Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4e13ffb9-6739-318b-9610-4d33108f9d62.roa
File:                     4e13ffb9-6739-318b-9610-4d33108f9d62.roa (raw, json)
Hash identifier:          tvSPwuu3gimg712cUD+OP5OiubPoKzubp1iB6z2l1M8=
Subject key identifier:   98:28:74:10:BC:1E:83:37:B8:5C:C6:47:61:D9:8B:7E:27:EC:82:AE
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328583AA7AD2D1D882F91A3C03AF380
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4e13ffb9-6739-318b-9610-4d33108f9d62.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     15169
IP address blocks:        104.134.208.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:ad:2d:1d:88:2f:91:a3:c0:3a:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=d3dd8114-4a38-433b-a25d-7891d602713a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0d:b7:7c:59:bf:df:ca:83:d7:41:27:11:68:
                    ef:f8:62:1d:42:95:e0:64:e1:82:29:4a:75:7a:a6:
                    cf:76:4e:43:68:86:5f:4c:ab:96:24:52:7a:4d:c1:
                    ea:6a:da:42:9a:3f:d6:e1:38:e6:c2:9b:25:ce:98:
                    e1:fe:26:d0:d4:40:2b:e8:8a:57:fb:02:4c:b7:6c:
                    5d:e2:74:c9:d3:2e:a8:bd:f3:b9:0a:36:32:92:f5:
                    bc:cd:4c:11:cf:6e:80:f0:cb:c1:24:f5:34:bb:b3:
                    36:5e:13:d8:bf:e1:84:08:0f:19:9c:f6:89:93:7e:
                    2a:6c:ab:f1:7c:42:7d:5c:55:9c:2a:05:6a:c6:fd:
                    25:25:1c:11:e2:c4:af:3b:e6:d6:28:62:83:2e:02:
                    f3:3e:4c:11:7a:44:ca:3e:0b:0c:36:b8:04:e6:7d:
                    65:e8:73:ff:bc:1c:9d:10:14:ad:07:1d:fc:88:7f:
                    21:ca:1b:bc:3b:76:6c:b0:bc:a0:cc:b3:8f:6c:dd:
                    45:4c:3e:25:4e:6a:cd:d2:ee:cc:c8:4f:69:f2:e8:
                    bb:8a:e3:53:58:73:0c:19:b4:68:f6:b1:31:6f:7e:
                    2d:f0:f7:5e:c0:32:8e:06:55:aa:5a:d4:38:d1:c4:
                    b2:ae:c8:94:74:93:76:ed:d4:34:fa:f7:e3:05:f4:
                    99:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:28:74:10:BC:1E:83:37:B8:5C:C6:47:61:D9:8B:7E:27:EC:82:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4e13ffb9-6739-318b-9610-4d33108f9d62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.208.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:ed:31:8a:d4:21:5a:9e:a7:b4:cb:bf:31:42:4c:f5:b0:6d:
         4c:88:49:4e:08:75:2d:46:a7:2e:6d:6b:56:d0:1f:8b:6d:35:
         66:71:34:71:ff:15:a8:e9:7c:17:68:b9:ad:d1:be:25:9c:70:
         10:5b:b0:30:e3:e1:33:4c:5d:d3:51:fa:97:a2:ad:41:d7:40:
         f8:49:b9:1b:c0:0d:56:b9:a2:05:e1:58:50:6d:4c:26:22:94:
         78:ad:09:98:6c:11:4e:3a:de:b8:9e:a0:fb:61:99:fc:6b:85:
         5c:b4:58:9f:6c:e0:ca:4e:54:a8:d8:72:af:9e:11:e3:6a:7e:
         22:70:10:59:62:a5:95:eb:e8:18:3d:52:84:a5:89:20:70:a0:
         00:e3:59:4d:ed:3f:9a:50:8d:70:a4:2e:8e:2c:45:58:53:99:
         80:eb:0f:f1:93:69:01:53:61:4c:1c:58:75:1e:bc:61:2c:19:
         cc:58:d6:85:26:93:4c:7d:d5:5e:86:27:6f:da:96:27:9d:5f:
         0c:fc:62:5a:c1:04:99:70:4b:f3:a8:48:db:5e:ea:0a:93:35:
         e9:82:39:f2:23:7a:c9:0b:ef:e3:7b:37:32:0a:99:ed:4e:d4:
         81:2c:33:2f:e7:54:09:51:a3:0f:2a:14:4f:1c:8e:72:7e:2c:
         08:21:c5:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:36 2023 by rpki-client on console-fra.rpki-client.org