Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5e27ed4d-bdcb-309d-98e6-02dcd0a94dda.roa
File:                     5e27ed4d-bdcb-309d-98e6-02dcd0a94dda.roa (raw, json)
Hash identifier:          sMHjWEi6vn2+lqATIrZsUFirPu2Ypc88K+yTcD7wfdg=
Subject key identifier:   14:C7:55:59:8A:40:BC:2B:5C:26:E5:E6:33:64:BF:F0:E6:55:FF:62
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328583AA7A50C25E6D6454C0FC5BB00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5e27ed4d-bdcb-309d-98e6-02dcd0a94dda.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     41264
IP address blocks:        104.132.198.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:a5:0c:25:e6:d6:45:4c:0f:c5:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=70582a1c-3619-4de8-b204-a8672eda392f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:af:8a:cd:36:29:2a:c4:30:2e:1a:45:74:fe:
                    cd:f7:c8:4a:43:53:74:5a:dd:73:27:5b:a1:25:27:
                    d2:ac:40:d0:33:a2:99:f7:6f:fc:88:c2:92:2f:e6:
                    cc:4e:d6:ee:18:cb:75:ae:06:81:1c:ff:48:2a:50:
                    f0:cd:ca:17:ae:a5:26:47:66:6c:13:9d:3a:6d:32:
                    71:af:35:7d:0f:13:6b:22:e7:42:db:0a:3f:d2:62:
                    aa:58:bf:40:ec:e2:b9:19:1a:f2:eb:80:30:22:96:
                    fc:a9:ed:7f:6d:e2:f9:61:2d:91:2c:72:44:b6:ac:
                    bf:ae:d8:74:b9:0d:f7:3e:3e:41:43:cc:56:cd:73:
                    33:35:cc:e9:dd:86:18:a5:ad:4e:57:74:7b:c0:1b:
                    99:5a:f0:92:b0:dc:1f:4d:e7:2d:fb:88:a0:23:c5:
                    ea:ff:93:f5:de:c7:de:ca:9b:20:46:f2:92:07:8d:
                    ff:cb:ce:78:b1:a7:95:2b:8d:a2:53:f8:a9:f1:4b:
                    ce:45:bc:3c:7b:9e:c6:54:ff:64:58:47:ef:0f:90:
                    9d:cf:13:d8:de:43:f8:21:53:e1:27:1f:b3:ac:08:
                    28:a6:2a:2e:66:f3:e4:89:53:3c:41:33:09:54:80:
                    5a:4c:52:54:45:3f:d9:93:a1:42:7f:5f:0f:20:8e:
                    54:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:C7:55:59:8A:40:BC:2B:5C:26:E5:E6:33:64:BF:F0:E6:55:FF:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5e27ed4d-bdcb-309d-98e6-02dcd0a94dda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:37:d1:52:9a:07:e5:b3:57:1c:58:93:8c:e3:1a:a5:d2:2d:
         c1:9c:93:16:89:23:0b:fb:bc:9f:8f:fe:6f:c9:64:a9:c8:0a:
         06:e8:74:3d:ca:f4:b4:49:81:fb:cd:66:6b:1f:09:1f:e7:ec:
         4e:47:c6:f4:0e:63:5f:07:cb:b2:c8:4e:18:2f:51:95:b4:e4:
         cd:a8:60:3f:9b:b9:a7:05:3b:eb:75:30:6f:a9:96:ce:1c:01:
         74:36:71:a8:a4:ad:e0:f4:20:3d:c7:2b:4b:61:17:b6:06:48:
         7a:b8:72:97:a0:76:a5:c9:2c:dd:f7:bf:2f:fd:8f:a0:66:f7:
         8a:50:7e:40:4f:34:97:fe:a9:14:dd:4d:b8:d7:14:8f:82:c1:
         42:3e:03:b5:b6:2f:99:56:47:1f:30:97:c0:a4:15:33:47:ae:
         b9:f9:86:da:cc:1f:63:cf:55:c7:bb:6a:a4:16:21:1a:84:4e:
         a0:5c:ef:45:0e:13:ba:a3:c5:71:d7:8b:03:5b:13:7c:ed:a4:
         2c:8e:26:e3:08:ab:94:a9:c4:d1:e9:53:d1:3f:76:b2:18:a2:
         10:cb:ab:8f:57:b4:1a:9a:9c:32:e6:39:fb:fd:9a:ed:1f:e8:
         46:e9:3a:b6:dd:6b:38:93:3a:ba:c0:d1:ee:a0:8c:61:0c:35:
         5b:24:d8:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:36 2023 by rpki-client on console-fra.rpki-client.org