Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/84f9b4f0-645b-3ab0-a89f-9a068e250f72.roa
File:                     84f9b4f0-645b-3ab0-a89f-9a068e250f72.roa (raw, json)
Hash identifier:          5ChWVYoFSgdAhphLrxYfKt/yb8rq0yFkvdDx80qGYRE=
Subject key identifier:   D8:13:FC:73:DA:70:00:6D:AC:C9:30:56:68:1D:41:B0:21:EB:78:A8
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328583AA7B421460D56CE1E1FA48C80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/84f9b4f0-645b-3ab0-a89f-9a068e250f72.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     41264
IP address blocks:        104.133.102.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:b4:21:46:0d:56:ce:1e:1f:a4:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=b47e9348-7852-4b63-8f9d-61c3e7e776bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ba:8e:03:df:da:b2:f3:33:9a:ca:b9:07:80:
                    db:00:f6:91:41:e5:3e:57:22:f8:f5:9e:6f:02:79:
                    e0:33:72:46:cb:2d:4b:22:30:e5:24:4c:7a:ff:dd:
                    9a:b1:ba:f2:1e:0e:84:dc:2a:e1:68:54:98:b4:41:
                    3c:87:a0:02:d1:9b:94:3e:6c:79:06:87:79:dd:8c:
                    a3:5c:ee:6a:fa:6c:56:9d:7f:86:d9:de:f7:d1:5f:
                    34:e7:da:cc:19:10:e9:fb:47:c2:19:f8:47:a4:49:
                    12:26:f3:88:81:4f:5a:9e:e5:de:98:12:08:27:d1:
                    63:6f:ee:3c:d5:2a:10:54:d2:b3:a6:20:4f:0f:c8:
                    9c:40:08:16:fc:56:f1:30:8c:74:3a:c7:dc:34:4f:
                    7b:ba:3a:9a:91:23:ec:88:7f:7c:d8:e0:86:63:19:
                    a4:a9:8c:e5:9f:49:8f:5e:5e:60:66:99:41:30:1a:
                    01:87:ae:d5:60:55:78:9f:b3:13:4e:77:60:7a:66:
                    92:78:fb:32:16:45:c6:4f:44:1a:72:dc:62:82:d6:
                    a2:bf:de:05:26:a4:f1:ca:90:1f:2b:3d:60:53:b5:
                    a0:fd:0c:2e:a7:4a:f4:ed:8a:dc:ad:fa:6b:4a:90:
                    f7:20:67:16:43:0d:cd:11:e9:05:08:42:54:e2:b3:
                    28:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:13:FC:73:DA:70:00:6D:AC:C9:30:56:68:1D:41:B0:21:EB:78:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/84f9b4f0-645b-3ab0-a89f-9a068e250f72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:22:ec:97:e6:7c:39:4c:66:d5:bf:e4:ab:c1:50:52:e0:2a:
         cb:aa:70:43:8c:bb:95:15:96:76:2e:b0:10:1b:8d:0c:a8:ac:
         2f:9d:dc:c5:0a:e6:53:3c:5a:62:9a:94:83:d2:a5:4b:75:48:
         1b:de:e1:cd:d3:9d:a1:d4:1f:5d:65:e4:12:09:ac:2b:fb:5a:
         16:5c:ea:01:22:e3:18:80:1f:1f:61:c3:da:5b:fc:7a:24:d8:
         d0:3b:c1:e2:9f:8a:42:6c:d1:c2:34:4e:7f:cf:ae:93:3c:a0:
         9c:1a:71:cb:d3:aa:7c:78:2e:9e:ca:c0:a7:f2:20:c5:c6:24:
         64:81:2b:51:2e:2a:7d:ef:47:23:91:b6:3d:f1:29:42:af:b0:
         e7:c6:43:9e:fb:a9:f4:63:20:63:5f:7b:b1:ad:c8:2c:1e:0c:
         0e:8b:a7:4e:9b:6d:d7:ed:db:41:db:b8:80:1e:5d:e6:ac:a0:
         94:b4:c4:7a:ea:83:d9:1a:b1:de:0c:8c:42:ec:9f:3a:bf:17:
         0c:08:6e:0b:03:ab:a3:50:a1:25:b8:2e:7f:fe:71:4d:ed:af:
         a1:87:1a:45:62:53:31:61:9d:8e:3f:78:c3:b9:a7:9a:0f:16:
         78:88:ac:fe:16:7d:d6:53:2e:4e:b1:97:98:73:d8:cd:46:fd:
         82:0e:c6:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----