Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7413a8d0-381c-3b3e-99e2-8622175c105d.roa
File:                     7413a8d0-381c-3b3e-99e2-8622175c105d.roa (raw, json)
Hash identifier:          NagE68q3Dtjvlpbvyqi/jKHUwLd/EAayet0b94aGg1Q=
Subject key identifier:   7D:FA:28:62:FF:D7:18:6E:AA:4E:B2:B9:B5:EC:3B:A5:01:54:B4:82
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328583AA7AD8CA0F56208031BEBBFC0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7413a8d0-381c-3b3e-99e2-8622175c105d.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     15169
IP address blocks:        104.134.160.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:ad:8c:a0:f5:62:08:03:1b:eb:bf:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=7f403bdd-acb9-4dfa-8bd6-caaf03c212bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:91:39:55:22:dd:99:5a:c5:df:1e:4c:ff:09:
                    b2:47:91:00:53:24:da:00:3a:45:fe:f4:34:c1:7b:
                    b1:fb:39:ef:a0:61:11:d1:ae:c4:27:c7:6d:bd:1c:
                    70:c1:22:2f:dd:d2:3e:16:7d:71:fe:6b:59:54:80:
                    c7:2b:12:b1:71:17:ba:80:06:c1:a5:35:00:9e:d6:
                    01:83:c6:6a:d5:4a:90:97:7c:7a:46:94:74:f7:ba:
                    bd:41:93:5b:e1:42:fe:bf:21:bf:74:39:1c:f5:cf:
                    38:38:a2:39:8f:a9:7c:84:64:ba:80:5f:ad:a8:28:
                    db:89:dd:53:9e:89:24:f2:6e:83:cc:09:bb:56:a4:
                    d3:d0:e6:d4:d7:f0:81:18:c1:07:8b:85:b2:d4:62:
                    81:7c:f5:16:53:b9:79:e6:14:a6:f0:d3:2f:8b:69:
                    06:8a:4b:4b:be:5a:63:41:ab:a2:81:c5:c5:83:09:
                    be:26:79:69:45:e2:c4:25:99:e7:66:e2:73:2d:a6:
                    cb:70:c6:6a:b3:4b:c9:27:57:70:c7:a2:24:ce:ef:
                    f0:7a:9c:9a:73:7d:e1:a3:f4:c2:b6:ce:06:97:d4:
                    38:1f:6a:4c:ca:bd:00:96:33:cb:0e:05:50:00:7b:
                    23:5e:57:64:a0:26:58:25:95:fd:a6:74:2d:61:ee:
                    e3:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:FA:28:62:FF:D7:18:6E:AA:4E:B2:B9:B5:EC:3B:A5:01:54:B4:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7413a8d0-381c-3b3e-99e2-8622175c105d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.160.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:f9:6f:59:b2:a6:f7:90:f4:ab:c8:37:78:3c:96:c7:64:1f:
         51:9b:dc:78:34:c6:19:d8:62:40:14:e5:a2:88:26:e9:5a:32:
         a7:f4:ee:e3:48:d4:db:3c:a5:82:70:26:49:ac:8d:fd:c8:33:
         e3:41:01:d7:94:c5:85:2a:c1:6c:0a:77:4e:b8:ea:56:42:5c:
         f1:02:39:a9:cc:d5:50:94:4b:e8:78:9b:81:dc:da:95:93:aa:
         0f:b2:05:a5:2e:c4:28:20:2d:75:e5:f5:cf:c3:38:67:60:51:
         52:f3:4e:4d:d3:4b:28:34:01:44:32:06:3e:86:95:ee:38:75:
         12:f5:f6:8e:8f:e3:45:ea:9f:92:8c:42:1d:3b:65:23:47:51:
         26:72:86:75:1d:3f:4c:2a:2a:a8:f2:b2:4e:ee:a4:2b:8e:4a:
         5f:79:e6:6f:56:9c:56:a4:ff:de:29:10:36:21:f9:f1:15:4f:
         6a:f0:7e:4c:ad:7a:a7:a3:c3:65:77:e4:7a:c5:e8:51:50:14:
         9c:67:01:9e:41:10:47:83:c7:16:0f:aa:1e:e2:a3:10:88:75:
         3c:08:d6:b2:ba:40:cc:46:e6:47:da:c0:d6:57:bf:a6:ed:eb:
         42:26:8e:4f:e1:33:8d:d4:1f:d3:e8:74:ea:27:eb:71:d4:eb:
         9e:3e:0c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----