Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b3601d06-0e33-39bd-bd9c-e7f22e155418.roa
File:                     b3601d06-0e33-39bd-bd9c-e7f22e155418.roa (raw, json)
Hash identifier:          8CVOyLpbU6qX+jyl7+iZgNwK+7CfzScppIuxy9i2rVM=
Subject key identifier:   88:94:C3:0F:F5:71:D5:89:38:6C:02:4E:D7:E9:08:C6:80:60:4A:AD
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A16A58D14C934DFCB5A7EC0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b3601d06-0e33-39bd-bd9c-e7f22e155418.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.132.6.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:16:a5:8d:14:c9:34:df:cb:5a:7e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=dadffb09-81f6-42e9-b215-8b4901b314f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:5a:c5:c7:1e:21:d9:de:10:29:82:d4:68:a3:
                    e0:1d:bf:49:84:60:13:d9:11:ae:d6:dd:bd:ec:4b:
                    88:d2:b4:f4:e3:83:89:ad:75:0f:a0:11:e6:54:4a:
                    30:66:59:3c:c5:2f:80:cd:1a:c8:37:1f:d2:11:b5:
                    8f:5a:e2:81:9b:0f:16:ef:54:de:f8:80:5c:f5:30:
                    fd:fc:f7:d3:ed:9d:7f:fd:8a:54:e4:5f:a5:f5:3d:
                    67:95:d4:31:0e:72:94:1e:14:8d:5d:5f:03:12:34:
                    bb:a9:8a:e9:e3:f9:f1:79:43:3b:7f:8a:a8:e1:18:
                    6f:f8:08:b6:f2:9b:7a:d7:88:9c:46:f3:d4:c1:b6:
                    5e:7f:2b:62:fd:d5:ca:74:5c:5f:85:2c:84:28:bb:
                    1e:57:c0:73:df:ca:90:65:21:31:fd:d3:5f:da:47:
                    5d:6c:aa:f8:74:e7:58:b6:e8:ff:38:cd:a9:2d:55:
                    17:e2:f8:e9:65:b4:b0:c9:62:38:c3:c8:b2:7c:29:
                    1d:5d:dd:69:c5:be:49:e0:5f:cd:bd:80:68:64:1b:
                    8f:a3:95:bc:27:06:5a:35:f6:19:af:69:b6:13:5f:
                    1b:63:36:bc:96:da:02:79:13:4b:e3:ad:47:0e:d5:
                    ef:4b:55:98:d0:df:79:c0:f9:b6:45:ba:65:d7:01:
                    d5:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:94:C3:0F:F5:71:D5:89:38:6C:02:4E:D7:E9:08:C6:80:60:4A:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b3601d06-0e33-39bd-bd9c-e7f22e155418.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:b5:04:0a:90:cb:c6:1a:02:4b:df:51:73:ea:02:37:85:8b:
         7b:96:30:bf:48:b1:a5:9e:cc:ea:ed:0d:1d:fa:1c:15:35:d3:
         54:75:cb:10:ca:23:f3:d6:cd:20:78:d5:fe:9a:ff:d9:d6:13:
         82:00:3b:e1:f1:58:a7:fe:fe:15:84:1c:d0:96:87:af:6c:c2:
         4a:aa:27:a5:47:3e:a9:4d:f0:d8:eb:0c:66:ea:3b:ce:e0:d7:
         df:32:f7:86:72:46:fa:52:d4:63:a7:e0:42:06:f4:b9:cc:0e:
         45:24:88:19:a2:7e:62:4d:d1:3c:c0:1b:cc:72:82:a2:77:12:
         a3:fe:b1:a5:81:53:8c:c3:7b:6a:fc:3c:f3:a8:fd:72:aa:e2:
         ae:02:53:c1:e7:2b:12:4a:e6:a0:33:96:c6:d6:d8:24:9c:60:
         06:9c:e2:1f:01:72:45:73:2f:5d:46:6b:4e:3d:8f:93:91:b4:
         6f:af:2b:ed:c4:11:fb:56:11:11:b3:22:75:07:21:05:d6:b0:
         a5:73:ea:16:c9:92:89:2c:eb:fc:59:50:f7:aa:db:fe:8f:bb:
         99:15:36:db:fe:53:13:68:e1:ec:99:86:4a:4a:71:69:78:61:
         6e:dd:43:14:81:aa:c6:4b:09:06:ed:d3:97:5d:29:31:ed:22:
         96:e3:8f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----