Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5f5a2cb7-b939-37e2-8ed7-d09d7c9ab259.roa
File:                     5f5a2cb7-b939-37e2-8ed7-d09d7c9ab259.roa (raw, json)
Hash identifier:          MpTHtYb3BjpyjxsRo2dBBC2XUfvo4qFTKvVMdXSMoBs=
Subject key identifier:   26:DD:83:F8:3A:A4:13:D2:7A:15:E9:29:B0:4F:50:F2:11:A4:8D:9C
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328583AA7A012FB37A8AE28D710F480
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5f5a2cb7-b939-37e2-8ed7-d09d7c9ab259.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     15169
IP address blocks:        104.134.184.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:a0:12:fb:37:a8:ae:28:d7:10:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=2e1ce2a9-df18-4c6a-a0b7-226883d59342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:96:33:1c:76:08:0b:b7:8f:4b:24:34:a9:8c:
                    95:15:da:0e:c2:8f:7f:1c:3c:c4:25:69:ef:45:8f:
                    df:7b:06:52:03:73:0e:0d:70:15:b5:79:0b:8e:55:
                    5d:89:e4:67:6d:38:47:a0:9c:93:ef:67:d6:e6:b9:
                    e1:9e:8f:53:c4:45:57:34:bf:b9:13:c6:d0:b1:19:
                    fc:97:b5:42:9f:8c:a0:75:ee:5c:8e:30:31:92:a6:
                    80:73:c8:6a:ec:30:12:21:80:41:d4:89:a0:a5:73:
                    57:7a:c5:80:07:71:af:20:7f:60:eb:32:83:e1:be:
                    e0:ab:78:b7:89:93:81:c8:83:e2:3a:f5:a3:89:73:
                    36:11:e0:c4:d2:53:d4:68:bb:05:ff:a8:c4:d6:a0:
                    ac:73:79:7f:9f:05:4c:d9:a5:80:59:56:45:94:e4:
                    8b:7d:17:f2:68:dd:1f:ba:09:b1:69:10:43:22:97:
                    41:6d:4a:47:9c:9a:37:4c:65:38:4e:fa:93:a6:4e:
                    dd:c4:42:8e:7f:20:1b:9d:28:ab:bf:df:72:2a:13:
                    73:85:1c:6c:26:5e:8b:5f:f3:7a:ff:de:61:af:63:
                    42:ee:f7:47:9d:15:cf:ae:be:94:a8:4d:9d:50:e4:
                    60:4b:11:dd:74:91:76:61:4b:3c:62:37:e4:fe:88:
                    88:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:DD:83:F8:3A:A4:13:D2:7A:15:E9:29:B0:4F:50:F2:11:A4:8D:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5f5a2cb7-b939-37e2-8ed7-d09d7c9ab259.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:73:5c:da:51:16:ec:3f:9d:a8:ea:63:a5:33:fa:00:43:f4:
         97:c4:76:0a:f8:67:85:f2:72:82:0a:59:6c:9b:4b:78:bb:55:
         89:87:52:27:bb:2f:81:56:28:d2:51:55:0d:82:0a:27:88:d5:
         71:29:9f:b0:49:22:fa:34:96:17:b0:16:22:c1:88:c3:1b:33:
         30:93:d3:7a:84:da:11:fe:c0:fb:33:3d:6b:9e:28:17:41:20:
         6e:48:3e:7c:e2:03:3f:19:33:fc:f1:ed:73:58:be:3f:50:20:
         79:fc:18:15:15:8f:f6:f2:d1:8b:d3:fe:a8:38:7d:8d:b0:d9:
         c7:d3:c4:f5:80:e9:9e:bc:2e:b7:08:c7:6e:87:04:46:24:85:
         0a:bd:31:18:3a:d0:20:e3:a0:1d:eb:fd:0b:ae:a2:02:45:c6:
         cd:a5:6f:3b:03:f8:33:7e:c8:9c:ca:84:f7:3f:26:53:98:20:
         31:2e:fa:61:13:47:4a:f2:43:5c:d6:e9:4b:f8:33:73:5c:c2:
         fa:1c:6d:84:fd:73:aa:a4:f6:ef:18:a6:54:b0:02:34:eb:c5:
         af:9d:4d:24:4e:57:09:d4:1f:d6:9d:dd:78:78:8a:db:60:4f:
         cd:eb:6f:7a:d3:99:10:ad:b7:0c:11:3f:a5:8e:81:e5:ff:aa:
         f1:b3:07:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:36 2023 by rpki-client on console-fra.rpki-client.org