Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8c45c151-e0c4-3944-aa80-73b8fd924c39.roa
File:                     8c45c151-e0c4-3944-aa80-73b8fd924c39.roa (raw, json)
Hash identifier:          kbgIhs4sGJSRzZsA3GQj4puorNjmr0800gR9eznpiSE=
Subject key identifier:   B6:09:17:AC:26:0D:2D:93:D5:CC:24:81:3E:51:7A:C3:7E:A0:8D:EE
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328583AA7BDE7D6BD426B3F15EF8F80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8c45c151-e0c4-3944-aa80-73b8fd924c39.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     15169
IP address blocks:        104.134.159.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:bd:e7:d6:bd:42:6b:3f:15:ef:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=62fb2b5c-9028-463c-9b2d-cf3e9a384d79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0f:7f:17:b2:b1:eb:b5:5c:a3:2a:87:3c:f4:
                    ac:3e:35:22:76:41:f4:ef:99:a7:d1:18:d5:d0:86:
                    5f:0d:6e:df:1f:89:82:3b:3e:cf:f2:20:ed:b7:5c:
                    aa:3c:b0:77:d3:59:52:2e:a1:16:7e:bb:2b:dc:1a:
                    d3:d0:c8:8e:5c:30:bb:67:6b:91:31:a6:0b:3c:04:
                    bd:65:37:b3:48:07:42:45:9c:ff:40:fb:df:f9:82:
                    81:82:f7:6c:20:24:b0:dd:38:6e:ee:0c:39:1d:a5:
                    6c:55:f8:72:f8:23:83:1c:3d:e1:3d:0e:1f:8d:21:
                    40:b8:e3:f9:91:4a:cf:82:ce:40:51:bd:38:a0:18:
                    69:e9:ed:02:b3:55:c9:da:e6:f2:2e:1b:c5:58:2d:
                    86:2e:d4:12:97:b9:ee:3b:22:7f:8c:c6:e5:13:35:
                    b1:fe:a8:9c:24:14:d9:5f:b8:01:22:28:c7:c9:3b:
                    11:c8:17:7f:39:46:8b:3f:12:7f:b4:16:e9:7c:24:
                    94:51:5a:17:1f:bc:2b:fc:92:06:00:0a:6d:11:ef:
                    27:a3:2d:6d:89:a1:83:09:36:8a:ae:d4:40:c8:1c:
                    12:c7:0a:61:39:68:77:65:32:9b:37:41:43:6e:32:
                    b9:10:fc:03:0b:96:54:0f:c1:74:33:d4:78:b6:ac:
                    88:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:09:17:AC:26:0D:2D:93:D5:CC:24:81:3E:51:7A:C3:7E:A0:8D:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8c45c151-e0c4-3944-aa80-73b8fd924c39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:44:69:74:5f:58:49:92:58:33:a9:68:0c:94:85:50:44:8c:
         e6:57:64:c0:0a:41:e6:08:57:87:8c:41:fa:1f:c1:93:3b:b3:
         80:06:2d:ab:5b:96:ad:ca:4f:e1:7f:82:8b:fb:4d:ad:cc:0e:
         bb:9f:f6:cb:ae:b4:0f:84:49:49:6f:da:57:41:2a:d1:74:9e:
         e2:81:94:cd:39:02:8e:d7:ee:fc:92:a2:90:ab:65:90:25:97:
         4f:44:c4:02:3e:7c:dc:05:1d:d2:14:b9:5b:16:0a:c8:b6:aa:
         99:e3:9e:d3:bf:95:ae:ac:8e:b0:c1:75:44:f2:11:c8:33:e7:
         5b:ed:f2:f7:f1:86:46:9f:c2:29:3d:82:4b:11:88:28:45:fa:
         ee:95:35:6f:7e:23:04:b3:77:8f:64:04:d9:c9:7e:cc:91:b7:
         09:f5:d4:3c:53:b8:fa:d5:fd:84:b6:e5:14:2b:42:cf:07:4a:
         f8:57:ae:83:84:19:3b:0b:a1:16:31:4c:a6:48:29:9e:8b:e7:
         b4:29:a7:11:fc:f9:b9:60:3e:9c:d4:3d:6a:66:cc:a8:56:9b:
         d2:a7:1e:b0:9e:cf:d4:37:89:ae:19:54:b9:60:9f:31:b3:41:
         76:92:62:ce:22:eb:86:d8:bb:5d:3d:4e:79:a7:91:19:a8:83:
         28:be:7d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----