Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8e077382-4ab5-3fc7-a8fc-86083524193d.roa
File:                     8e077382-4ab5-3fc7-a8fc-86083524193d.roa (raw, json)
Hash identifier:          YHO2JZUuC3Wt7uiBySDuZgYkHvyHTVHwld1zIVqGJDU=
Subject key identifier:   9E:BB:BD:E0:1A:04:68:EC:14:1E:23:B2:2C:2F:69:65:2E:D6:11:C0
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328583AA7B9C758E4FE341E293E42A0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8e077382-4ab5-3fc7-a8fc-86083524193d.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     41264
IP address blocks:        104.133.93.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:b9:c7:58:e4:fe:34:1e:29:3e:42:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=3c347e75-c404-4dc3-a370-5e27ba9fab53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:b6:61:cc:2f:c1:b4:db:51:8b:92:54:45:b0:
                    f9:d3:b0:18:a8:a2:1a:cc:ad:57:0e:85:0a:2b:7f:
                    e2:f6:54:dd:e8:1a:9d:04:58:4c:28:5b:8e:d8:c3:
                    3a:d7:da:0e:3d:24:1d:06:d3:f8:d7:ed:b0:d1:3b:
                    fb:ba:51:97:fb:4e:6c:37:6c:29:34:a7:9a:92:c0:
                    69:b9:1c:0a:eb:41:47:47:ae:57:60:f7:84:63:cb:
                    2a:25:9d:31:82:ef:1a:67:03:ee:39:9f:0c:55:5e:
                    44:9a:1d:65:35:39:f9:cd:23:d4:5f:9f:c6:c8:99:
                    16:f3:03:d7:72:12:32:d1:ef:0b:23:aa:c2:de:14:
                    c1:30:74:35:db:0e:ab:79:bf:fb:c9:98:ca:7e:4f:
                    76:a6:f5:1b:fd:c2:dd:a6:56:bf:be:4a:6c:61:a4:
                    34:7f:3c:c0:c3:e1:12:c6:92:f3:e1:6f:47:d6:1a:
                    d5:87:10:51:be:7c:f8:ab:a2:74:58:73:55:9f:63:
                    ee:21:45:89:66:c7:6d:15:93:38:b0:ec:d8:9b:fe:
                    e8:ae:34:11:37:fb:0a:5f:cb:61:cb:29:87:ce:47:
                    01:c2:f9:73:2d:a0:ba:f1:a6:21:3e:f0:12:f8:64:
                    16:18:4b:72:b9:2e:4b:11:df:10:ec:29:60:f8:cd:
                    27:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:BB:BD:E0:1A:04:68:EC:14:1E:23:B2:2C:2F:69:65:2E:D6:11:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8e077382-4ab5-3fc7-a8fc-86083524193d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:67:44:bc:cd:76:ab:98:68:ed:93:16:a4:9e:db:dc:88:a9:
         0d:29:e2:57:ee:6d:3b:47:da:27:76:bd:78:e5:a7:bb:a2:0e:
         e1:cf:f8:e9:a2:25:7c:57:f8:95:29:40:a7:1b:33:ef:81:a2:
         5f:df:90:fc:42:b4:51:7e:1c:1e:76:dd:df:78:07:ac:02:96:
         57:32:45:d9:1b:66:b9:23:11:10:37:8e:02:4e:f2:bb:05:79:
         c9:32:f2:eb:54:93:1a:4a:5c:9c:75:6b:09:b5:09:77:4e:30:
         3a:8c:25:48:cc:18:96:b8:d3:55:55:b6:01:bc:da:df:fe:f3:
         f5:d2:d6:73:af:b6:bc:a7:1d:58:da:26:de:b1:08:89:5d:36:
         51:65:69:6a:24:2e:e3:0c:58:01:ce:6e:d8:67:5e:36:3f:af:
         d9:4f:b9:0f:dc:b3:e8:87:bb:ed:ab:86:3c:6e:1a:85:a6:32:
         d5:13:e3:5a:20:c6:e5:16:3b:c6:bc:e4:86:f3:e7:0e:57:a0:
         1a:bb:52:e9:ee:c1:b6:cb:39:64:a3:56:fd:98:e7:8a:a6:1c:
         e6:46:27:0b:8e:97:26:ed:6f:14:28:9e:d5:47:ad:8b:98:8d:
         2c:fc:bf:09:f5:26:11:c4:a8:af:c1:4c:5f:15:4c:f9:f5:96:
         dd:87:33:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----