Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/55adf20b-c897-33bc-8e28-e0a35fa522a3.roa
File:                     55adf20b-c897-33bc-8e28-e0a35fa522a3.roa (raw, json)
Hash identifier:          C3Zq1tX7PvN3T+OZMxAtlPLAk1+sqOAbi6ZR0zyzQFs=
Subject key identifier:   DC:98:EC:86:40:76:71:4B:40:D4:EC:69:BA:17:28:6E:66:EF:2D:D1
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328583AA7BFF17B63A16BA7658E3500
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/55adf20b-c897-33bc-8e28-e0a35fa522a3.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     395973
IP address blocks:        104.134.164.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:bf:f1:7b:63:a1:6b:a7:65:8e:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=9087f1c4-4e30-43a9-8365-e8fd9fa30416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:4f:9a:40:c9:44:d3:ca:d3:b9:17:62:3a:3c:
                    25:97:44:7b:03:30:d4:e8:b7:9e:bd:07:51:26:7c:
                    c9:fc:95:52:b6:8d:5a:2a:36:0c:0c:d6:71:28:db:
                    98:8e:79:34:c0:70:7f:34:b7:ce:d3:aa:f5:47:77:
                    55:80:4b:94:9b:06:cd:5d:14:48:ea:54:20:d3:95:
                    f7:1c:b4:52:9d:1f:93:56:8a:86:8c:fc:d6:01:44:
                    52:67:14:9f:77:ae:5a:9e:09:2a:7b:a9:17:0e:0e:
                    bf:75:da:57:d5:fb:31:6a:83:08:b3:db:56:81:ea:
                    4c:04:52:d9:c3:9f:e3:de:8d:6f:36:2f:6e:bd:54:
                    2a:13:00:61:e5:ae:36:1f:5f:4b:fd:83:4b:e1:dd:
                    80:bb:58:be:d3:eb:bd:94:ce:6e:d6:9d:73:ac:ed:
                    53:16:cf:6b:84:1a:03:76:b1:1f:65:c2:54:7e:9d:
                    e0:11:ee:38:af:37:d3:84:a8:ad:64:9e:12:04:b7:
                    05:24:95:4e:38:dc:59:7d:ab:36:9b:d9:82:92:ef:
                    bf:32:38:97:8e:53:2a:8f:d6:76:d0:eb:e0:a2:0a:
                    7d:e7:42:42:2c:63:57:41:7d:56:df:dd:ec:ab:b6:
                    ec:fc:19:54:f7:2f:73:59:b2:5b:db:9c:ce:a3:75:
                    d7:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:98:EC:86:40:76:71:4B:40:D4:EC:69:BA:17:28:6E:66:EF:2D:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/55adf20b-c897-33bc-8e28-e0a35fa522a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:9b:e7:67:f5:05:ab:93:6b:31:03:24:ae:4c:40:b3:92:5a:
         5c:75:a5:c0:ca:32:4b:e4:c5:8d:e3:ea:c3:29:48:b3:cd:05:
         06:09:01:35:03:7d:2a:ef:d8:8c:83:f0:2a:6c:eb:a5:08:2e:
         5d:86:b3:28:ea:af:eb:1a:aa:db:3a:42:72:a3:bf:9d:d7:a8:
         65:ea:f7:2a:fa:90:bf:fa:c4:56:ef:85:6f:bc:00:f0:7b:78:
         d4:8d:d5:4d:22:d7:52:0f:ca:4e:45:54:f9:5f:0e:55:34:c8:
         ca:78:c1:9c:ea:25:52:fb:17:a6:17:53:06:82:4b:7f:9d:d9:
         34:66:f9:1f:b9:4e:84:27:51:23:44:14:e2:02:3f:c7:b1:85:
         3e:6e:5f:28:38:f9:4e:7d:48:4a:1c:0d:7c:17:34:2a:74:ac:
         78:a0:81:c0:8e:89:9b:bf:af:dc:d8:c2:6e:27:6c:df:cb:6a:
         aa:e2:d1:a5:45:6f:ab:5c:29:02:dc:d0:59:ca:a4:a2:cc:f7:
         c8:6f:61:a6:9e:f6:e1:94:95:a1:ee:83:8b:7e:7a:1e:50:b5:
         f0:e6:21:90:de:39:17:40:84:44:b8:4d:c9:74:bb:12:ac:20:
         a8:5b:5f:a5:e3:cc:16:66:a6:56:0c:c9:20:b7:1f:25:f1:e0:
         87:4e:c1:b1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnv/F7Y6Frp2WONQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
OTA4N2YxYzQtNGUzMC00M2E5LTgzNjUtZThmZDlmYTMwNDE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0+aQMlE08rTuRdiOjwll0R7AzDU6LeevQdR
JnzJ/JVSto1aKjYMDNZxKNuYjnk0wHB/NLfO06r1R3dVgEuUmwbNXRRI6lQg05X3
HLRSnR+TVoqGjPzWAURSZxSfd65angkqe6kXDg6/ddpX1fsxaoMIs9tWgepMBFLZ
w5/j3o1vNi9uvVQqEwBh5a42H19L/YNL4d2Au1i+0+u9lM5u1p1zrO1TFs9rhBoD
drEfZcJUfp3gEe44rzfThKitZJ4SBLcFJJVOONxZfas2m9mCku+/MjiXjlMqj9Z2
0Ovgogp950JCLGNXQX1W393sq7bs/BlU9y9zWbJb25zOo3XXuQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNyY7IZAdnFLQNTsaboXKG5m7y3RMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNTVhZGYyMGItYzg5Ny0z
M2JjLThlMjgtZTBhMzVmYTUyMmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIakMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADab52f1BauTazEDJK5MQLOSWlx1pcDKMkvkxY3j6sMpSLPNBQYJATUD
fSrv2IyD8Cps66UILl2Gsyjqr+saqts6QnKjv53XqGXq9yr6kL/6xFbvhW+8APB7
eNSN1U0i11IPyk5FVPlfDlU0yMp4wZzqJVL7F6YXUwaCS3+d2TRm+R+5ToQnUSNE
FOICP8exhT5uXyg4+U59SEocDXwXNCp0rHiggcCOiZu/r9zYwm4nbN/Laqri0aVF
b6tcKQLc0FnKpKLM98hvYaae9uGUlaHug4t+eh5QtfDmIZDeORdAhES4Tcl0uxKs
IKhbX6XjzBZmplYMySC3HyXx4IdOwbE=
-----END CERTIFICATE-----