Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b617fcf2-1bcb-3f69-b655-9a8c4df122e9.roa
File:                     b617fcf2-1bcb-3f69-b655-9a8c4df122e9.roa (raw, json)
Hash identifier:          o15R0KSKDKMS+LCUrVM2aDH0d27p8utBDRdTMir5EpY=
Subject key identifier:   36:3C:F2:18:14:4A:EF:C1:6C:38:24:69:6B:75:85:E4:95:56:5C:DB
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328583AA7C287747AEA8BD3A0C64C70
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b617fcf2-1bcb-3f69-b655-9a8c4df122e9.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     41264
IP address blocks:        104.133.206.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:c2:87:74:7a:ea:8b:d3:a0:c6:4c:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=ff1a9d25-3d59-456d-9464-90d5331d5221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a6:d4:19:65:26:e6:b4:f3:5a:2f:b7:36:b0:
                    77:6d:91:ab:29:65:fc:c3:00:c7:39:cb:94:8c:31:
                    2d:fd:a3:4e:96:b8:fc:4a:91:3e:01:13:60:06:f8:
                    d6:2d:77:be:73:27:82:e9:c6:6e:2d:b2:25:88:4b:
                    b0:ab:c3:3c:ac:2a:71:90:fa:12:ae:c8:fe:8d:cb:
                    7c:1f:0c:c1:6a:99:5e:78:85:f1:ba:0e:3c:95:5c:
                    e0:51:a6:25:77:12:a9:99:a4:43:25:8c:b0:e8:3e:
                    44:5f:90:61:f5:94:69:ca:7e:60:47:55:bf:27:a0:
                    dc:73:2f:50:45:fa:9a:5f:8d:29:f6:1b:05:c9:1b:
                    6c:c3:a7:fc:df:c4:e2:0a:25:7b:61:13:cb:87:05:
                    03:72:7b:98:5e:4b:aa:89:f4:84:c4:05:41:af:47:
                    62:24:09:5f:47:46:ac:17:d1:2e:69:cc:f8:34:79:
                    7d:97:0d:8b:78:cc:96:45:b3:7d:17:65:c2:dd:dc:
                    a0:09:1e:54:21:01:09:fc:02:6a:cd:d0:21:b6:2c:
                    d3:cc:ed:96:a9:14:a1:32:ef:c3:b4:8e:d2:a4:52:
                    b9:cd:05:de:95:87:13:64:d5:45:0f:25:7e:c3:96:
                    05:17:1b:b7:e9:0b:bd:d5:b7:75:9c:3f:2b:e1:89:
                    79:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:3C:F2:18:14:4A:EF:C1:6C:38:24:69:6B:75:85:E4:95:56:5C:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b617fcf2-1bcb-3f69-b655-9a8c4df122e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:c1:6a:24:d6:ae:94:0e:ad:12:ae:b0:3e:90:60:27:9b:9f:
         4a:a3:58:1c:69:a6:73:66:7f:b1:b9:df:b5:59:a3:61:65:25:
         85:de:e5:9c:10:f1:3d:de:c5:8d:8c:28:76:50:92:e5:42:17:
         8f:06:6b:c6:5b:02:f7:fe:3c:48:d0:e1:c2:de:75:5d:69:de:
         72:28:4b:ff:ad:98:72:7a:2b:53:f0:33:83:fc:92:5e:a8:78:
         77:27:ea:4e:89:c9:f3:af:99:ae:99:5c:94:f1:60:33:cd:7b:
         bb:56:3b:69:ff:32:a6:c2:e6:61:90:9a:20:81:bd:63:ec:69:
         c0:de:a3:35:d1:2b:a2:93:ab:2c:84:94:ab:ff:0f:ca:6a:33:
         02:ab:06:50:a1:fc:de:07:48:bb:2b:c0:94:f8:4f:07:5c:39:
         9a:c6:7a:69:c1:83:40:19:6c:94:f6:32:4a:ee:32:5b:3e:54:
         dc:57:3d:97:78:79:26:de:df:71:81:cb:87:4f:b2:04:27:4d:
         b7:8c:c7:3e:0b:3e:90:53:8e:03:a2:3f:22:d7:b2:1c:08:95:
         17:94:c5:34:e2:87:51:ac:0e:c5:b4:37:22:f2:dc:60:92:03:
         83:3d:fb:d6:a1:6b:fa:02:d5:7d:71:be:24:b4:5b:5b:15:11:
         f3:f6:1b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----