Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/70e07d19-0089-3ddf-befc-a5f670711d97.roa
File:                     70e07d19-0089-3ddf-befc-a5f670711d97.roa (raw, json)
Hash identifier:          M6wDsbelY5w7dQR3ML1YZF73gzBlUuC2eu03wfBXaaA=
Subject key identifier:   DA:4D:AC:89:64:11:F0:F5:ED:0E:3B:D8:7E:BA:20:C9:A2:8A:A5:7C
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328583AA7A453934683A3D4F0A31540
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/70e07d19-0089-3ddf-befc-a5f670711d97.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     41264
IP address blocks:        104.133.218.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:a4:53:93:46:83:a3:d4:f0:a3:15:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=abf8d24c-52d9-44ab-8201-02882c103b14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b1:72:8a:30:d4:68:f8:a9:ed:49:b9:05:88:
                    43:be:3b:ba:49:9f:a8:1e:c2:a7:af:d3:fc:50:27:
                    f6:9c:97:b0:97:dc:ad:b9:a8:d3:e5:2e:df:63:40:
                    6d:e7:b6:b4:ed:26:9e:c6:a6:c9:1d:9f:33:1b:04:
                    f5:67:8c:50:22:69:ed:a9:63:b9:e2:20:38:1f:4a:
                    0a:ff:3d:39:91:2f:03:53:29:fa:23:a6:0d:b9:94:
                    43:fa:95:b2:43:4d:ea:6d:a7:7b:9f:9a:46:c7:8e:
                    0b:0d:1a:4d:d4:dc:7a:02:5f:ef:2a:ab:58:cf:52:
                    59:f2:c6:3f:4f:95:2f:ad:2b:0f:ac:fc:21:9e:56:
                    42:fc:86:bb:17:d3:bb:9a:1d:9d:b1:0c:46:ae:91:
                    6b:e2:4c:ea:a9:fc:c2:1c:99:f5:af:a0:39:a5:35:
                    95:b4:99:14:1b:d6:74:5b:c7:89:44:41:5d:f9:46:
                    6d:64:b7:63:d3:b2:67:b9:c7:0f:bb:bd:5c:e3:61:
                    39:30:af:ee:68:13:d0:87:75:cc:0b:81:d8:a5:a5:
                    3a:1d:b7:a2:5d:c1:0b:f8:bb:a9:0f:f5:59:3a:11:
                    fa:93:8d:40:24:4e:36:fb:61:53:45:f3:56:ac:a0:
                    b2:02:9c:ab:da:2a:e5:5c:4e:6c:d2:30:ba:7a:df:
                    5a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:4D:AC:89:64:11:F0:F5:ED:0E:3B:D8:7E:BA:20:C9:A2:8A:A5:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/70e07d19-0089-3ddf-befc-a5f670711d97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:f2:f9:ce:81:1b:b5:6f:43:d7:da:d0:4d:50:ea:b9:91:57:
         6c:df:e6:1d:10:b6:5b:cb:58:36:ea:ca:86:fc:dd:d3:6c:ed:
         9e:3f:48:52:7a:ac:10:72:04:3f:fd:28:b0:51:51:2e:64:26:
         e3:04:dd:da:a2:f2:d2:37:86:12:b6:ed:d3:18:89:f4:6d:08:
         88:19:fe:d6:ca:f5:3b:f5:49:ce:5b:c3:4c:b4:f3:6c:e1:74:
         09:3e:ab:27:52:33:45:0b:76:48:b7:44:da:18:e6:9e:93:ff:
         65:6f:25:f6:99:d4:1d:b8:08:ed:67:1a:c5:bb:b0:d5:fc:d1:
         27:5e:54:9d:79:14:6c:ba:88:66:13:38:8d:58:6f:f6:cb:97:
         35:b6:9e:a5:69:c6:5c:0a:aa:6d:40:1b:91:e5:f8:34:a6:b8:
         2c:26:77:39:20:48:86:44:12:39:f4:4c:34:13:9c:5a:20:b5:
         da:8e:7b:96:fb:7e:19:3d:86:3b:c1:c1:89:a6:aa:43:6b:fb:
         c1:a0:77:2c:38:e4:2e:34:9d:a7:11:dc:63:3b:8c:c1:9e:cc:
         13:50:ec:18:c9:f1:af:e7:25:86:eb:69:63:30:c1:4f:c2:62:
         4a:62:b4:ed:4a:4f:63:a5:a9:53:db:1e:be:64:f9:fc:8a:e5:
         3c:22:d9:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----