Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b9049883-4483-3a0e-9d9c-710c7bea5eb4.roa
File:                     b9049883-4483-3a0e-9d9c-710c7bea5eb4.roa (raw, json)
Hash identifier:          FWo/7LztzBtM/JzFxklkworf0HDeMx595uVV8J3V/+g=
Subject key identifier:   2D:46:F9:81:43:D7:6F:E9:93:FF:A5:CE:5D:B7:2A:C9:33:B2:A5:97
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328583AA7BA7FBCE6D497552CA64940
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b9049883-4483-3a0e-9d9c-710c7bea5eb4.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     395973
IP address blocks:        104.134.142.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:ba:7f:bc:e6:d4:97:55:2c:a6:49:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=2e1d7b0d-6225-4f8f-8bb7-a30e845652a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:97:72:ce:a6:fb:4c:18:b0:e6:60:e4:1b:11:
                    ce:e0:ca:aa:98:9b:c6:44:50:da:6d:e6:a2:2b:9e:
                    61:a1:a2:63:ea:8b:99:8e:fe:2b:0e:8f:7c:d1:39:
                    15:44:89:26:b2:eb:37:92:4f:2f:72:9e:97:c2:54:
                    64:be:1f:69:6b:12:47:8f:f9:3b:a5:a9:46:3b:9e:
                    54:a8:46:20:77:78:c8:c6:72:96:fb:8d:1d:3a:77:
                    ef:4e:15:ed:d0:fb:fd:8e:9b:d5:39:fa:10:03:fc:
                    b5:03:27:70:52:f5:17:d7:ad:a4:4b:58:e7:f7:5d:
                    a8:af:31:7e:7f:b6:0f:8f:ce:b7:54:08:cb:13:75:
                    ac:d6:3e:bc:da:34:51:d7:a8:04:e8:7c:36:79:1f:
                    f2:36:49:c2:ae:a1:35:a2:f1:1b:1e:d4:d4:29:00:
                    63:6d:6d:14:1e:43:35:84:fa:81:d5:2e:9b:48:1b:
                    a0:cb:ba:e2:f0:cc:cf:58:17:9b:af:b1:b1:1b:05:
                    4b:87:b3:d1:e5:f7:38:5b:08:77:51:08:39:b1:85:
                    22:45:0a:2f:37:bc:78:39:81:f0:cb:44:3c:3d:c5:
                    23:cc:54:46:96:c2:8a:ad:ae:0e:c2:52:8f:45:3d:
                    cd:9b:d2:b7:b5:9a:6e:e0:fb:36:9d:b3:b2:6f:d6:
                    3e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:46:F9:81:43:D7:6F:E9:93:FF:A5:CE:5D:B7:2A:C9:33:B2:A5:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b9049883-4483-3a0e-9d9c-710c7bea5eb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:21:93:b4:80:76:23:e0:c7:32:ac:48:5d:ea:1f:fe:7a:93:
         5d:e6:eb:c7:81:77:3e:13:3e:82:58:0a:1c:82:ea:26:3d:59:
         c9:63:80:07:9f:ed:ad:a0:c7:e3:d6:38:38:6a:6e:2b:2c:ab:
         ef:b1:0e:5a:1e:93:3a:ce:db:6d:6a:9c:32:11:ae:63:f9:7a:
         f3:08:a3:f9:80:ff:b6:09:7d:63:84:3b:14:17:2c:d7:24:18:
         d2:1d:ad:05:60:f2:fd:9d:be:50:34:71:f0:6f:07:10:01:50:
         72:c6:3e:5c:f8:be:4c:46:0a:6a:a8:0e:5e:aa:e2:6b:d3:7d:
         86:90:94:02:11:36:b0:d1:6f:7d:bf:00:56:4d:29:2e:75:1d:
         c0:56:31:89:03:db:41:d1:6c:f4:b9:de:19:61:8a:b8:12:04:
         5c:42:46:c5:44:98:ff:0e:ce:37:f6:dc:27:a2:de:75:a6:c2:
         2f:b6:af:60:47:c3:11:d8:51:52:40:dc:c6:e8:f1:bf:97:f0:
         2b:71:1d:e9:16:62:46:c7:8b:01:53:83:c6:81:cf:0c:37:cc:
         15:32:f2:2e:eb:10:75:84:b6:20:8a:db:36:79:02:2e:a3:b3:
         77:a3:d5:cd:31:6b:e7:ba:7a:6b:6f:5d:90:32:3b:0c:c8:16:
         21:a4:20:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----