Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/46347e3f-01fc-327d-b494-cb9476b1820a.roa
File:                     46347e3f-01fc-327d-b494-cb9476b1820a.roa (raw, json)
Hash identifier:          aHLhBMYbsUvrtV1moJvptMr7R1PiFNkT94TBIQLjIgc=
Subject key identifier:   73:26:B1:12:A6:D6:A7:1D:14:11:58:12:A7:9C:A7:A0:81:0D:9D:63
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328583AA7BF45BA1A228F8D33CB0A00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/46347e3f-01fc-327d-b494-cb9476b1820a.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     41264
IP address blocks:        104.133.192.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:bf:45:ba:1a:22:8f:8d:33:cb:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=e8ad4bd1-44a4-4167-828f-119cf8f8d75d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:16:e0:a7:12:c2:d0:5b:53:f3:73:01:44:cb:
                    cc:4d:13:e7:b9:54:dc:2e:fb:e0:e8:ce:97:25:f0:
                    7d:d0:74:82:10:db:7c:af:93:b3:ab:f7:d4:1d:3e:
                    6c:50:45:f9:37:29:36:2b:3f:87:e7:20:54:9b:06:
                    09:21:e6:26:56:e0:42:98:65:d8:09:86:2f:4f:d1:
                    02:e2:6e:24:c1:f8:1c:33:e5:83:be:8b:a2:7e:40:
                    cb:c1:9e:f0:df:0d:dc:23:93:14:73:51:63:13:77:
                    d1:bb:74:13:b7:6d:d1:c9:68:f2:17:cf:7f:17:aa:
                    9c:d0:60:28:39:01:85:fd:5c:5c:80:c2:63:a4:9a:
                    b0:f2:12:82:95:b3:2c:81:55:61:e5:50:e5:ab:db:
                    d6:f1:0e:00:51:0f:32:55:8c:4b:b4:4b:2c:ef:22:
                    f9:4c:17:0d:b3:e9:69:95:50:94:61:55:79:f9:48:
                    66:bb:f4:7c:ba:04:d3:f0:b6:e4:48:99:90:57:c0:
                    8f:aa:e2:77:88:e7:01:72:08:e6:31:0f:bd:36:5e:
                    be:60:51:04:58:07:c8:e9:5a:da:54:6c:ac:3d:cd:
                    c2:22:24:66:8d:71:e6:41:d6:85:17:18:c7:bc:e8:
                    95:ee:52:86:d3:09:70:5c:62:38:8c:7e:ca:a7:94:
                    c7:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:26:B1:12:A6:D6:A7:1D:14:11:58:12:A7:9C:A7:A0:81:0D:9D:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/46347e3f-01fc-327d-b494-cb9476b1820a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:3b:dd:5d:22:b2:79:92:c5:40:af:9e:f9:d3:d8:01:70:23:
         31:ad:ce:e3:14:5e:80:02:91:ec:c8:c1:bc:b3:0e:ea:69:ed:
         17:dc:ff:b2:16:87:e7:54:2e:fd:d3:4f:2b:fc:6d:9c:e6:95:
         49:16:9a:7e:d8:06:f0:f1:95:47:f9:68:98:39:e3:3a:b0:c0:
         5f:39:d5:62:68:09:36:a6:09:3b:44:63:22:e0:34:52:f1:40:
         26:18:b9:6b:17:fe:30:08:64:10:4a:45:f8:80:c5:7e:1b:bf:
         40:1e:64:be:e5:67:d6:5d:4d:0a:36:25:ca:39:ac:d2:f4:de:
         51:dc:e4:5d:31:ab:b4:e0:fe:79:7f:9a:94:5d:8a:b3:3c:75:
         56:35:30:e3:18:eb:f1:d9:33:f2:a5:9f:db:3a:90:48:f8:9a:
         76:db:9f:4d:75:c0:dc:fa:c5:16:97:f5:45:eb:cf:54:66:42:
         80:98:58:c1:b4:82:96:e7:54:74:31:c7:25:9a:2c:a2:83:96:
         17:12:13:50:99:5d:8b:cd:2a:28:35:57:16:cd:d5:72:d0:57:
         7f:52:91:90:c4:e5:5d:9e:f4:a1:e8:87:94:64:25:ca:84:df:
         bd:ae:66:c4:f3:fa:8b:1e:3a:42:53:9b:ea:c8:79:50:e9:30:
         c0:33:c4:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----