Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ac22fefa-7c44-3ca8-bad3-eff536f1d1b4.roa
File:                     ac22fefa-7c44-3ca8-bad3-eff536f1d1b4.roa (raw, json)
Hash identifier:          QWpnQwvnkmokVqBrVX5poxnPehgzI3bv8TIVcNeEZWU=
Subject key identifier:   2C:F5:88:7C:C1:91:76:48:4B:5A:03:FD:5C:FE:EB:6F:C7:3D:AB:50
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328583AA7A93951CA41379272C8F4D0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ac22fefa-7c44-3ca8-bad3-eff536f1d1b4.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     41264
IP address blocks:        104.133.172.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:a9:39:51:ca:41:37:92:72:c8:f4:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=5103527a-236c-4f71-a17f-4accde534668
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:78:7e:32:b7:d8:9d:c7:a8:53:b8:e6:e5:ef:
                    63:1f:5a:7a:e3:19:69:61:43:1d:f7:cc:bb:4a:1f:
                    d5:2d:3d:c5:44:47:1a:e5:1f:df:fc:80:79:e9:a2:
                    e1:1c:94:9e:c0:d3:4c:49:7a:ae:fb:fc:0b:dd:bf:
                    32:7a:20:d2:7b:35:1e:33:b9:b2:00:62:ba:ac:32:
                    b9:ba:72:76:47:5d:40:28:90:32:6a:d2:65:b1:eb:
                    62:6f:05:ca:ee:2d:cc:b5:b3:96:b7:e7:0f:2f:19:
                    d3:0b:59:2b:c7:1f:d0:74:39:88:56:e6:d6:58:ea:
                    dc:ed:2e:9a:f3:28:7a:85:8c:1c:d0:33:40:37:2f:
                    2d:59:22:fe:4c:05:c1:04:61:b3:e9:ce:cd:86:d4:
                    49:6e:59:31:9b:1d:d0:44:86:9a:3a:21:b5:17:cc:
                    09:b4:d4:dd:bf:51:04:c8:c6:db:2c:cf:ce:0b:9b:
                    6d:29:e2:69:92:33:7c:1d:74:33:ae:4f:9a:c0:a5:
                    84:60:ff:74:dc:f7:1c:21:e1:ec:53:95:6a:d5:6e:
                    78:37:c9:68:f8:d0:ff:51:72:52:1b:38:41:ef:5e:
                    d4:2b:c6:8d:06:66:77:ea:6d:e0:40:b5:7f:39:15:
                    04:2c:a3:5e:39:c0:91:c4:4f:cd:c5:d7:88:e5:33:
                    3a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:F5:88:7C:C1:91:76:48:4B:5A:03:FD:5C:FE:EB:6F:C7:3D:AB:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ac22fefa-7c44-3ca8-bad3-eff536f1d1b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:06:74:31:8a:b0:af:da:80:13:97:21:6a:b3:84:70:10:24:
         de:52:ae:84:7a:59:0b:f4:35:d7:1f:25:60:4f:c3:51:97:d5:
         1e:c8:07:9a:bb:de:75:44:c3:9a:f3:bf:5c:1c:2d:5c:e8:9d:
         1d:94:80:e8:54:0c:21:21:85:de:3a:fa:41:a1:ab:28:5d:3d:
         e7:2d:16:09:31:a2:e8:fe:29:bd:75:72:da:27:d0:7d:32:8c:
         f2:7f:ed:ea:9c:dd:d0:a4:af:35:7c:96:ef:62:28:24:b7:df:
         bb:77:b5:16:7d:a3:6f:3b:1d:39:bb:49:48:73:56:c3:68:ea:
         9a:10:02:e5:0e:5e:b2:a6:2c:8b:43:c6:9e:5b:8e:c9:53:6c:
         f0:97:e7:2c:e6:57:13:72:cb:c6:5e:64:92:cc:bd:da:c5:65:
         ab:ed:bd:8d:02:72:2f:ee:a3:8d:a6:7b:9e:f1:fe:9d:4d:2b:
         85:f9:8c:18:4f:82:1f:e7:d1:ae:02:ea:d8:4a:d8:12:f7:bb:
         36:84:d9:40:07:d5:f5:d5:5f:2f:e8:ca:38:80:38:ab:61:74:
         81:77:9b:01:8a:a3:99:f5:6e:4d:ce:60:b9:0b:a4:36:35:6e:
         e0:c9:64:3c:a0:f9:fc:69:a9:74:e2:0d:a8:3c:61:4b:be:7f:
         e3:60:98:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----