Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/38ec1415-a2b7-3c7c-a6f9-efa2059b9050.roa
File:                     38ec1415-a2b7-3c7c-a6f9-efa2059b9050.roa (raw, json)
Hash identifier:          ySxGoCYh60BEpY7wiih5PT25fL8PiIzk3/TJ0ALzqx4=
Subject key identifier:   4D:82:CB:17:13:57:2D:B3:49:8F:DB:1A:1E:8B:B2:E2:3D:5D:03:6F
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328583C2A5F63C3AF8E285DD7AD5E00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/38ec1415-a2b7-3c7c-a6f9-efa2059b9050.roa
Signing time:             Mon 06 Dec 2021 05:00:00 +0000
ROA not before:           Mon 06 Dec 2021 05:00:00 +0000
ROA not after:            Sat 09 Mar 2024 05:00:00 +0000
asID:                     395973
IP address blocks:        104.134.148.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:2a:5f:63:c3:af:8e:28:5d:d7:ad:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Dec  6 05:00:00 2021 GMT
            Not After : Mar  9 05:00:00 2024 GMT
        Subject: CN=041a0285-e0b1-40f9-adbc-95bf45546c59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:69:cb:10:84:29:28:bf:7d:e9:94:24:0c:08:
                    5d:79:f6:67:f1:33:54:1c:79:81:e8:03:99:66:2c:
                    cf:62:85:3b:da:5c:59:b5:a7:3d:05:a1:c9:7d:2f:
                    5d:53:d3:5e:79:10:e5:b6:f8:23:73:73:2e:48:35:
                    83:04:0d:d2:f0:34:d6:ff:37:57:b1:bc:e1:dd:a3:
                    12:90:3d:36:1f:48:dd:8a:9e:28:25:cd:3b:1d:bc:
                    9a:2e:a1:d2:6d:aa:75:6b:1a:1c:1b:08:55:28:a8:
                    7a:12:d9:2a:30:89:f0:2b:68:02:e9:5e:c5:5a:db:
                    61:0e:c4:42:58:8a:40:d1:f6:b8:61:56:e0:da:99:
                    6e:6f:50:e4:a4:16:66:3b:dc:c8:8f:9c:a0:31:ab:
                    aa:86:38:37:22:62:68:59:0e:c2:83:dc:e9:fe:fd:
                    1a:28:5e:f3:6d:65:df:c9:02:db:da:59:81:ba:a4:
                    44:52:6c:a3:ae:17:33:0d:fc:3a:ad:f4:9b:09:9d:
                    e8:03:6a:27:78:ce:2c:6e:19:6a:3c:ea:b9:de:27:
                    b7:41:63:fb:ca:19:fc:24:a7:95:c4:4f:77:95:b1:
                    6e:39:50:c7:1e:86:f0:40:6d:a9:18:0d:11:56:21:
                    ec:89:a2:eb:9e:c3:cb:7e:ed:25:63:44:da:b8:86:
                    81:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:82:CB:17:13:57:2D:B3:49:8F:DB:1A:1E:8B:B2:E2:3D:5D:03:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/38ec1415-a2b7-3c7c-a6f9-efa2059b9050.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.148.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:2e:52:ba:e9:9e:62:d2:1b:d7:4a:86:35:0e:4b:2e:22:34:
         21:dd:6b:52:85:9d:f9:67:7d:95:1c:f9:c8:a6:02:e6:de:48:
         a2:97:56:d0:3f:3d:db:cc:af:60:b8:f2:49:d4:06:8d:93:ef:
         df:70:03:a1:99:8e:07:cb:aa:a7:b5:77:6d:95:27:b0:41:ba:
         1d:08:a3:d8:28:37:32:9a:bf:02:d6:7e:d3:23:d3:44:25:8f:
         47:4d:51:93:09:fc:fd:9f:ae:55:9c:74:2b:48:d9:7a:c5:bc:
         9e:4e:83:74:6e:f9:db:e9:c2:f9:a1:45:21:0f:74:43:b5:33:
         8e:b1:dc:3e:96:05:50:9d:33:cc:55:b3:db:02:3f:a2:80:94:
         3f:27:5b:f6:cb:97:38:b8:5d:92:21:f4:ec:aa:c2:83:8e:de:
         e6:48:7b:42:b6:f6:af:23:46:fb:7a:2a:1e:a6:87:7e:42:d5:
         89:9a:80:fa:e5:b7:dc:77:1f:7b:fb:42:ed:02:cc:4e:6c:0c:
         19:f3:6e:47:f8:06:74:f1:fb:a6:55:02:9d:b1:e6:e8:ea:0d:
         9d:07:6d:de:3a:d7:00:6d:80:b8:21:52:66:08:8c:71:a7:ad:
         7f:91:1c:48:5e:17:8c:b7:d6:e0:2d:06:0d:7e:80:98:b7:01:
         d9:10:f8:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----