Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/915afc23-3c0e-3c10-97a4-05980f384270.roa
File:                     915afc23-3c0e-3c10-97a4-05980f384270.roa (raw, json)
Hash identifier:          Wq8zd/T3I1BruYaFYJKEmVQXdsOAzWzgVtNq6nzkh1k=
Subject key identifier:   BC:38:CA:D5:36:76:40:84:BF:D3:33:C4:6B:E1:FE:81:F4:33:C5:15
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328583AA7A77565D67AA13212808320
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/915afc23-3c0e-3c10-97a4-05980f384270.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     395973
IP address blocks:        104.134.140.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:a7:75:65:d6:7a:a1:32:12:80:83:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=3f2f5897-ba03-4371-a8c7-1499c4b8948f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f9:c5:f8:d5:55:22:4c:25:fb:33:31:42:cb:
                    05:b6:2d:80:fa:5a:52:c0:73:e1:25:9b:40:09:d7:
                    f9:4f:46:3b:b0:c3:d8:68:a7:b4:65:ff:cd:1d:85:
                    53:85:f1:80:73:0f:a0:55:68:7a:cf:1e:ee:67:f8:
                    bd:06:c1:ae:20:20:87:5e:de:5c:27:09:b5:d4:1a:
                    a8:26:89:02:55:f3:2f:48:b4:99:97:00:25:7a:78:
                    55:41:58:55:c7:db:fe:91:42:58:8c:a9:f2:85:a3:
                    c0:45:8a:70:f2:d0:1d:99:03:93:d3:71:0e:d6:31:
                    c5:ef:63:8f:48:98:bf:5f:3b:93:b8:e5:31:e8:29:
                    08:da:9d:e8:cd:83:d0:a2:67:67:b0:2b:9b:2c:c3:
                    7a:25:63:37:96:c6:8b:6c:3e:11:5a:27:71:20:0b:
                    a2:03:ae:1b:05:7c:a6:1f:51:47:19:17:39:09:f2:
                    61:5c:bb:9b:19:fc:83:b7:98:21:c1:3e:b9:87:42:
                    1b:7c:b0:55:06:61:b1:4e:f2:d6:9f:10:3f:bb:bf:
                    b2:0a:fb:21:4d:f6:b6:68:3d:e8:17:3a:cb:bf:27:
                    1c:5a:cc:7d:cf:05:6b:7c:a3:9e:c5:61:c0:ad:4d:
                    0d:31:98:0e:19:ce:71:dc:19:35:87:e6:43:71:2d:
                    71:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:38:CA:D5:36:76:40:84:BF:D3:33:C4:6B:E1:FE:81:F4:33:C5:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/915afc23-3c0e-3c10-97a4-05980f384270.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:ac:82:b0:e0:ca:67:8f:ea:8f:cf:ec:b9:c2:c3:b9:6a:91:
         1e:41:8f:11:43:3e:64:a0:75:1f:6e:1a:9f:fd:bd:32:7f:1f:
         60:83:15:32:3c:94:9a:48:41:ea:5f:fd:54:a7:23:62:52:b5:
         7f:d4:1b:f5:e4:9e:44:7a:a0:5d:77:30:ac:17:c8:cd:50:bc:
         f0:a9:48:fa:4d:c2:f7:c9:8a:24:81:8e:b2:67:ae:3f:9a:a9:
         64:fa:78:fa:b3:73:c2:f5:cb:68:29:7b:5b:d3:1b:fd:5e:22:
         0f:d3:6a:7b:6f:25:6a:95:bf:6a:d7:13:1b:b9:36:f9:82:74:
         df:d1:0c:50:22:fa:1c:3f:4a:b7:ac:b5:40:cf:83:a5:1f:f1:
         ff:42:1c:07:ee:ee:57:00:96:2f:ec:3c:20:a6:b8:33:04:84:
         60:d9:e7:a2:6f:8a:90:15:b2:95:0b:7b:40:9d:15:f8:f8:e3:
         ff:99:b4:31:75:f3:90:4d:56:b3:af:d4:83:2f:ce:7b:ac:93:
         c7:bf:1a:37:63:1b:ed:01:18:ff:f6:1d:21:95:12:d9:19:5d:
         48:5d:23:9a:9f:ad:05:20:67:ea:42:32:94:d8:c0:d2:bb:99:
         b6:19:75:55:b7:7e:21:34:b5:d6:6b:7d:80:1f:2d:d0:a5:65:
         2f:88:bc:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----