Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/54b4e877-f5fc-3c8d-9ef6-555e0a33286f.roa
File:                     54b4e877-f5fc-3c8d-9ef6-555e0a33286f.roa (raw, json)
Hash identifier:          O1Ip5jehASR2yMw9iEB4khtqCVIe2Gj35o+8pOZvMp8=
Subject key identifier:   31:7E:CC:D4:C5:8C:2A:09:37:8A:64:45:B9:2C:5E:68:39:23:CD:5B
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328583AA7BE60CC167A0E7F01D26540
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/54b4e877-f5fc-3c8d-9ef6-555e0a33286f.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     41264
IP address blocks:        104.132.24.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:be:60:cc:16:7a:0e:7f:01:d2:65:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=fe9cb382-7c2a-4b3f-9dda-17a121d7def2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:6e:37:91:56:b5:e4:26:42:ff:50:42:cd:93:
                    11:25:8e:cb:8d:ca:dc:7d:ba:a7:40:b9:ba:00:2f:
                    36:13:82:b8:85:8f:1e:1c:33:85:b7:fe:8d:04:37:
                    a7:9b:24:d6:44:98:29:af:59:5a:0b:37:72:f2:b4:
                    9c:19:78:92:f0:31:69:a0:bd:a8:93:ef:0a:3d:b6:
                    98:6b:bd:f4:42:d6:cf:9a:42:a0:ee:8f:e4:86:a4:
                    69:48:a6:af:d6:47:d1:9c:59:c0:6b:4a:d1:ea:cf:
                    b2:d6:2e:71:86:63:00:b9:75:9d:5b:b4:ad:46:b9:
                    e5:e3:5d:00:f2:48:a4:b5:72:5f:e8:18:84:bc:30:
                    a9:b4:d6:59:e5:84:b3:94:e1:40:21:0d:d4:c6:8e:
                    10:5d:0e:48:28:e1:6e:ff:98:aa:4a:19:5e:67:95:
                    cd:5a:54:93:61:f5:48:3c:53:27:12:c2:e1:4e:31:
                    5e:43:ad:a3:0e:18:ed:d5:3f:e6:ed:e7:da:e3:2d:
                    17:c6:b9:d6:14:6f:74:ed:33:90:2d:59:4a:72:68:
                    81:4e:51:4b:9d:85:bd:30:3f:90:9f:15:ec:83:95:
                    68:2a:a1:08:f8:60:01:82:ba:2d:ca:05:81:45:50:
                    bb:00:10:40:5e:01:70:e0:e0:dc:97:8f:3b:e9:c7:
                    fb:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:7E:CC:D4:C5:8C:2A:09:37:8A:64:45:B9:2C:5E:68:39:23:CD:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/54b4e877-f5fc-3c8d-9ef6-555e0a33286f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:e6:35:93:16:8b:a7:72:52:3a:b0:bd:0d:2e:b5:3a:fb:ca:
         f1:68:7f:15:5f:74:1b:18:cf:92:39:c7:be:53:bd:fd:c2:53:
         49:8b:0c:3f:fd:18:8c:13:6b:4a:55:7e:82:68:be:81:3e:28:
         0d:d4:7e:ad:67:62:99:f8:7a:ea:66:fb:6b:7c:8b:4a:ef:28:
         ce:74:31:f3:98:c0:a0:22:af:40:5e:8b:2d:6c:1a:14:4b:d4:
         40:4c:1a:a3:65:ef:9b:1c:d3:78:43:ab:d9:f7:59:96:40:35:
         cd:ed:df:56:64:c9:9e:31:75:34:1f:34:46:7a:cc:9b:04:0f:
         b0:6f:fb:b9:54:19:0d:e3:16:e4:f9:67:00:46:be:ed:09:88:
         2a:ad:20:8f:a7:13:4e:91:bc:1d:b8:f5:5e:76:d2:84:ed:b5:
         d6:88:e1:3d:7d:b5:02:00:cb:eb:2b:7d:52:65:02:c6:4a:70:
         85:53:66:77:ab:19:3a:12:50:d8:35:79:01:b8:12:58:10:40:
         5a:02:11:30:51:7f:60:63:97:1e:8f:f6:58:9b:a5:d5:ee:7d:
         79:e5:3b:7b:2f:56:f1:48:92:a5:46:eb:83:5b:72:82:e9:25:
         7c:5b:46:f0:c3:10:36:65:46:5b:8d:df:60:fb:e9:59:e7:52:
         0b:97:6a:7b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnvmDMFnoOfwHSZUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
ZmU5Y2IzODItN2MyYS00YjNmLTlkZGEtMTdhMTIxZDdkZWYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj243kVa15CZC/1BCzZMRJY7LjcrcfbqnQLm6
AC82E4K4hY8eHDOFt/6NBDenmyTWRJgpr1laCzdy8rScGXiS8DFpoL2ok+8KPbaY
a730QtbPmkKg7o/khqRpSKav1kfRnFnAa0rR6s+y1i5xhmMAuXWdW7StRrnl410A
8kiktXJf6BiEvDCptNZZ5YSzlOFAIQ3Uxo4QXQ5IKOFu/5iqShleZ5XNWlSTYfVI
PFMnEsLhTjFeQ62jDhjt1T/m7efa4y0XxrnWFG907TOQLVlKcmiBTlFLnYW9MD+Q
nxXsg5VoKqEI+GABgrotygWBRVC7ABBAXgFw4ODcl4876cf7EwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDF+zNTFjCoJN4pkRbksXmg5I81bMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNTRiNGU4NzctZjVmYy0z
YzhkLTllZjYtNTU1ZTBhMzMyODZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIQYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHzmNZMWi6dyUjqwvQ0utTr7yvFofxVfdBsYz5I5x75Tvf3CU0mLDD/9
GIwTa0pVfoJovoE+KA3Ufq1nYpn4eupm+2t8i0rvKM50MfOYwKAir0Beiy1sGhRL
1EBMGqNl75sc03hDq9n3WZZANc3t31ZkyZ4xdTQfNEZ6zJsED7Bv+7lUGQ3jFuT5
ZwBGvu0JiCqtII+nE06RvB249V520oTttdaI4T19tQIAy+srfVJlAsZKcIVTZner
GToSUNg1eQG4ElgQQFoCETBRf2Bjlx6P9libpdXufXnlO3svVvFIkqVG64NbcoLp
JXxbRvDDEDZlRluN32D76VnnUguXans=
-----END CERTIFICATE-----