fc:65:dd:90:4a:a7:c2:36:
                    c9:56:cf:b2:9a:68:e3:01:1e:c4:2c:91:e0:1d:9e:
                    7f:17:ad:b7:a2:27:1f:b4:2d:77:d1:35:f6:e8:b4:
                    09:0f:ea:5b:70:e2:a9:19:73:9d:7b:3b:5f:79:b5:
                    e0:eb:5c:54:18:69:ae:45:89:22:fd:25:23:a9:57:
                    10:03:36:fa:65:8a:dd:60:c7:5f:39:80:82:93:7b:
                    01:aa:b7:2d:40:5b:bc:b5:4b:99:51:31:a6:a2:b7:
                    6a:bc:09:6b:ba:c9:91:00:af:a0:f5:1a:19:dc:1f:
                    b0:da:a1:f4:1f:19:1c:05:04:ff:23:77:c8:fa:31:
                    f8:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:C2:C0:1C:3C:45:CE:24:AA:9C:36:74:69:D3:12:ED:59:33:3B:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/23675eb1-156a-3468-bf1f-f07c1be9044d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.168.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:08:f4:78:21:5d:01:57:be:45:12:f6:44:2b:e6:93:d1:7a:
         40:9b:86:b9:88:4e:38:4d:c8:74:e8:51:aa:ac:c1:3d:3b:5f:
         73:ca:14:94:6b:27:84:8b:76:fc:b1:9c:ab:f7:fb:a7:ba:59:
         48:5e:22:be:39:e3:16:62:6a:d0:18:2a:d3:3a:da:1b:8d:2a:
         ac:48:de:f8:18:07:82:34:99:a9:88:82:4c:b8:d2:b1:e1:19:
         c2:04:ae:02:d9:c4:58:e6:a7:10:e0:69:60:21:bf:3e:32:eb:
         d2:ca:14:a3:1c:d3:35:de:e3:7b:a1:97:c8:b2:e4:1b:02:e5:
         69:d2:0c:9c:a0:c7:3a:67:65:cf:d6:c8:32:1e:97:fb:e3:eb:
         5b:51:e4:63:4b:94:6d:2e:b9:6c:6a:5a:0b:9a:10:8d:77:ab:
         8a:ae:23:04:45:7d:81:91:a9:90:35:e3:53:74:6f:a0:f7:23:
         37:31:a0:ee:ff:37:d8:47:05:04:a0:75:87:3a:59:b2:c7:a7:
         78:94:12:c3:7a:97:17:c8:07:23:e9:7f:4c:fb:b4:9b:c7:c8:
         cf:9c:89:ed:50:4b:4b:0d:ce:02:c5:5e:e3:6d:5d:45:1d:60:
         60:83:53:77:44:1d:11:16:fc:66:f9:4b:88:64:12:f5:df:71:
         52:0f:2b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----