Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a256c927-5edc-3448-b457-9d8432fe4cb8.roa
File:                     a256c927-5edc-3448-b457-9d8432fe4cb8.roa (raw, json)
Hash identifier:          A2dsD+loxSaIFH4M8ta2jkiusCWa7qgiGJhx46KpRo4=
Subject key identifier:   C7:A4:8E:E3:65:7D:B0:00:B8:77:B3:1E:F9:16:EE:64:FC:80:73:50
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328583AA7BE807961040B53CE7803C0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a256c927-5edc-3448-b457-9d8432fe4cb8.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     41264
IP address blocks:        104.133.112.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:be:80:79:61:04:0b:53:ce:78:03:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=c77d8bd0-e313-414b-8836-aa420082e181
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:80:ef:a0:46:27:e4:75:1a:8d:5d:8e:6c:63:
                    7c:6c:28:ef:90:4a:66:3c:fc:7a:49:c3:16:5c:32:
                    01:0b:7c:73:80:bd:ea:4c:3c:51:c6:45:ea:c1:f8:
                    62:0a:aa:d3:48:01:0a:d4:b3:6c:03:62:e8:76:78:
                    f5:9c:27:04:57:76:d1:18:fe:da:cf:e2:61:5b:fb:
                    09:42:ae:b5:12:d7:d7:79:ac:cb:cc:cf:ec:3d:4e:
                    12:fe:97:fe:a7:14:35:20:ca:99:5a:d4:6f:ca:08:
                    3b:8a:c4:57:60:87:9a:86:c8:41:13:86:8d:76:0c:
                    45:ea:8a:81:d1:17:a3:1f:2c:ae:0e:f3:46:7f:ac:
                    07:23:89:83:7c:c2:80:f5:95:e7:15:a8:3d:fe:41:
                    b4:db:27:2f:77:2b:4b:2c:9e:6a:76:5d:dd:ae:bc:
                    8b:e5:8d:f4:70:e4:d7:41:2c:3a:d9:4d:3a:9c:b6:
                    37:b0:97:50:b9:00:92:78:07:b8:26:43:ef:9a:ca:
                    7a:7b:2d:49:d0:04:91:98:a9:17:f0:cf:0b:82:4b:
                    76:76:cc:d9:0e:98:fe:c0:c9:f6:a4:b0:fc:95:44:
                    49:34:c3:7e:fe:4f:85:6c:b4:4b:aa:ca:5d:72:c5:
                    cf:ed:1c:6d:16:85:32:ab:a3:7b:86:ce:c6:31:f8:
                    0d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:A4:8E:E3:65:7D:B0:00:B8:77:B3:1E:F9:16:EE:64:FC:80:73:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a256c927-5edc-3448-b457-9d8432fe4cb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:12:56:d6:78:b7:c6:2b:68:01:93:8a:f9:20:06:10:03:e4:
         93:66:2e:80:04:92:33:3e:a3:43:8a:cb:d9:db:c4:3e:24:8e:
         eb:f9:b4:a4:94:64:bb:8e:40:9a:f5:c0:a1:2d:aa:60:47:a8:
         73:40:b3:3d:99:88:b0:ca:1e:4f:01:23:6f:b7:55:28:81:97:
         7d:f7:96:19:87:47:ef:78:29:ef:26:9f:3e:8d:cc:8f:f7:c2:
         39:c2:8e:fe:b3:4e:db:2c:3a:26:bf:1e:f8:db:d9:68:a3:0c:
         1b:2a:85:ed:3c:b8:86:7b:14:0e:a7:cd:31:25:b1:c3:a6:6f:
         69:ce:f5:41:ba:eb:5a:15:40:13:8a:ad:8e:5f:d6:ce:07:8e:
         9f:a2:b8:9e:08:5e:ad:b4:ae:c0:35:f8:c4:58:00:54:ca:fc:
         4d:57:5d:1a:b5:f8:a8:42:fc:45:db:2e:7c:a0:00:3b:02:f6:
         49:9f:83:fe:37:40:6e:83:93:81:ae:ac:c9:cc:77:fb:20:f4:
         e3:48:51:ca:9f:9e:10:c7:24:a9:cc:00:ec:77:c2:f1:ad:20:
         04:2c:be:be:dc:d6:f1:ff:0c:cb:3b:58:9e:7b:af:d1:67:d8:
         90:23:1d:9c:d3:18:94:bc:81:5e:25:92:b2:11:f2:e2:a3:68:
         c0:3c:6c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----