Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b9e94680-6071-3517-ab96-7cf20ed2a66f.roa
File:                     b9e94680-6071-3517-ab96-7cf20ed2a66f.roa (raw, json)
Hash identifier:          D1dVSiyrDuXG4lbVtJyRq/6IApq4H3RAnP+4Ckws64Q=
Subject key identifier:   9D:24:25:DF:1C:C4:97:7A:3E:14:02:DC:2A:E6:DB:73:C1:97:4C:6E
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328583AA7B1E635DBF0DF5AB53F2380
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b9e94680-6071-3517-ab96-7cf20ed2a66f.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     41264
IP address blocks:        104.132.63.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:b1:e6:35:db:f0:df:5a:b5:3f:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=99de1ea5-de1d-4e38-9751-b9f0f82ae13f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:76:59:fe:44:29:0d:66:03:9b:65:28:10:6d:
                    8b:c1:7e:5d:91:b0:c8:bc:ba:bc:9d:2e:9a:a7:a1:
                    c3:7d:51:28:1e:6e:68:be:c4:61:d5:f4:66:8f:d0:
                    13:31:63:78:1a:5a:a7:9b:40:23:93:7a:e9:51:ee:
                    96:25:6c:61:8e:98:88:d7:11:40:23:c9:d5:b4:ad:
                    91:fa:45:b7:71:b5:68:be:2e:81:44:a2:82:6b:df:
                    1c:08:94:a7:3c:12:bf:6f:05:49:ee:aa:44:ba:c9:
                    12:20:10:b0:38:ba:be:a7:a7:f8:b7:f2:3e:88:9c:
                    03:b8:26:d4:7a:42:f3:f3:1a:35:d0:b4:50:db:a0:
                    10:7d:8c:4d:16:d5:c9:cf:3f:94:77:02:dc:e1:4b:
                    b5:37:f3:d7:7e:a5:ed:a5:44:1d:b2:8d:52:9c:b8:
                    0c:41:c8:26:c8:87:e6:4d:62:8c:19:eb:05:01:c6:
                    40:ab:7b:20:dc:f5:dc:50:74:a2:53:b4:25:4a:e3:
                    d9:3a:ee:e9:ee:d5:d5:8c:46:f5:69:52:2f:7d:c9:
                    93:05:d5:5b:e7:42:56:7f:c6:87:9f:d5:a4:b2:47:
                    97:33:8d:f2:6d:03:96:b0:19:be:45:db:99:12:98:
                    2f:28:44:9c:e5:2d:14:fa:4b:55:2c:25:e4:1d:cc:
                    3a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:24:25:DF:1C:C4:97:7A:3E:14:02:DC:2A:E6:DB:73:C1:97:4C:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b9e94680-6071-3517-ab96-7cf20ed2a66f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:8a:89:29:e4:ac:41:dc:f6:6e:0e:6b:09:7e:58:d6:67:7f:
         65:6f:7f:aa:5e:3f:a1:89:10:a5:f7:e6:34:4f:eb:17:e1:c4:
         47:13:77:3a:8d:d9:cc:a2:3f:53:9c:11:a9:c8:83:ac:13:e7:
         b1:cd:ba:50:35:98:d5:1b:37:60:53:84:48:7e:03:80:f1:3b:
         ad:f8:19:13:b5:2f:95:51:3d:47:3b:1e:3e:88:42:82:6a:a2:
         30:57:e6:9f:86:54:e5:cc:b0:c7:ea:db:67:71:ea:9a:d6:03:
         62:39:02:38:6d:2c:eb:d6:5b:da:74:7c:dd:26:1c:7d:f4:df:
         46:83:0e:7e:33:b0:c2:fb:0f:8f:71:c1:cc:df:8c:06:8f:79:
         65:cc:4d:bd:16:d4:33:ad:f9:3a:1f:62:d8:93:f3:34:ff:58:
         b2:5e:ef:b6:5f:eb:d9:4b:72:30:d7:54:6c:2f:51:fd:59:9c:
         49:ea:5f:bf:6f:ca:f1:f6:a2:0d:a6:31:e5:5f:f6:df:52:96:
         50:e9:ec:b2:37:a4:2e:a8:76:1f:03:d1:27:c2:f8:90:c4:e7:
         5c:38:b8:c3:97:0b:0f:54:6e:e7:db:43:45:a7:2f:af:41:cf:
         37:36:7d:87:ca:e6:f6:d3:88:b1:7e:8d:00:00:ce:bf:fd:8d:
         e5:85:f1:13
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnseY12/DfWrU/I4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
OTlkZTFlYTUtZGUxZC00ZTM4LTk3NTEtYjlmMGY4MmFlMTNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgnZZ/kQpDWYDm2UoEG2LwX5dkbDIvLq8nS6a
p6HDfVEoHm5ovsRh1fRmj9ATMWN4Glqnm0Ajk3rpUe6WJWxhjpiI1xFAI8nVtK2R
+kW3cbVovi6BRKKCa98cCJSnPBK/bwVJ7qpEuskSIBCwOLq+p6f4t/I+iJwDuCbU
ekLz8xo10LRQ26AQfYxNFtXJzz+UdwLc4Uu1N/PXfqXtpUQdso1SnLgMQcgmyIfm
TWKMGesFAcZAq3sg3PXcUHSiU7QlSuPZOu7p7tXVjEb1aVIvfcmTBdVb50JWf8aH
n9WkskeXM43ybQOWsBm+RduZEpgvKESc5S0U+ktVLCXkHcw6FwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ0kJd8cxJd6PhQC3Crm23PBl0xuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYjllOTQ2ODAtNjA3MS0z
NTE3LWFiOTYtN2NmMjBlZDJhNjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIQ/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ6KiSnkrEHc9m4Oawl+WNZnf2Vvf6peP6GJEKX35jRP6xfhxEcTdzqN
2cyiP1OcEanIg6wT57HNulA1mNUbN2BThEh+A4DxO634GRO1L5VRPUc7Hj6IQoJq
ojBX5p+GVOXMsMfq22dx6prWA2I5AjhtLOvWW9p0fN0mHH3030aDDn4zsML7D49x
wczfjAaPeWXMTb0W1DOt+TofYtiT8zT/WLJe77Zf69lLcjDXVGwvUf1ZnEnqX79v
yvH2og2mMeVf9t9SllDp7LI3pC6odh8D0SfC+JDE51w4uMOXCw9UbufbQ0WnL69B
zzc2fYfK5vbTiLF+jQAAzr/9jeWF8RM=
-----END CERTIFICATE-----
Generated at Sun Oct 22 04:02:13 2023 by rpki-client on console-ams.rpki-client.org