Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7cabb0a9-d897-3e99-9785-e75f1e9c62d6.roa
File:                     7cabb0a9-d897-3e99-9785-e75f1e9c62d6.roa (raw, json)
Hash identifier:          +Kxh9n9SnpRAZgr0V6wRwo44RGxu5Cd9l1N8C0zvKs0=
Subject key identifier:   35:03:9F:1A:9E:CA:2E:6A:E9:71:28:8B:23:BA:F8:0C:66:3C:06:58
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328583AA79FADA0A2C658F440902E00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7cabb0a9-d897-3e99-9785-e75f1e9c62d6.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     15169
IP address blocks:        104.134.160.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:9f:ad:a0:a2:c6:58:f4:40:90:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=0d84f2e1-d32f-4875-aa48-c90e8dec887f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d2:6b:8f:6d:fb:bb:9f:c3:f1:42:bf:4d:1b:
                    25:89:96:29:30:be:c7:64:66:26:10:96:26:93:66:
                    a2:a0:f9:e2:d9:93:98:82:8e:e2:5b:86:ae:eb:60:
                    5f:b9:e2:b0:d4:e7:19:f9:61:4b:77:57:ac:58:d1:
                    ce:75:44:93:7e:af:b0:bf:aa:88:38:32:59:bf:80:
                    ef:02:bf:e4:05:5b:80:c7:20:e8:37:50:5e:3f:46:
                    12:9e:51:36:be:2b:34:e9:fc:f4:6f:e8:69:3d:85:
                    8a:64:4c:db:0b:e3:a4:ee:3a:19:01:5e:69:90:f2:
                    28:3c:3f:54:49:14:4f:93:76:7d:37:b0:b5:ca:f0:
                    03:18:cc:69:db:2c:d7:5a:38:cd:54:f2:eb:e5:76:
                    1e:e7:1e:2f:15:22:63:aa:11:39:f5:48:b3:1c:1a:
                    06:5e:84:d4:78:29:d7:0c:84:e9:63:88:4b:f2:d0:
                    fc:a6:74:21:c1:1d:1f:cb:b8:54:f5:69:f5:48:6f:
                    4f:ea:51:0c:83:54:43:45:31:4f:55:af:53:a9:aa:
                    45:c8:f5:66:57:19:b0:28:e7:4a:12:57:ce:76:75:
                    78:e9:9b:21:7a:57:60:79:69:a1:23:bb:60:00:1c:
                    47:82:12:f9:a7:f9:82:3e:36:17:dd:12:d6:2a:ff:
                    1f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:03:9F:1A:9E:CA:2E:6A:E9:71:28:8B:23:BA:F8:0C:66:3C:06:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7cabb0a9-d897-3e99-9785-e75f1e9c62d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:f0:90:c8:64:8a:a9:93:c9:14:b1:10:5c:13:5d:44:25:04:
         b2:03:f1:1c:67:d0:7f:d9:db:ff:53:ed:6f:65:e3:a1:8a:20:
         75:1e:3d:58:3a:5b:89:01:df:e4:53:a8:8a:46:18:e7:00:06:
         84:14:59:a6:c3:c6:b6:89:e7:e2:5a:30:31:11:72:53:7b:95:
         ba:c8:b8:4a:89:89:94:ee:bf:df:0c:c3:33:95:f7:28:0f:be:
         a5:44:7b:e0:48:24:18:13:09:7d:68:e6:2b:6c:6c:dc:72:b6:
         aa:fc:7a:d0:63:94:86:11:06:00:7d:d0:bd:06:34:d2:67:05:
         73:2f:e2:e5:ff:f3:a1:97:d8:45:a5:f2:26:8d:fe:73:1c:2a:
         99:e9:29:f2:a8:ab:0d:d3:fb:af:77:40:af:7c:a4:ed:ec:28:
         3d:ab:ac:fc:15:5d:bd:97:73:95:d9:a0:4f:de:ee:b0:d7:6d:
         82:c8:a5:38:38:db:5c:74:c1:37:a6:0e:7e:85:85:90:4f:63:
         81:cc:a0:8d:d9:07:20:42:80:0e:31:fa:9a:d9:b8:97:39:5f:
         20:5f:bd:f1:63:df:93:68:51:ef:2b:56:42:67:7d:96:d8:35:
         fb:14:c1:57:c7:0b:ab:ad:aa:c5:38:a1:99:86:43:93:37:c6:
         dc:b0:80:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:02:12 2023 by rpki-client on console-ams.rpki-client.org