Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b8959f26-bd36-305b-99b3-0f03384fb22f.roa
File:                     b8959f26-bd36-305b-99b3-0f03384fb22f.roa (raw, json)
Hash identifier:          g2I8yE8J9Iw0XyJNgpS9u8F3KAmYQAUjhuxmqVtwj+Y=
Subject key identifier:   91:17:39:48:1C:F3:B1:42:60:05:B5:7F:EE:FC:A3:6E:BD:05:9F:2E
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328583AA7B4F9CD79D11B6FFAB7B180
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b8959f26-bd36-305b-99b3-0f03384fb22f.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     395973
IP address blocks:        104.134.150.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:b4:f9:cd:79:d1:1b:6f:fa:b7:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=e7acf606-737d-414c-b2e6-03268c5d564f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:46:ff:11:49:bf:8f:b5:24:b8:c3:20:6d:4d:
                    c3:36:60:57:ce:57:19:5a:c0:fa:dc:68:e7:6f:52:
                    d9:e0:d9:82:6e:3f:e7:c3:a7:9d:bc:2a:bd:80:06:
                    9b:42:b0:46:6f:e7:a4:83:66:2b:05:ac:9b:0f:a4:
                    79:b9:33:4d:9a:b8:aa:58:f1:52:f6:ff:e7:78:80:
                    7f:77:08:65:92:b3:5a:48:6c:a7:e4:e5:51:6e:0b:
                    97:44:3c:69:92:c2:3b:7a:06:a9:21:d0:b7:00:7c:
                    5e:ab:8a:87:84:92:6b:f6:11:69:af:69:06:e5:7c:
                    9a:82:b9:59:e7:48:40:21:77:80:f9:5e:23:cb:3c:
                    62:25:2d:81:73:76:01:37:48:f5:e8:e3:15:1e:ef:
                    7a:f7:6f:67:d9:63:dc:11:fd:d3:5b:cf:df:bd:b2:
                    95:46:76:94:1c:54:44:8b:93:73:8c:af:62:74:79:
                    17:f4:23:a6:35:8f:51:d5:14:25:55:34:67:53:95:
                    e2:21:ba:36:e3:e6:83:10:c1:6a:54:43:f7:a8:f5:
                    14:b7:d8:1b:f5:be:be:b9:a6:38:f7:21:d6:d3:c8:
                    c6:fb:a2:af:c2:e0:82:a4:b3:04:78:2f:75:ef:ba:
                    d7:55:43:41:ad:96:d1:40:7a:fa:4f:0f:7b:46:a5:
                    a0:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:17:39:48:1C:F3:B1:42:60:05:B5:7F:EE:FC:A3:6E:BD:05:9F:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b8959f26-bd36-305b-99b3-0f03384fb22f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:a8:fa:b3:b7:8b:01:e3:11:5b:d9:f9:1a:a2:29:40:eb:0b:
         e3:4a:87:44:07:a3:11:43:cf:ed:3c:80:f5:e2:5a:ef:50:e8:
         9f:3d:c3:ea:01:c7:78:d7:9a:88:4b:2e:34:30:b5:ca:83:c9:
         e3:ad:c6:8d:2a:a3:18:69:4a:98:c3:36:ed:06:c8:bd:3a:c2:
         93:c0:ab:38:3c:78:1a:11:1b:53:30:a2:c9:03:b0:41:d8:df:
         78:5d:36:6c:8a:32:df:74:25:80:fa:2b:8d:8d:7a:b1:f1:f3:
         ca:3d:74:0f:a1:c6:de:de:8f:90:4e:47:ea:90:2a:d5:78:7f:
         20:ff:e7:cb:03:05:91:8c:b6:8a:48:93:94:1f:5e:8a:ab:51:
         1c:41:0c:78:98:91:37:11:3c:05:08:24:fa:c5:c4:8e:bb:ea:
         54:ab:2b:2d:52:35:f5:cf:09:02:ce:5a:f7:75:13:73:ab:e7:
         ab:00:ba:e5:4a:35:24:a0:b7:6d:7c:13:f7:1a:fa:9f:05:df:
         92:dc:3c:45:58:a5:d6:58:e3:24:49:28:fb:a4:1c:1f:a6:15:
         33:13:0e:d0:ea:51:bb:f6:ee:cb:89:91:88:d1:10:34:5c:ad:
         30:47:bf:ff:91:f1:48:dd:39:83:c8:d0:a3:4b:dd:ea:aa:06:
         c7:a3:a1:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----