Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a461f49d-610a-3426-932d-fed162a8c0d1.roa
File:                     a461f49d-610a-3426-932d-fed162a8c0d1.roa (raw, json)
Hash identifier:          ZLMw9kPdpdKTWFBSAgQBnIoElXJNSEXTejXqWz14eJ0=
Subject key identifier:   93:FD:96:DB:B8:D4:42:4E:6E:90:FB:A0:EA:76:22:AF:6D:FC:8B:01
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328583AA7BAB2B430C241910E89D0C0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a461f49d-610a-3426-932d-fed162a8c0d1.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     15169
IP address blocks:        104.134.166.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:ba:b2:b4:30:c2:41:91:0e:89:d0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=fe28ac0e-5961-4fda-95b9-4e249b50a62f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:65:c9:f4:1f:52:b3:f5:0d:51:97:4c:31:57:
                    09:3f:ce:40:26:c6:f9:64:dd:b0:b3:ba:d2:5f:fb:
                    08:0e:74:28:be:0e:8a:0e:61:b0:45:2e:27:30:fe:
                    eb:1c:c2:6b:b8:28:ee:da:c8:d4:6c:0a:bf:09:84:
                    75:87:1f:e3:86:f0:f0:3b:83:72:35:f4:eb:df:8a:
                    0b:a4:2f:7c:1a:cc:f6:5d:55:44:16:eb:c4:ed:e4:
                    6e:98:06:d3:27:3e:a8:7c:23:c2:61:09:33:70:1f:
                    d6:86:e9:07:0f:6d:5e:86:c1:07:5c:4e:9c:56:39:
                    7c:64:9b:77:80:3f:2f:d5:a6:e5:37:08:f0:06:b1:
                    5d:49:15:89:4e:3d:b5:fc:dd:4f:a8:d2:0f:fe:1c:
                    11:a5:de:9a:f5:05:b0:be:29:19:f3:e6:fa:fd:e8:
                    5a:4f:88:9a:29:5c:b4:50:45:75:4b:9d:4d:5c:ad:
                    9f:11:fa:1c:08:98:61:36:57:1a:46:68:86:16:b9:
                    79:df:ab:6f:e1:b6:5a:59:79:78:9c:da:d4:0b:c0:
                    ae:2b:f2:a4:e7:18:70:f9:97:e9:26:1c:c4:4f:b1:
                    55:86:bd:85:61:cf:2c:26:05:c7:11:61:ba:c0:ef:
                    40:c0:2d:dc:a1:38:0a:9b:de:8b:95:d3:9d:0c:b1:
                    24:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:FD:96:DB:B8:D4:42:4E:6E:90:FB:A0:EA:76:22:AF:6D:FC:8B:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a461f49d-610a-3426-932d-fed162a8c0d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:f4:7c:2f:30:20:36:4a:e0:6d:3e:63:40:43:cf:88:16:1f:
         6e:e5:71:6a:a4:da:90:1a:8c:7c:b2:35:35:f3:36:b5:c0:9e:
         29:aa:4f:d2:32:86:52:80:0e:35:e8:37:70:17:69:44:56:e5:
         18:19:2d:09:a3:4b:e0:ee:53:a7:20:ec:bc:01:59:a3:a2:52:
         06:ec:ad:43:2d:52:96:cb:34:81:62:4f:f8:21:fb:0d:c5:76:
         4d:e8:d1:b4:cb:28:70:37:8d:7a:c9:fe:41:e6:d3:b2:59:19:
         74:e3:97:bb:81:0f:9f:0d:9f:4c:2f:01:7f:d8:ff:7b:f3:ea:
         24:28:b7:57:91:30:ee:1f:27:0e:3a:89:58:3f:8e:87:8f:22:
         36:23:09:62:8b:07:0f:ce:9b:08:cc:b4:30:fd:e2:b7:cb:0f:
         27:7e:87:57:ff:b1:f0:d0:06:56:8f:30:83:b8:8b:49:77:65:
         d8:84:7a:ad:b5:aa:47:e5:22:d2:4e:88:ba:ea:ab:95:92:f3:
         78:0f:8f:b2:0b:77:eb:c1:60:99:dd:4b:29:84:25:fa:02:b2:
         ef:4c:eb:d2:29:7b:33:f1:94:7d:ce:5f:fe:e0:93:75:16:a8:
         b5:69:bd:b7:b3:8a:79:dd:e7:ea:af:64:02:ab:45:95:df:e2:
         58:c5:ed:fa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnurK0MMJBkQ6J0MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
ZmUyOGFjMGUtNTk2MS00ZmRhLTk1YjktNGUyNDliNTBhNjJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmXJ9B9Ss/UNUZdMMVcJP85AJsb5ZN2ws7rS
X/sIDnQovg6KDmGwRS4nMP7rHMJruCju2sjUbAq/CYR1hx/jhvDwO4NyNfTr34oL
pC98Gsz2XVVEFuvE7eRumAbTJz6ofCPCYQkzcB/WhukHD21ehsEHXE6cVjl8ZJt3
gD8v1ablNwjwBrFdSRWJTj21/N1PqNIP/hwRpd6a9QWwvikZ8+b6/ehaT4iaKVy0
UEV1S51NXK2fEfocCJhhNlcaRmiGFrl536tv4bZaWXl4nNrUC8CuK/Kk5xhw+Zfp
JhzET7FVhr2FYc8sJgXHEWG6wO9AwC3coTgKm96LldOdDLEkmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJP9ltu41EJObpD7oOp2Iq9t/IsBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYTQ2MWY0OWQtNjEwYS0z
NDI2LTkzMmQtZmVkMTYyYThjMGQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIamMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIL0fC8wIDZK4G0+Y0BDz4gWH27lcWqk2pAajHyyNTXzNrXAnimqT9Iy
hlKADjXoN3AXaURW5RgZLQmjS+DuU6cg7LwBWaOiUgbsrUMtUpbLNIFiT/gh+w3F
dk3o0bTLKHA3jXrJ/kHm07JZGXTjl7uBD58Nn0wvAX/Y/3vz6iQot1eRMO4fJw46
iVg/joePIjYjCWKLBw/OmwjMtDD94rfLDyd+h1f/sfDQBlaPMIO4i0l3ZdiEeq21
qkflItJOiLrqq5WS83gPj7ILd+vBYJndSymEJfoCsu9M69IpezPxlH3OX/7gk3UW
qLVpvbezinnd5+qvZAKrRZXf4ljF7fo=
-----END CERTIFICATE-----