Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4dc1cdf0-7c69-30a0-8454-b9e1f087f081.roa
File:                     4dc1cdf0-7c69-30a0-8454-b9e1f087f081.roa (raw, json)
Hash identifier:          nzgcFVPnklWEuIRsiH6byQ8nQrlRhvvhF4HDKP68V+k=
Subject key identifier:   EF:1F:75:C2:8A:C0:FA:29:64:3B:C6:22:5D:18:B1:EF:D9:CA:FA:89
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328583AA7A1382A2A12827B7D7389E0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4dc1cdf0-7c69-30a0-8454-b9e1f087f081.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     395973
IP address blocks:        104.134.185.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:a1:38:2a:2a:12:82:7b:7d:73:89:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=b5441340-0370-4891-afaf-303f1cdd73a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:1a:c0:3b:28:d1:31:de:dc:7f:ff:c7:7a:4f:
                    18:cf:54:df:82:e4:67:63:84:45:34:29:48:66:ca:
                    a9:69:72:ce:ba:31:21:a9:42:d6:a6:9c:85:7b:5a:
                    c4:f6:70:36:ed:0f:b8:5e:ad:04:5a:22:b5:c8:dd:
                    57:09:a0:dd:d8:c9:69:7c:a1:0d:59:66:7a:ca:5d:
                    3d:43:1e:6b:98:5e:f3:76:e0:b7:82:ec:13:c1:e7:
                    53:ca:bb:31:66:ef:06:de:5c:ec:a5:ca:61:af:4f:
                    bb:0e:ef:8b:5d:e6:74:b0:c4:4d:7e:49:15:39:f7:
                    75:49:1a:e3:cf:00:d2:d3:d7:87:69:f5:b4:a0:53:
                    55:9e:c2:a7:38:3a:ec:06:39:ef:d9:83:8f:09:97:
                    70:7c:eb:77:df:83:da:26:94:3c:cd:f8:cd:07:73:
                    e9:99:d4:99:ae:c5:79:66:de:0f:4e:55:3e:d4:95:
                    78:42:a8:1f:6e:86:97:eb:97:6b:7b:75:14:50:8c:
                    f1:b1:a9:d1:62:41:cc:33:66:4e:cb:b2:31:f2:5a:
                    0c:86:cc:ba:88:d9:31:92:0d:9d:37:ed:93:b8:92:
                    3d:fb:ca:8e:95:d5:2c:03:a1:fe:ed:02:a6:82:8d:
                    42:ee:51:6b:a5:02:2a:b1:1c:79:4d:5b:96:57:e2:
                    6e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:1F:75:C2:8A:C0:FA:29:64:3B:C6:22:5D:18:B1:EF:D9:CA:FA:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4dc1cdf0-7c69-30a0-8454-b9e1f087f081.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:3b:11:e9:6e:6a:29:bf:13:cb:c1:51:59:70:2d:6d:b7:3b:
         e7:d2:41:a2:f9:d8:4a:05:cf:6c:7a:3f:ca:38:11:b0:c2:47:
         27:76:98:0f:15:e8:e8:d3:60:e0:88:3d:44:d8:41:2f:bf:52:
         d0:a9:8a:aa:f3:80:dd:f6:3a:64:45:df:c1:43:e4:85:4c:22:
         36:a0:ba:7b:c0:1e:34:22:a0:4f:72:f3:a4:14:95:77:37:08:
         10:30:e6:7e:53:c7:f6:14:97:6a:2c:15:d2:d0:3f:a5:ef:74:
         56:fb:28:9b:0c:2f:e7:bb:29:75:31:b6:d4:79:02:6c:54:0d:
         02:d9:1b:4f:56:f4:ab:ff:73:b8:67:0a:ab:73:6c:8c:18:09:
         97:d0:d7:d4:b1:8b:c7:10:2b:9c:9d:32:99:a7:9b:94:53:89:
         64:07:8e:97:bc:fe:45:ba:0d:bc:3d:ee:23:03:37:c9:ed:2b:
         89:a8:8b:87:81:f1:2c:25:af:9a:14:66:f0:30:c3:02:b6:8f:
         47:06:c2:17:e2:58:a0:c7:f6:78:f5:06:40:c8:90:1a:a7:f7:
         6c:fc:11:82:93:b0:b2:39:b7:60:42:4a:89:19:67:71:ed:78:
         9e:aa:12:ed:f9:62:51:02:0e:fd:4a:e9:e3:a1:a6:99:83:8d:
         28:12:56:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:36 2023 by rpki-client on console-fra.rpki-client.org