Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9ea1e86e-7d1d-3af1-b19b-29a9c7e669a8.roa
File:                     9ea1e86e-7d1d-3af1-b19b-29a9c7e669a8.roa (raw, json)
Hash identifier:          kMerLXtuCSYjByKU1aXEFG0FuwoCmy0Bs20VGd4tWV4=
Subject key identifier:   7E:C1:89:C7:74:DA:CF:79:81:90:BC:25:69:E0:B5:44:9A:81:A8:02
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328583AA7A0928D8F63D51D8E6B6600
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9ea1e86e-7d1d-3af1-b19b-29a9c7e669a8.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     395973
IP address blocks:        104.134.153.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:a0:92:8d:8f:63:d5:1d:8e:6b:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=ccddee33-be68-48ea-bf97-bf29fcb5c807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:42:b7:b8:04:e0:c0:0e:49:c3:79:11:c6:5e:
                    e1:b2:5e:32:38:35:85:4e:63:71:a1:05:8c:0c:ee:
                    f7:e8:ae:e0:45:ce:0e:36:9f:11:b0:f5:d8:03:9a:
                    90:c2:93:ec:23:1d:0a:85:05:47:7f:85:24:a6:86:
                    cb:29:b8:71:ae:dd:93:ee:c6:51:f2:99:b1:fd:3b:
                    75:7b:77:09:d3:7c:d4:66:23:00:8e:2e:01:a3:03:
                    d4:2b:fb:f1:f3:80:a8:df:93:ff:ce:37:89:c4:61:
                    85:34:74:4f:af:04:3c:a6:d4:95:8a:1c:14:d0:25:
                    0d:43:fd:68:a9:0a:20:26:52:e0:a9:ff:84:85:46:
                    d2:9d:a9:3a:e9:5f:86:f8:3f:31:c5:55:73:58:1c:
                    6f:62:e8:8e:f8:41:f0:1d:4b:67:c8:ec:da:38:1a:
                    e2:2e:26:ab:c3:69:8b:81:13:c8:83:42:8f:0e:72:
                    51:54:11:05:47:33:5d:32:a9:60:c7:a6:24:a0:21:
                    9d:86:d5:96:06:99:e3:11:35:78:0f:3b:33:ca:0f:
                    57:65:92:ed:55:e3:de:75:09:7f:c5:24:ca:6a:d2:
                    ad:33:c0:65:30:6c:02:02:c8:51:32:48:81:4b:23:
                    11:ef:78:6b:d9:ca:c9:c8:ba:2f:c7:0a:5b:12:82:
                    34:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:C1:89:C7:74:DA:CF:79:81:90:BC:25:69:E0:B5:44:9A:81:A8:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9ea1e86e-7d1d-3af1-b19b-29a9c7e669a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:45:8f:25:62:86:db:56:64:c0:c2:86:62:2a:f8:dc:1d:04:
         5a:5e:b9:45:66:46:10:98:9b:e5:18:86:a9:44:4b:0d:11:07:
         17:02:cb:82:a2:0b:b2:32:ad:dd:e2:78:05:31:dc:a4:0f:3a:
         12:6d:13:89:c3:28:22:d4:07:d5:9c:bd:03:d5:e1:e0:39:83:
         c6:ac:ad:52:b0:fb:65:10:93:05:79:60:00:a0:42:33:2d:5f:
         57:ab:49:3e:e8:e9:23:39:f1:d0:8e:d0:e9:e8:ff:67:0c:e7:
         eb:89:61:f5:8d:ff:ae:ef:c3:b8:ec:94:06:a6:f8:70:f3:64:
         a1:4a:39:13:52:cf:60:5e:9e:e6:d8:f1:01:2b:37:ed:d2:3b:
         8b:e2:c1:b5:94:be:a6:e9:1a:11:89:43:e7:f6:e0:c2:7a:11:
         5b:0c:4e:7c:12:d7:f7:8a:82:fd:34:f2:b1:2a:a0:73:c0:77:
         6a:08:16:c5:36:82:bc:27:44:0a:23:be:85:4b:a9:3f:fb:9d:
         1f:4f:88:be:05:cb:bd:c8:33:d5:91:3b:4f:63:57:a2:08:b2:
         f6:1f:6c:5a:54:89:c9:66:19:96:ff:47:ec:99:4b:03:88:05:
         40:0d:f2:06:18:95:15:52:4c:d2:84:e5:4c:2a:1c:20:90:6c:
         81:d8:bb:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----