Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a40780c8-3324-352d-9811-7a709341356c.roa
File:                     a40780c8-3324-352d-9811-7a709341356c.roa (raw, json)
Hash identifier:          hMHrUfEWAA1W8MASjUJKiLooYrUr+oQerGHZxtlsTUg=
Subject key identifier:   3C:26:D5:75:2B:CB:BB:C4:CE:A6:9F:59:BE:45:E3:01:61:0B:B5:05
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328583AA7AA57A7A713AED3BA889180
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a40780c8-3324-352d-9811-7a709341356c.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     15169
IP address blocks:        104.134.185.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:aa:57:a7:a7:13:ae:d3:ba:88:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=40134fb6-42b7-4195-a89f-fd1c196dd368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:41:dc:f5:70:46:a4:dc:b0:2a:57:f6:d4:25:
                    ef:44:71:c5:83:5d:d0:74:be:65:ad:a2:d0:29:39:
                    cc:19:21:ae:3c:b4:71:16:e6:17:86:e1:04:a2:78:
                    4a:49:d4:de:81:4f:36:5a:ea:4b:04:20:24:ad:21:
                    fc:ac:d6:2b:96:51:9f:3f:8f:7a:ae:cd:52:ed:ba:
                    13:9e:15:89:1b:23:d1:6f:78:28:a4:02:42:4d:62:
                    61:9d:35:05:f3:e4:d3:5d:40:e7:d7:b6:0e:2b:d8:
                    ac:27:b3:1f:87:80:a1:93:6d:cd:76:8f:6e:cb:54:
                    e6:61:c4:74:f6:46:9c:72:36:04:b2:22:c5:ff:0e:
                    78:fa:8b:b3:bd:6b:7a:dc:e0:d0:20:aa:39:e9:38:
                    18:94:17:77:17:9e:56:29:bd:c0:69:38:18:b0:88:
                    5b:41:f7:5d:cd:c0:e9:85:b0:16:78:2d:da:1f:ec:
                    e2:e6:82:8b:1e:e0:a1:dd:30:01:02:2d:a9:24:34:
                    7b:7e:ce:7c:59:86:90:53:71:d5:6a:0b:e2:fc:c5:
                    fe:4b:6b:47:1b:83:ef:7a:38:06:97:1a:82:6d:ca:
                    ed:5f:7c:c8:cb:a2:44:9a:9a:55:fa:f5:a7:f6:31:
                    7d:7b:78:9d:72:1e:24:09:a7:2c:61:50:8b:9f:1f:
                    67:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:26:D5:75:2B:CB:BB:C4:CE:A6:9F:59:BE:45:E3:01:61:0B:B5:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a40780c8-3324-352d-9811-7a709341356c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:92:26:29:63:a1:cc:b8:5b:0c:eb:ed:00:b0:75:ca:5a:eb:
         30:bb:92:fb:27:33:48:e9:26:32:57:ed:21:7c:f5:93:f9:17:
         8e:7b:3c:05:cc:6b:98:61:75:d4:6a:96:df:2c:94:35:ab:2c:
         e7:f5:cb:8b:84:60:24:f7:6d:35:22:34:55:ab:36:87:ab:25:
         89:31:94:f5:97:3e:c2:cc:55:df:42:02:cc:c5:c0:e4:d1:aa:
         e9:33:89:9f:37:e4:3d:b5:8d:27:26:d5:bd:3b:26:37:79:32:
         77:ae:77:24:56:d3:06:a0:a7:ff:35:3e:74:bf:b2:e9:7f:c9:
         75:c0:70:2c:7a:69:c3:11:7c:47:82:26:b9:0a:4c:7a:ea:34:
         02:17:87:89:05:2f:5e:58:5d:52:fd:76:e5:9e:53:48:10:5f:
         e3:7a:dd:3f:2d:3c:bd:38:a2:b8:f7:fa:73:62:2d:54:6a:23:
         42:8b:f8:91:8b:18:4b:9d:0c:65:27:81:50:3a:ce:d2:78:06:
         ad:cd:5d:d2:87:66:61:a6:39:fc:d7:6b:17:21:13:0d:14:cf:
         d9:05:d4:24:2b:8d:48:b9:c4:4d:c4:bb:dd:32:4d:01:a7:c2:
         14:70:8d:9e:d5:0d:fa:42:a5:b9:e2:37:9c:59:5d:84:ae:52:
         f8:8b:93:9c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnqlenpxOu07qIkYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
NDAxMzRmYjYtNDJiNy00MTk1LWE4OWYtZmQxYzE5NmRkMzY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0Hc9XBGpNywKlf21CXvRHHFg13QdL5lraLQ
KTnMGSGuPLRxFuYXhuEEonhKSdTegU82WupLBCAkrSH8rNYrllGfP496rs1S7boT
nhWJGyPRb3gopAJCTWJhnTUF8+TTXUDn17YOK9isJ7Mfh4Chk23Ndo9uy1TmYcR0
9kaccjYEsiLF/w54+ouzvWt63ODQIKo56TgYlBd3F55WKb3AaTgYsIhbQfddzcDp
hbAWeC3aH+zi5oKLHuCh3TABAi2pJDR7fs58WYaQU3HVagvi/MX+S2tHG4PvejgG
lxqCbcrtX3zIy6JEmppV+vWn9jF9e3idch4kCacsYVCLnx9nUwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDwm1XUry7vEzqafWb5F4wFhC7UFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYTQwNzgwYzgtMzMyNC0z
NTJkLTk4MTEtN2E3MDkzNDEzNTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIa5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE2SJiljocy4Wwzr7QCwdcpa6zC7kvsnM0jpJjJX7SF89ZP5F457PAXM
a5hhddRqlt8slDWrLOf1y4uEYCT3bTUiNFWrNoerJYkxlPWXPsLMVd9CAszFwOTR
qukziZ835D21jScm1b07Jjd5MneudyRW0wagp/81PnS/sul/yXXAcCx6acMRfEeC
JrkKTHrqNAIXh4kFL15YXVL9duWeU0gQX+N63T8tPL04orj3+nNiLVRqI0KL+JGL
GEudDGUngVA6ztJ4Bq3NXdKHZmGmOfzXaxchEw0Uz9kF1CQrjUi5xE3Eu90yTQGn
whRwjZ7VDfpCpbniN5xZXYSuUviLk5w=
-----END CERTIFICATE-----