Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/73de3422-46eb-3979-8dca-02ae96c93dcb.roa
File:                     73de3422-46eb-3979-8dca-02ae96c93dcb.roa (raw, json)
Hash identifier:          KzigSqiynv9Ef6a5zd8IBJKewjJgWIE5Dig7QtZbFL8=
Subject key identifier:   25:4E:1A:21:D8:13:A0:C3:1A:68:FD:49:7D:F8:AC:07:A2:79:49:0C
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328583AA7C142F23B2693FF51854D00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/73de3422-46eb-3979-8dca-02ae96c93dcb.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     41264
IP address blocks:        104.132.72.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:c1:42:f2:3b:26:93:ff:51:85:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=23dc0737-34e3-4427-9afc-1438ec55fa42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c0:b4:da:88:12:5e:d2:82:98:75:61:76:9e:
                    44:17:8f:5e:8c:8d:aa:f4:e6:6a:94:bc:0b:45:25:
                    9a:04:65:cb:24:1e:31:36:e0:25:56:cf:02:ec:fe:
                    96:28:a3:5f:49:05:65:b8:77:82:7a:2f:4e:17:69:
                    26:a6:bd:82:44:45:ac:73:18:51:7c:ef:d6:41:47:
                    52:2b:5d:1a:72:2c:2f:cb:25:1e:23:d8:9b:0e:98:
                    e0:c2:17:de:9b:53:5b:3b:bb:84:6d:f7:36:8f:f5:
                    91:7e:15:4c:ad:d5:1c:2f:78:1b:58:df:92:4c:8d:
                    49:8e:61:a5:00:a7:e6:12:a2:66:14:86:cd:54:78:
                    22:a0:86:88:40:30:44:03:e2:78:a4:d0:3e:e4:ca:
                    81:d9:6c:4b:28:cd:d9:13:69:0c:a8:3a:b0:55:2d:
                    37:7a:d0:03:08:e6:88:b5:62:96:d2:c9:88:73:d1:
                    7f:bc:4d:5b:01:9a:0c:e7:c3:5e:13:45:83:d6:ff:
                    10:5d:36:14:56:b6:56:9e:53:ee:73:c9:bd:2b:83:
                    13:45:4b:66:ea:17:88:8f:34:6b:5c:50:8f:65:5f:
                    17:a8:57:45:f0:c6:76:4a:28:8e:f5:53:5c:51:49:
                    92:df:b4:c8:41:fb:68:f4:8d:35:c0:91:98:b1:0c:
                    10:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:4E:1A:21:D8:13:A0:C3:1A:68:FD:49:7D:F8:AC:07:A2:79:49:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/73de3422-46eb-3979-8dca-02ae96c93dcb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:42:c3:c6:29:7e:2e:1e:e5:a0:9b:ae:60:35:62:c8:a8:8d:
         c4:8e:aa:75:9f:63:99:42:f8:ac:b6:36:79:aa:b1:a2:b0:48:
         ef:ac:fc:16:3c:fe:c9:b2:97:2d:e6:4f:34:f2:db:4c:4e:42:
         16:f1:34:ed:6d:74:21:76:0c:6a:61:3d:29:47:be:3a:aa:98:
         21:ef:c0:25:98:76:ac:62:87:b5:d2:ae:c3:ed:4b:7e:9a:57:
         87:03:c0:56:d6:74:91:7a:dc:cb:a7:4e:4f:ce:66:b6:3e:0a:
         f9:c3:24:0a:f8:a0:61:1e:81:9d:fd:e9:f7:dd:27:82:4a:c9:
         53:7f:c0:f3:66:e2:b2:de:97:9c:e3:b4:ff:f5:30:41:e0:63:
         9a:ee:e8:0b:20:81:74:42:74:6a:72:a2:0a:f3:61:ea:df:1f:
         8b:6d:a3:38:c3:75:08:8b:14:54:58:59:0c:da:85:86:d3:55:
         82:17:9f:95:c8:e7:37:f9:fe:6d:8f:4b:ee:7b:75:4d:fc:84:
         45:df:26:1a:e4:b2:b4:1a:56:87:a3:37:e3:64:a1:de:f5:6c:
         02:9b:3e:01:ab:c0:17:56:16:54:77:05:37:50:97:62:b1:4d:
         e5:c2:05:60:d8:cd:44:89:d6:2e:4b:aa:46:3d:b5:bf:4f:aa:
         14:dd:90:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----