Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/892d6d64-3a66-3c18-948d-2a6cfe3813ab.roa
File:                     892d6d64-3a66-3c18-948d-2a6cfe3813ab.roa (raw, json)
Hash identifier:          9ReQ0SpeZx2LkaxcvtLbZyVTgJ18SPv7JG7UeFB+Xks=
Subject key identifier:   F7:22:2E:49:B1:32:DC:0D:F0:A8:9F:25:31:15:83:CD:8B:59:89:4D
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328583AA7A7D4D9A052D475965AF680
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/892d6d64-3a66-3c18-948d-2a6cfe3813ab.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     41264
IP address blocks:        104.132.102.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:a7:d4:d9:a0:52:d4:75:96:5a:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=282025c9-e601-4979-b185-71837b0a67fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:32:05:44:c3:bb:05:12:10:52:fe:e3:00:b2:
                    89:06:96:9e:82:fe:ff:06:40:0f:75:98:4b:f3:d8:
                    4e:39:14:0c:2d:fa:44:f3:62:32:81:17:14:47:eb:
                    e0:04:04:9e:02:b7:bc:72:18:7a:3c:0c:1d:4a:68:
                    f9:3f:d5:49:40:1f:a3:17:d1:e6:4a:e6:8c:a7:48:
                    3d:f2:d2:79:aa:fc:75:3f:ec:c5:09:d9:93:56:72:
                    9d:68:cc:60:cc:85:42:9e:96:09:51:1b:4b:4f:59:
                    ba:49:34:cb:f8:06:f6:92:cc:b8:9f:3b:2c:ae:04:
                    89:0c:d5:49:a0:f4:f6:33:74:2f:53:86:5e:35:68:
                    67:20:ed:d3:43:fd:51:23:82:f1:df:71:30:7f:bd:
                    f1:95:d3:b8:cf:97:28:48:57:86:d7:44:ea:2a:48:
                    f7:27:18:e5:dd:6b:f3:a3:23:03:06:a9:13:be:f4:
                    ae:2f:67:60:a6:e2:3f:11:ba:92:de:cb:82:05:d2:
                    d4:9b:8a:32:67:7c:06:be:13:e4:31:c0:e7:40:2a:
                    be:51:1e:e2:41:cc:2b:b3:91:97:ab:9e:37:ea:b4:
                    f6:ae:bc:ea:4d:11:54:8e:21:6a:40:b9:26:d3:a8:
                    3a:f5:76:9a:2b:9d:d6:83:fe:bd:7f:0c:8b:ee:84:
                    e1:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:22:2E:49:B1:32:DC:0D:F0:A8:9F:25:31:15:83:CD:8B:59:89:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/892d6d64-3a66-3c18-948d-2a6cfe3813ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:e9:6b:b2:64:a9:d5:f4:88:a9:c8:4b:f6:cf:e5:46:77:32:
         c9:1a:74:96:33:fa:c6:48:de:26:49:16:fd:ec:27:09:7b:4e:
         86:84:6f:ef:bb:0f:f1:9e:c2:41:00:93:65:84:71:91:f4:38:
         e9:f0:03:f8:ce:5c:27:f1:b3:16:1c:f7:1c:f6:1a:05:90:18:
         23:b3:6e:d6:68:8a:ec:7f:83:81:51:ce:da:36:0d:e2:e7:da:
         ff:1d:ac:e3:45:0b:a1:3a:79:c6:fd:da:e8:17:c2:91:5e:f1:
         c7:3f:71:d2:50:23:18:0d:0d:fc:79:18:c2:ae:ca:f3:9c:a9:
         78:2b:a1:7a:4d:ac:fd:52:25:ca:9a:30:f9:ad:f6:24:65:60:
         bf:ab:cb:96:e5:cf:9b:9d:b8:86:d8:c3:48:70:08:f7:33:5e:
         0f:20:59:40:7d:2c:43:30:fa:89:05:ce:0b:e8:31:a0:74:60:
         f3:c3:f9:de:bc:c1:10:55:db:05:e2:cc:6f:d6:af:94:e0:e2:
         7d:49:4b:b5:68:2e:3f:3e:67:b6:d8:49:37:c9:8e:45:fb:9a:
         31:a8:ec:7a:e4:14:77:83:d0:94:d4:e1:70:f1:36:1e:aa:43:
         d6:f3:bc:4a:5c:b1:0a:3d:5e:ed:b0:10:f2:0e:be:4b:83:cc:
         2f:83:8e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----