Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/56231496-d76f-39e0-b4bd-b2027950a88c.roa
File:                     56231496-d76f-39e0-b4bd-b2027950a88c.roa (raw, json)
Hash identifier:          +cpCoZHUL0Ir9K6TqH1UBta1u9I+6pb+VMBUdH8KXok=
Subject key identifier:   4A:21:8A:E1:A2:81:CB:9E:58:43:85:DE:28:E6:EB:CB:76:8A:CD:8C
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328583AA79F0DC70A75069144B46180
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/56231496-d76f-39e0-b4bd-b2027950a88c.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     41264
IP address blocks:        104.133.37.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:9f:0d:c7:0a:75:06:91:44:b4:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=0d0c3c5a-2465-4399-adbd-ec2f34d431ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b9:aa:a4:04:7e:98:8c:12:da:08:43:48:26:
                    61:1d:98:e5:0d:07:76:c2:d9:e8:27:19:74:b6:d3:
                    f5:eb:3c:34:67:2d:4f:e3:c3:8f:47:1a:e2:ca:c0:
                    b4:df:2d:c3:ea:bc:c0:8b:d9:6f:fb:c3:26:63:18:
                    56:03:ce:d0:8a:2d:75:2e:d7:e3:a6:7e:fc:19:6e:
                    2b:d6:8d:31:2d:c9:ff:2b:c5:78:ef:1b:be:21:6d:
                    c3:b9:f0:44:41:a7:91:95:fd:1e:eb:a7:d7:26:78:
                    ac:01:8c:60:93:b4:a0:89:a3:ca:b9:75:a1:77:df:
                    fc:52:5a:02:7c:23:9f:a1:78:cc:0b:6d:50:f1:db:
                    ae:f8:12:f1:78:5a:d4:e2:d0:eb:c1:06:35:63:2e:
                    d2:d1:0f:b0:b5:ae:62:ed:20:c4:3b:70:ed:c6:69:
                    cd:67:c0:f6:f9:0a:5f:3a:d8:6e:ae:6f:8e:35:20:
                    6a:05:78:d0:8d:d3:8e:82:95:ca:ca:74:93:db:fb:
                    a2:e1:79:ad:73:c3:17:a1:20:c7:f5:05:ff:45:d9:
                    6c:17:ea:3f:02:c3:2b:c0:35:fd:33:64:8b:3b:a1:
                    72:b1:9f:d9:ad:ab:e9:67:b4:5a:7b:93:db:cf:cb:
                    d4:e0:a9:79:10:e1:dc:0c:88:ec:2a:a9:32:e8:af:
                    8b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:21:8A:E1:A2:81:CB:9E:58:43:85:DE:28:E6:EB:CB:76:8A:CD:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/56231496-d76f-39e0-b4bd-b2027950a88c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:1d:bd:ca:5d:8c:ff:00:7b:ad:8f:54:07:11:22:8e:7f:8c:
         99:ba:7d:63:10:e0:f7:76:c1:a3:78:1d:31:0a:b4:e6:29:be:
         fb:77:ad:ad:5f:16:aa:e8:d7:5a:58:2c:2c:f0:d9:2e:a9:de:
         4c:24:af:3e:2b:57:c6:be:ee:60:ee:e8:b2:84:16:42:b8:79:
         fa:cb:a6:67:78:ff:58:71:83:1c:d3:8c:86:ea:cf:df:70:8b:
         21:50:7f:b9:6f:21:34:c1:3b:12:b2:a1:b4:32:a9:64:69:2f:
         90:b1:0c:9b:8a:64:99:40:2a:47:d2:b0:87:47:fd:16:e3:99:
         bf:83:16:5a:61:51:0d:7a:61:16:ef:25:b6:10:c7:86:6a:fd:
         08:40:b1:64:34:3f:5a:24:81:30:51:30:23:69:eb:93:54:f7:
         4c:93:f4:2d:c1:80:2f:17:86:fc:67:67:8e:be:68:77:a4:5f:
         5e:78:43:e5:4b:a9:3e:f4:99:26:64:9a:8c:c0:47:6c:70:70:
         b9:72:93:23:db:c2:84:82:43:c6:60:8a:c8:fb:8c:23:ca:7d:
         b1:da:09:0e:bf:42:89:19:c0:4d:52:5f:ea:6f:6a:31:da:53:
         37:10:0d:8d:44:34:67:da:8a:b6:b8:60:68:a5:da:9c:84:be:
         ab:72:41:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----