Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/27f81ecf-7edc-3f3c-ab6a-423b392bbf9b.roa
File:                     27f81ecf-7edc-3f3c-ab6a-423b392bbf9b.roa (raw, json)
Hash identifier:          +7mm0wMxozdWH+9nPZzirwzGMDJ2BX65d71zw2Oq9Hw=
Subject key identifier:   2C:8D:F9:FC:1B:5A:01:3D:44:ED:91:65:6A:54:9B:D8:63:18:BD:03
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328583AA7B4873A0E76A8FC395F1B80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/27f81ecf-7edc-3f3c-ab6a-423b392bbf9b.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     15169
IP address blocks:        104.134.131.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:b4:87:3a:0e:76:a8:fc:39:5f:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=2f3c1e05-245f-4b13-8861-3d1f1534c467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:78:41:17:4f:1e:f4:56:1e:31:04:75:11:00:
                    e0:e6:75:75:b8:e3:9d:14:ce:67:d7:9c:48:fb:4c:
                    ec:69:d8:c6:28:fd:c0:eb:f8:4e:d9:27:31:a3:43:
                    75:f4:cd:3c:03:3f:37:6c:0f:aa:ab:d7:7c:a5:06:
                    44:bb:25:b7:2c:7d:96:06:ca:1e:14:50:20:ed:29:
                    dc:46:54:2f:ab:76:79:89:f8:9d:4a:bd:b8:fb:a3:
                    2a:d7:18:e8:e6:48:da:39:31:e7:6d:53:4f:76:4e:
                    2f:17:6e:4f:13:bb:d6:83:3c:27:7d:dd:da:69:8a:
                    9a:d3:d6:0f:b0:d2:2a:d1:2a:59:2e:59:14:72:eb:
                    64:13:18:0a:e7:65:9c:84:8e:7b:25:a0:2a:eb:4f:
                    0a:58:7c:65:12:17:4d:fa:75:40:7b:26:21:ef:39:
                    ed:93:72:c8:5e:f0:c0:2f:01:00:a2:14:54:63:46:
                    57:23:1a:8c:9f:7f:db:e2:b4:e1:28:db:90:40:49:
                    85:75:77:33:52:8d:1a:70:38:7d:6d:34:3e:a5:85:
                    00:57:8a:20:3e:7a:51:8a:e6:ab:68:a1:6c:02:ef:
                    db:bb:f3:2c:0f:b6:93:c0:47:d5:59:09:64:b8:16:
                    28:ef:4d:9f:c6:ce:34:f0:f9:2e:4f:99:f6:92:03:
                    38:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:8D:F9:FC:1B:5A:01:3D:44:ED:91:65:6A:54:9B:D8:63:18:BD:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/27f81ecf-7edc-3f3c-ab6a-423b392bbf9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:b5:82:5d:d9:86:d9:1b:1c:5e:e7:8a:dc:ae:c5:98:52:ae:
         0c:6c:40:a2:2f:ac:fc:63:b8:95:76:6e:0c:d0:89:40:72:f4:
         f6:fb:19:46:50:77:2a:3a:f4:af:2b:6c:2c:95:8d:d3:76:04:
         cb:bb:8d:50:2e:fa:54:15:ce:fc:2e:bc:e5:66:59:f4:51:19:
         82:bd:82:4c:f4:9b:f5:e2:79:51:58:2c:a8:9d:47:56:7c:09:
         55:b9:99:bb:f8:a4:b0:1c:4e:dd:73:48:9e:4c:47:83:a0:59:
         b9:55:e8:a9:2a:6d:81:c0:a1:66:4e:24:02:e0:f6:67:08:f8:
         13:b1:a2:51:7f:5a:04:f4:46:72:a0:3c:42:6a:de:29:f0:c4:
         65:12:9f:16:35:ad:24:98:c7:73:ae:64:64:b6:54:0c:15:1f:
         16:37:01:d5:09:d3:32:6b:76:43:33:0d:f0:de:c1:4a:ac:a0:
         bf:cc:47:ce:c2:2a:a2:6f:f0:4e:b0:4f:2d:21:8d:1f:e7:df:
         63:a5:ec:a3:41:f0:02:b4:71:39:46:b9:af:b0:9f:bb:13:73:
         6e:59:32:53:a2:db:9d:7b:c4:57:34:1e:f8:4c:99:c6:eb:a1:
         82:11:7f:1e:a5:2d:bd:67:e2:73:bc:56:da:d8:0f:fd:f5:c6:
         b8:7b:e7:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:35 2023 by rpki-client on console-fra.rpki-client.org