Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/79a3a329-7a2e-3bb9-9b33-3303ccabad15.roa
File:                     79a3a329-7a2e-3bb9-9b33-3303ccabad15.roa (raw, json)
Hash identifier:          02/LLPHPgVZxx5Qtk025/4s1TYpSeaz/a/OuLpv/aiA=
Subject key identifier:   A0:25:44:D5:04:67:82:CA:B4:65:74:FB:8A:CB:63:34:A5:55:47:34
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328583AA7BE53E50CCAE19930E1ACC0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/79a3a329-7a2e-3bb9-9b33-3303ccabad15.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     41264
IP address blocks:        104.133.209.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:be:53:e5:0c:ca:e1:99:30:e1:ac:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=8f90ec00-cbf4-4c51-91a0-7c591019644f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0f:3e:8a:03:35:14:9a:76:37:60:4f:c5:03:
                    50:e4:c8:eb:be:76:73:c9:06:d4:7f:77:6e:24:c2:
                    24:67:43:67:5d:31:0d:25:aa:32:9f:43:86:ca:86:
                    a6:6b:f8:4b:6d:74:66:e2:79:81:d9:ac:2b:61:24:
                    21:45:b6:50:fe:a7:6a:10:69:28:7c:cc:96:0b:0f:
                    1b:56:cf:af:de:cf:f9:45:a1:5a:5f:c1:6d:ae:a2:
                    da:3d:0d:14:b2:05:fe:dc:07:c1:4d:cd:20:1f:db:
                    e0:1b:7e:c9:70:27:08:7a:75:9f:b6:fc:d2:38:82:
                    07:8c:dd:39:06:e2:fe:e4:29:1c:7b:02:59:26:7c:
                    c6:c1:4e:53:18:66:27:c1:be:6c:da:47:aa:0e:3d:
                    b8:07:de:4c:7c:0a:5c:b8:53:b8:bb:94:a7:f6:69:
                    5e:34:e3:8a:57:44:50:67:95:99:8c:57:d9:c0:40:
                    3c:ed:e3:37:03:b9:8b:c3:fb:3f:f0:21:c5:c7:7e:
                    6c:2e:6a:86:b2:a3:94:74:85:ad:fe:8e:56:cd:2e:
                    85:09:2a:81:29:7e:cd:93:30:a3:dd:ff:fd:ac:83:
                    0d:b0:bc:fe:fe:6c:ee:c7:29:98:76:3e:2e:33:c0:
                    b8:ac:e2:4c:48:39:af:61:c9:5c:06:82:76:37:53:
                    ba:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:25:44:D5:04:67:82:CA:B4:65:74:FB:8A:CB:63:34:A5:55:47:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/79a3a329-7a2e-3bb9-9b33-3303ccabad15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:3c:e0:04:92:c5:f6:70:60:17:86:fd:ab:d9:3c:b4:eb:8b:
         d8:82:55:10:d8:54:4c:37:56:ad:6d:5d:0a:37:a1:29:cb:69:
         95:d8:5f:8a:1b:97:2b:47:a3:a3:97:20:68:4c:8e:9a:ca:97:
         a2:e1:3a:d4:64:63:64:be:c6:d6:d4:af:ee:22:5c:b2:9d:9b:
         d2:3b:de:60:aa:d3:e8:1a:55:d6:7b:46:22:f6:74:bf:55:0e:
         31:c6:48:86:e7:15:5a:be:69:76:b6:3b:48:0f:c5:90:d9:26:
         4e:f6:5b:3c:a5:ce:ca:c9:b4:dc:ee:84:ba:29:38:48:a6:e5:
         21:48:51:80:6e:69:f4:75:23:ac:a8:99:81:44:99:a3:b9:a2:
         c1:43:fd:a5:0e:0e:74:51:d5:ed:5c:cf:5f:8e:36:7a:86:8e:
         8e:fc:c8:fb:ce:b6:52:de:6b:66:14:5c:9e:72:df:2c:14:99:
         28:3c:62:f0:9c:27:5f:ff:71:0e:71:26:3a:c0:5d:17:26:90:
         4b:b4:d2:35:59:b4:80:0a:36:ef:7a:80:6a:bd:08:af:21:62:
         aa:21:4a:61:d2:ee:14:48:ec:d7:8c:03:3e:98:8e:50:dd:bd:
         39:ec:e0:8d:a8:32:f1:e5:f5:7d:3b:a8:2c:d3:0b:89:57:ad:
         fa:71:d6:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:36 2023 by rpki-client on console-fra.rpki-client.org