Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/827e8659-e039-36bf-a817-c6288c65fc36.roa
File:                     827e8659-e039-36bf-a817-c6288c65fc36.roa (raw, json)
Hash identifier:          CxMsbRb+jphZbae58/V840vVTVEuYj3WlPStf7fj/H0=
Subject key identifier:   50:61:E6:D1:DE:41:C7:5B:33:CF:6C:1D:90:D5:41:50:95:F4:08:C0
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328583AA7B7A3CBAEF6CA0AC9A90A00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/827e8659-e039-36bf-a817-c6288c65fc36.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     41264
IP address blocks:        104.133.224.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:b7:a3:cb:ae:f6:ca:0a:c9:a9:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=4a062efc-d8b3-4447-a02e-06fd7582937d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f3:65:35:16:20:07:02:77:cf:b3:5c:37:16:
                    1f:13:0f:5e:50:ba:a6:43:19:46:d0:9f:25:bf:44:
                    c4:f3:99:41:6a:cf:aa:45:22:d1:5f:94:fe:72:23:
                    19:a2:6d:ed:95:10:a5:32:7d:f7:4e:c5:c6:6f:8f:
                    88:c7:17:47:64:71:8a:75:69:4b:fb:95:ed:78:ab:
                    e9:dd:b1:c2:fa:80:eb:63:a9:1e:2e:ce:fa:47:e6:
                    c0:9b:d6:0d:f7:d4:fe:e6:fc:15:75:97:63:be:ea:
                    93:26:26:d0:a0:79:10:80:99:33:5c:26:e5:e7:48:
                    fe:70:a4:5f:e8:d9:ac:48:6a:7d:6f:a2:65:e2:6b:
                    33:cf:e6:bb:16:15:6d:90:69:aa:a7:cf:c1:19:1a:
                    44:8b:ec:72:f9:b6:7e:0e:02:2a:31:d6:c8:15:47:
                    a6:01:f6:32:ef:e0:09:d9:8f:3f:38:77:98:34:1a:
                    2d:80:d8:ce:d9:d3:61:f6:14:34:9e:9d:4b:88:6e:
                    32:d7:86:34:12:f8:8a:1f:0f:57:e7:fc:04:9f:e7:
                    38:b0:68:81:b4:24:4e:68:88:5f:c7:79:7d:69:e4:
                    5c:4d:41:07:1d:81:46:50:42:39:b8:72:78:e1:e0:
                    25:e0:f7:1c:20:03:db:e0:ad:20:f9:a9:4a:8b:11:
                    12:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:61:E6:D1:DE:41:C7:5B:33:CF:6C:1D:90:D5:41:50:95:F4:08:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/827e8659-e039-36bf-a817-c6288c65fc36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:8c:7c:70:3e:c4:b2:b4:a1:f4:57:53:3c:cc:7d:3b:d1:0e:
         70:7a:3b:d4:70:7b:2f:25:c2:9c:99:54:5f:dc:11:bd:15:db:
         fa:a6:ee:04:2e:f3:cd:4f:69:24:2c:49:a5:2a:a6:ab:75:76:
         cd:e3:52:1f:a7:31:65:1f:5a:cf:15:fb:77:f1:17:ec:88:14:
         d3:cf:34:00:44:5f:0c:e2:e1:cb:24:e4:b8:dc:65:b2:d3:3f:
         55:5d:b2:50:c6:82:59:fb:22:72:a0:2c:61:48:78:fc:3e:3a:
         2b:c1:eb:f4:88:65:9f:fe:f5:73:1e:1b:98:9a:fb:f7:14:e7:
         30:cb:a4:c0:65:56:da:7d:08:38:27:4d:24:3c:51:e2:a9:75:
         8f:17:89:41:3e:ad:1a:45:71:f9:51:5d:12:57:e2:60:d3:35:
         a6:b9:24:9e:99:73:f7:6c:dc:4e:52:19:14:4d:11:35:c9:19:
         31:e1:6d:62:0e:c3:58:76:34:ab:d9:16:ce:2a:49:58:2f:bc:
         67:b8:83:13:9b:e8:6e:49:e1:79:55:12:48:c1:fd:51:ce:a1:
         16:ab:8e:5b:1e:a2:ad:42:ad:55:fa:f7:d5:5e:dd:76:14:9e:
         b1:53:10:1a:b3:71:fc:f6:d0:32:3e:75:33:c9:d7:7d:a2:a5:
         a0:0b:f6:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----