Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bd37bda9-ee07-3efe-8a26-36f0f6304441.roa
File:                     bd37bda9-ee07-3efe-8a26-36f0f6304441.roa (raw, json)
Hash identifier:          Bg2dzvyy8pTUtr7IwkVaarSg8oKnsF6lLL7hrVOvpO8=
Subject key identifier:   EA:D1:D9:23:B8:F5:76:84:97:D1:0A:0A:42:33:17:FC:33:32:64:6E
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328583AA7B8494D2ED65D4DDEF388C0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bd37bda9-ee07-3efe-8a26-36f0f6304441.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     15169
IP address blocks:        104.134.216.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:b8:49:4d:2e:d6:5d:4d:de:f3:88:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=e1d70d41-7efa-4519-a137-877f91dd8eaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:06:6c:a5:7f:6f:07:0f:3f:db:ba:5a:f9:9a:
                    e0:ec:7f:01:c5:39:90:84:69:43:27:58:b5:fd:23:
                    67:81:ef:16:ec:fc:b4:80:bc:c7:97:ad:33:0c:c1:
                    39:60:e8:7c:e9:ae:17:e0:bb:96:64:54:ea:b4:61:
                    83:d8:20:7a:99:7f:1f:5c:03:cb:06:9a:a8:aa:45:
                    d0:34:0f:41:f0:b3:07:bd:11:fa:5a:1b:a9:70:46:
                    38:be:fc:74:e9:94:8c:74:dd:30:bb:84:b1:49:e1:
                    ca:b9:10:b9:96:64:10:5e:58:7d:5e:bb:d8:f5:44:
                    a3:16:39:b0:ee:47:b6:75:57:b4:24:4c:a6:db:45:
                    34:09:c5:b0:8f:9c:19:b6:e1:e7:c1:04:6c:65:97:
                    95:dc:a2:f8:ce:73:00:e7:a7:b5:2d:65:f5:24:9d:
                    da:98:cd:be:af:ca:22:73:82:d6:84:9a:de:05:5f:
                    1d:63:4c:18:92:bf:41:74:e4:1a:6a:b6:f8:2e:35:
                    81:cc:e2:df:61:c7:ad:b6:0a:f7:26:fc:29:d4:52:
                    e6:cb:09:4f:c4:83:a5:b0:41:65:59:ea:61:e9:00:
                    ca:93:75:8b:a3:93:76:54:37:3a:cc:91:d8:b5:2f:
                    66:d5:1d:24:f5:b7:5b:a5:87:68:4f:83:35:b9:39:
                    67:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:D1:D9:23:B8:F5:76:84:97:D1:0A:0A:42:33:17:FC:33:32:64:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bd37bda9-ee07-3efe-8a26-36f0f6304441.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:ed:7f:91:73:d9:86:66:53:5a:ef:d0:7e:05:06:c9:3c:5e:
         1f:31:6c:d1:97:7b:b4:c0:8d:2b:c7:98:90:ef:7d:97:36:82:
         d3:48:84:f4:3c:5b:eb:40:a3:95:bb:5a:a8:51:b0:ff:a4:25:
         53:81:df:ed:49:a3:f2:35:c2:92:bb:60:5a:2b:c3:3c:ab:83:
         eb:e7:ff:19:15:e6:8e:b1:36:2e:a9:74:03:b7:46:b6:60:7d:
         71:ff:ae:54:bc:88:ca:7f:c3:d4:06:47:90:ad:ad:bc:52:3a:
         6b:c8:12:a9:a6:a5:e0:c2:54:a4:57:bc:88:ab:ae:b9:02:74:
         1b:6b:40:1d:9d:40:78:08:a9:77:6c:95:9e:a1:7f:57:3c:69:
         a0:89:9a:56:a5:ec:4e:07:a0:86:79:ec:52:52:67:b7:fb:59:
         30:5d:90:7f:99:1d:5c:d8:9e:7d:91:a1:4b:78:b1:ce:92:77:
         cc:7c:94:f3:be:23:00:ad:a3:d3:bb:b6:a3:4b:1f:d1:ce:35:
         d0:60:96:8a:c3:e9:b7:af:2f:bf:eb:bc:f6:25:97:59:bf:0c:
         a8:6b:e4:a5:ec:c6:42:07:8c:0c:92:0b:f8:97:45:e0:df:86:
         2f:e7:0e:fe:b6:6a:6f:27:d3:ae:3e:32:e6:53:8d:b0:05:b9:
         9f:c2:83:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----