Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8cd6cedd-ae81-3a31-9a15-b53a70d66436.roa
File:                     8cd6cedd-ae81-3a31-9a15-b53a70d66436.roa (raw, json)
Hash identifier:          X9aAYjG3P7UfqGK1KSYvl630LDjRDJPAZoL3uVcvRAs=
Subject key identifier:   62:AC:9F:F0:A9:2E:F1:9B:0B:E1:AB:17:DF:BC:09:B7:55:D0:13:6E
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328583AA7C339B239DA90AE9C799E80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8cd6cedd-ae81-3a31-9a15-b53a70d66436.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     395973
IP address blocks:        104.134.211.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:c3:39:b2:39:da:90:ae:9c:79:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=1ef09de5-5a92-42a9-b667-6b45c92930ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0a:4e:a0:3f:9f:4a:56:7f:fc:1e:3d:b0:ea:
                    5b:67:b6:6c:e7:28:e3:75:c0:95:35:46:c5:3a:83:
                    4d:b3:1f:f6:7b:35:1a:54:bd:b4:fc:05:a7:ae:22:
                    c3:6d:a2:8f:a3:fa:51:39:c9:9e:88:81:a7:a3:25:
                    d1:d3:0f:1c:87:80:1c:7e:c5:68:c3:ee:c3:a8:ff:
                    2b:32:6a:6c:b0:8d:b3:9f:5d:e2:5d:17:82:87:40:
                    18:09:3e:3e:98:c2:cd:12:c7:e4:48:4e:b7:84:62:
                    fd:86:aa:8f:63:6d:df:a1:34:32:00:e1:dd:c0:58:
                    19:9d:f6:1f:46:34:41:26:e1:99:09:41:1a:d7:55:
                    f1:d5:56:ed:04:2c:e7:d3:0b:85:ff:d7:c5:70:f9:
                    c3:d3:a3:31:cd:fc:47:49:ee:8d:fd:ef:63:26:d6:
                    8b:30:fb:3f:4f:00:c9:ad:43:08:d9:40:c9:41:0b:
                    e7:bb:5d:bd:ee:62:54:2f:9e:b7:64:a5:4e:d7:cb:
                    8d:cd:ae:a8:f5:8a:9c:19:2b:17:43:35:5b:f2:1f:
                    d9:a7:6d:a9:64:c6:f3:3b:96:20:07:0d:be:8e:5b:
                    5a:34:39:49:b0:6f:75:06:7c:a6:e5:30:b6:24:c6:
                    a6:7b:15:d8:3f:c0:b1:b9:0f:3c:44:f3:09:c3:ea:
                    50:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:AC:9F:F0:A9:2E:F1:9B:0B:E1:AB:17:DF:BC:09:B7:55:D0:13:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8cd6cedd-ae81-3a31-9a15-b53a70d66436.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:f0:5d:ad:9a:44:13:fc:ee:01:0e:77:9a:91:c9:6b:be:7d:
         82:29:9d:1e:09:6e:9f:3f:a3:44:3a:2b:04:8c:6b:03:9f:74:
         ab:ad:7d:69:77:5b:4f:d3:aa:a9:64:68:55:e3:ce:5a:3e:4e:
         44:1f:fb:a2:b4:40:60:96:ba:59:2a:e5:a0:0d:6e:01:46:76:
         b6:35:28:b1:fc:cd:cd:aa:c1:8a:69:1a:ee:9f:a8:0a:b7:3c:
         37:dc:d5:fa:1a:97:32:c8:30:e9:b6:dd:f5:17:f2:a7:6f:0e:
         54:b2:1f:63:79:31:b2:cb:3b:4a:a8:c4:4e:7b:96:ff:7c:1c:
         8e:30:5f:05:7e:1c:da:7e:52:13:9b:9e:b3:74:40:18:9a:fd:
         81:5e:5c:1c:d5:0e:23:74:43:e6:04:2d:a8:c7:b5:a4:df:28:
         26:60:de:a7:70:0b:49:bb:e3:6a:e1:78:68:4e:2b:88:66:94:
         0c:8f:50:17:29:3e:bb:bd:59:17:d2:44:66:8d:6b:10:e5:2a:
         2a:c3:55:b9:a0:40:73:a9:03:ab:62:b1:ad:c9:42:b8:e2:a8:
         d2:c3:6a:68:3d:20:c5:e5:84:32:b1:5a:89:51:84:61:5b:90:
         8a:c0:81:4b:21:7a:88:9c:d2:b9:11:90:83:76:a9:47:d1:c4:
         a1:3a:73:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----