Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/50394c62-83f8-3884-a994-6d0a552c422b.roa
File:                     50394c62-83f8-3884-a994-6d0a552c422b.roa (raw, json)
Hash identifier:          2cjIjX1SUnmQupUuU4FufnRTT4GJ2WCR5Hr5+Yu41sI=
Subject key identifier:   AE:65:EA:A5:0C:C6:04:82:00:63:0B:9C:1D:46:CA:FA:2A:92:90:D5
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328583AA7BCA9869ED51E72723DBA00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/50394c62-83f8-3884-a994-6d0a552c422b.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     41264
IP address blocks:        104.132.88.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:bc:a9:86:9e:d5:1e:72:72:3d:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=d2335914-a60d-43a2-905b-6fd8b37f43d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:42:2d:ce:ba:1a:f7:7a:a0:2b:fa:79:63:a2:
                    a8:83:20:5a:25:e4:6e:b5:93:88:fe:5f:79:56:2e:
                    0a:fd:a7:a7:f9:54:23:6c:00:75:0a:1d:1a:3e:9c:
                    3b:bc:37:ff:72:f9:7b:ec:0e:92:5a:b7:5a:ce:9e:
                    58:0f:f8:0d:3a:9e:58:10:03:96:2f:06:f5:ad:88:
                    4d:2f:21:8d:5a:fc:f7:30:12:ce:b0:1c:c8:3a:59:
                    4b:45:c2:9f:e2:1d:0f:01:df:89:6b:84:4c:51:6f:
                    fa:9a:33:17:f2:ad:00:51:76:45:6f:06:58:91:6b:
                    82:8a:3a:6d:bd:99:17:47:b7:c0:f7:66:71:cf:48:
                    a3:96:ff:1b:82:1a:65:d1:78:25:de:e1:b4:94:98:
                    fe:f3:1d:71:83:bb:d3:1c:e3:92:1a:d8:20:b7:19:
                    36:e6:da:21:83:cd:3a:68:c9:9d:73:02:38:74:1b:
                    5b:c6:9a:ca:ff:b4:8e:36:b2:bf:ce:b6:76:f7:bf:
                    f4:43:ab:b0:0a:8a:d5:96:c4:57:03:14:32:8f:97:
                    80:ae:1c:29:e0:49:8d:8e:49:3b:79:88:64:9b:fb:
                    cf:3e:b2:75:ba:d8:f1:b4:28:89:a0:b0:15:d0:e8:
                    40:f4:f6:56:65:66:bb:05:46:19:03:7d:91:9b:a3:
                    29:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:65:EA:A5:0C:C6:04:82:00:63:0B:9C:1D:46:CA:FA:2A:92:90:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/50394c62-83f8-3884-a994-6d0a552c422b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:47:8e:7a:15:d3:aa:64:54:90:ae:0d:5d:15:f6:2b:f2:7d:
         7b:6e:66:cb:5b:18:8b:94:68:5e:6f:19:c8:16:4c:95:60:ec:
         a8:71:9d:ec:ff:78:cb:34:b7:98:0e:de:2a:77:bf:2f:48:57:
         dc:2b:6f:41:c1:03:88:78:f5:99:62:fb:20:d8:e7:d9:57:bb:
         fd:53:e4:ea:12:96:4c:b0:2b:cb:dc:6a:eb:55:8f:24:f0:50:
         9b:3b:5e:1b:db:8f:aa:1b:e3:f6:ea:48:ad:68:a1:59:ca:49:
         bc:cf:ed:87:23:58:0f:62:f3:96:0c:08:e5:94:5d:55:3b:86:
         73:85:8e:2c:e1:fc:0f:76:21:20:c9:8d:8c:02:61:0b:a5:38:
         f2:c5:14:b3:ec:30:0d:74:e8:0d:6a:49:c0:54:88:96:0c:74:
         b1:0d:59:27:6b:b3:f4:49:33:13:10:06:cc:70:48:b1:0d:6f:
         31:24:97:76:56:ae:7f:7a:e4:a8:b4:f7:b6:5b:3a:83:7f:ed:
         df:a2:64:0c:6b:7e:21:86:2e:d4:a7:c2:ad:89:f8:af:28:81:
         18:2c:d5:51:1b:9e:41:b7:0b:fe:84:25:48:25:56:ee:80:09:
         92:75:53:f9:5c:7d:ac:f0:8e:8d:14:cf:8e:4c:d6:81:1b:23:
         2b:92:bb:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----