Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5cb0836a-1e7d-369d-8b51-b913ca4d8750.roa
File:                     5cb0836a-1e7d-369d-8b51-b913ca4d8750.roa (raw, json)
Hash identifier:          gB7Rtf6L7P0ZgoWj9hQKdh0LFdGB3wOJ8J/xIL9wUC8=
Subject key identifier:   21:E7:8E:24:9F:99:37:FA:AB:09:9D:4B:72:A6:9D:F3:D8:8D:38:07
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328583AA7AE1234B988DC77B6F83000
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5cb0836a-1e7d-369d-8b51-b913ca4d8750.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     41264
IP address blocks:        104.132.57.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:ae:12:34:b9:88:dc:77:b6:f8:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=5828b788-9c0a-4a01-bbf3-2886393aecea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:4f:25:da:84:c3:a2:ba:61:90:df:2b:36:50:
                    8c:a2:ea:14:16:89:77:1e:f8:fb:e9:8c:4b:91:26:
                    6a:1e:d1:de:8c:10:b3:d1:e0:82:5f:b8:16:a7:63:
                    5a:d9:4a:73:ab:06:48:56:ed:a7:b1:3c:c0:b3:24:
                    d7:87:86:20:20:d8:ad:29:c3:1c:71:b7:8d:f4:8d:
                    e3:e6:73:46:98:60:fd:63:65:5e:ac:36:70:9b:c7:
                    b9:cf:41:f1:88:17:53:28:4d:93:6b:74:45:2c:fe:
                    36:0a:b4:22:20:95:c9:c6:ed:33:f3:79:26:ab:90:
                    23:30:e8:73:6d:6e:30:88:78:05:97:e9:f3:51:8d:
                    df:78:1f:34:a8:18:a0:ff:ef:2d:ff:8e:2c:5b:76:
                    df:74:f0:d9:3d:6e:b6:eb:e1:5d:93:77:2d:c7:01:
                    b0:9c:e4:16:0b:fc:77:e1:dc:0f:fc:77:f0:3a:67:
                    e2:7b:3f:14:51:b3:ec:51:2a:1a:45:7b:02:45:19:
                    92:48:c9:f9:d4:25:82:88:78:1a:cf:65:a2:09:4d:
                    59:dd:9a:e6:52:f0:97:95:46:ef:48:9c:c2:d2:c9:
                    50:1f:8f:f8:07:ab:9b:97:a8:cc:ac:e1:03:fd:bd:
                    ed:3c:93:7f:8e:0c:34:3a:20:24:ca:ab:72:7b:14:
                    52:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:E7:8E:24:9F:99:37:FA:AB:09:9D:4B:72:A6:9D:F3:D8:8D:38:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5cb0836a-1e7d-369d-8b51-b913ca4d8750.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:28:5c:fd:0e:4a:cb:78:db:19:cf:50:51:88:00:4e:e3:14:
         3b:64:b1:ef:a4:8a:4d:fd:8e:5c:5b:3c:cb:d5:55:5f:f2:1a:
         9f:15:88:75:e7:66:68:69:d9:56:3b:3c:d6:f2:7f:8a:2e:91:
         73:6c:40:28:c5:70:e1:49:d2:97:4b:4c:0d:d2:c7:32:8e:26:
         f5:a2:8e:07:a5:52:58:4a:ef:e6:5c:cf:13:14:10:8c:2b:17:
         3e:87:11:f9:97:ca:9b:46:bc:35:8c:3c:1c:7f:09:9d:be:10:
         c5:db:e7:75:eb:80:ed:64:c5:fe:e1:73:e8:74:98:be:b4:08:
         95:79:4f:85:3d:99:61:62:80:5e:a6:be:db:c4:3b:77:a3:28:
         21:f7:1a:75:9b:27:f6:9d:1c:52:c3:da:87:2a:d0:c3:9c:3a:
         c5:18:21:e8:16:43:71:d4:cf:55:0f:92:f6:9e:2a:73:8e:d1:
         22:ce:f2:85:e0:d1:af:5d:4a:b5:bd:cc:ee:ab:f7:fa:05:87:
         b3:e7:9c:8c:eb:cd:4a:c8:75:c6:e5:f0:30:b6:5e:0d:80:e8:
         4b:18:95:70:9d:78:37:18:25:4a:25:a9:54:71:55:3b:66:97:
         2b:e2:4b:43:1e:f4:c4:65:ff:19:a7:22:42:37:a7:6c:7f:44:
         e8:40:17:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:36 2023 by rpki-client on console-fra.rpki-client.org