Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6f963731-d809-33a2-8faf-d489288cd22e.roa
File:                     6f963731-d809-33a2-8faf-d489288cd22e.roa (raw, json)
Hash identifier:          tM0PiZMijy7w7JtcreVSO6uA7ZYsMBjPx+i4Swbht70=
Subject key identifier:   77:0F:EB:6B:2F:6D:81:0A:D6:98:3C:C6:67:77:9D:36:26:CA:EE:FE
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328583AA7AD13B19A31B7749BD9F000
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6f963731-d809-33a2-8faf-d489288cd22e.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     15169
IP address blocks:        104.134.144.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:ad:13:b1:9a:31:b7:74:9b:d9:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=ca686ee8-d26b-42f3-8b68-785ee4b8cdbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:98:f5:0a:e6:be:7e:08:5d:5e:5b:95:c5:a0:
                    0c:4c:9c:01:e5:a0:3d:6c:31:43:b1:a3:93:23:62:
                    94:f8:b8:03:34:1a:ca:d5:96:58:8c:e2:8f:a8:a6:
                    14:4c:08:90:fb:25:b5:1f:34:9e:ee:26:f6:3d:ad:
                    b6:64:34:21:d3:5e:6d:cb:a0:d9:87:12:1a:c9:53:
                    ed:eb:c9:71:63:2d:82:56:51:95:5b:a5:95:14:2b:
                    e0:5f:ac:17:a7:31:f3:9b:aa:bd:68:c5:0a:ae:da:
                    1b:ba:65:b6:31:8f:c0:b9:0b:9b:8c:13:e7:4f:5b:
                    24:05:31:69:f4:65:c3:75:02:9d:2e:73:f9:f5:f7:
                    8a:9d:ed:37:0b:56:8b:3b:78:b2:83:a0:fa:58:dd:
                    f8:af:a1:4f:a3:89:c7:e0:47:81:72:28:fe:80:e0:
                    74:51:73:57:62:97:98:b3:ef:4a:cf:06:58:ba:2c:
                    71:de:cd:8c:f6:f8:89:2f:b4:e7:9a:55:df:33:f1:
                    5d:e6:89:a4:76:e8:5c:f6:c8:11:f0:42:d0:50:45:
                    f4:c4:d6:53:78:dd:eb:6e:16:a0:18:7d:f4:98:dd:
                    e1:41:12:fc:04:e4:77:c6:06:fe:8e:10:20:f3:e8:
                    77:6a:c8:a2:a9:fd:8e:b5:f1:98:8e:81:b0:e0:4c:
                    3e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:0F:EB:6B:2F:6D:81:0A:D6:98:3C:C6:67:77:9D:36:26:CA:EE:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6f963731-d809-33a2-8faf-d489288cd22e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:cb:ae:29:71:12:0a:df:ca:0a:39:74:0c:01:45:2e:a3:c0:
         66:5a:9c:8f:72:7a:d9:46:5b:45:f2:36:c3:b1:df:b7:07:da:
         6b:75:77:65:22:f9:b7:2e:e5:11:b0:cb:b9:16:fb:92:e1:3b:
         d4:9b:03:4d:43:f9:d6:32:da:63:1e:68:53:81:7b:b8:9d:16:
         d7:0b:24:d0:ba:05:e5:4a:a0:f3:e4:38:e4:c7:4f:ee:b0:34:
         2b:41:ff:30:ee:4f:da:02:40:fd:2a:3b:0d:ad:87:9f:52:87:
         5d:99:8a:6b:b4:98:15:b2:9c:fb:e9:00:c7:fe:6f:47:40:2c:
         c6:29:f8:f6:58:57:79:1e:e5:3e:33:83:32:db:3a:a0:d5:2e:
         19:b0:1c:26:a2:9c:90:f2:a8:93:22:eb:8c:58:70:01:c0:30:
         e8:f3:a1:cd:8b:f3:44:4f:65:d3:bf:5c:e6:a8:c0:d1:21:45:
         5d:62:44:22:99:5a:ce:0d:ec:98:9e:44:0e:26:fa:34:da:4f:
         e6:1b:8d:14:91:5f:1e:a0:a1:34:2d:cd:16:f1:c0:31:04:a6:
         97:7d:9d:95:2d:00:67:50:cb:f3:a8:ae:39:49:03:4d:c6:9f:
         ca:b5:76:44:4e:0d:7a:12:a4:07:7b:d9:16:e4:62:db:97:53:
         0e:8d:74:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----