Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/53760f80-1819-378e-8482-9790b66d1e92.roa
File:                     53760f80-1819-378e-8482-9790b66d1e92.roa (raw, json)
Hash identifier:          +9r7irr0SUjg8pSkMqLjJM6pO4Xoz2bFp4mbCOnCz6U=
Subject key identifier:   A7:0A:A8:E5:CE:52:5F:CA:49:F6:39:D0:AF:24:CD:7A:D4:79:B4:19
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328583AA7A9F9E3F0220AD0F319F1C0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/53760f80-1819-378e-8482-9790b66d1e92.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     15169
IP address blocks:        104.134.182.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:a9:f9:e3:f0:22:0a:d0:f3:19:f1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=38ddc402-50e2-4298-8692-e4e5382b7667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ae:93:e0:06:ab:b5:58:ef:db:0e:4d:ea:2e:
                    f1:83:d3:53:10:4d:c8:39:ba:3f:60:9c:b4:3f:cd:
                    9e:f0:ef:5e:23:bc:b7:f2:a6:e5:fa:cb:4e:be:53:
                    d5:b8:02:17:a5:db:94:c9:0a:ef:94:3a:34:d1:06:
                    c5:88:5d:9b:6f:25:5f:c6:e9:82:b8:13:f7:d6:29:
                    fb:c7:92:b0:d6:68:74:11:91:35:38:51:de:57:2f:
                    77:3a:0e:0e:0d:b9:57:ee:97:8e:93:d2:2f:45:11:
                    75:87:b5:d9:d4:e0:88:4a:b7:bc:f8:f2:e2:ab:f6:
                    3e:23:3c:30:06:44:64:37:93:e6:10:2f:d2:57:37:
                    0e:55:0e:d6:2c:93:b6:54:14:7a:3f:29:b9:b5:8c:
                    b7:e3:75:8b:49:e8:6a:e5:72:2a:12:9a:2b:7a:b5:
                    5d:95:ca:fd:5f:9e:b1:0f:15:24:c6:13:a4:cb:b3:
                    3b:5b:47:a9:fa:26:60:48:75:89:c1:a2:a6:14:7f:
                    42:0a:22:c7:29:f2:10:0c:9a:c3:6e:ed:70:7f:25:
                    b0:8a:c7:ee:09:af:ce:58:2f:19:aa:f9:03:e4:bb:
                    64:b5:33:57:20:69:a7:05:bb:f8:15:4d:1f:a4:6d:
                    3f:6f:10:c2:84:f3:7f:2c:c4:49:7d:f1:6d:8e:02:
                    09:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:0A:A8:E5:CE:52:5F:CA:49:F6:39:D0:AF:24:CD:7A:D4:79:B4:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/53760f80-1819-378e-8482-9790b66d1e92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.182.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:d8:c3:45:d5:04:09:62:97:c3:81:d5:de:cc:92:10:9f:b8:
         90:5e:10:7e:46:f6:a7:ae:74:26:21:74:75:89:fb:f5:4e:01:
         ea:83:9e:1d:e6:1b:59:28:a8:cf:e1:cb:df:ea:2e:11:74:d7:
         f3:38:54:a5:7a:f7:63:31:47:1c:02:38:b5:8d:70:76:ff:0b:
         58:4f:c3:5a:aa:1f:a3:41:0a:fd:c8:fd:0d:ff:83:71:2c:b8:
         10:04:b9:67:32:27:2b:37:97:ff:6a:80:f3:e9:79:d2:d7:1c:
         68:b5:a1:f2:d5:a2:1e:e7:47:af:97:47:2a:bc:e8:81:06:a2:
         c2:91:b6:2f:d0:82:73:4d:76:bc:ad:3f:57:d1:1f:6f:3d:78:
         19:4a:25:d5:e8:83:78:16:15:20:93:10:9e:40:53:8c:58:ee:
         df:9d:aa:83:44:ca:56:ef:90:26:26:81:ca:eb:f3:1b:8f:25:
         d4:6c:bf:73:a3:d7:4c:ce:a3:2b:c3:e0:db:c4:2f:f1:da:41:
         80:0f:4c:5f:b3:d9:7c:43:78:aa:4b:ed:be:75:58:e9:c1:2c:
         26:51:39:88:36:49:ea:7f:b8:ab:09:3c:23:f2:83:65:6f:5c:
         3e:73:14:fa:ca:d3:42:96:78:c1:3a:27:b5:3e:04:02:a1:b5:
         7a:d6:9d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----