Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c34f4b2a-714e-34ec-8d19-e47cc177b0a1.roa
File:                     c34f4b2a-714e-34ec-8d19-e47cc177b0a1.roa (raw, json)
Hash identifier:          gYA85UJg+s//AE5xs5TH/Nw9FiGZof2WPRnw3S2XfZA=
Subject key identifier:   DF:DC:D2:D9:78:45:1C:58:30:73:3A:11:38:5B:B8:BB:B5:1B:0C:32
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328583AA7B8E87AF0DF7765764AE680
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c34f4b2a-714e-34ec-8d19-e47cc177b0a1.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     15169
IP address blocks:        104.134.160.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:b8:e8:7a:f0:df:77:65:76:4a:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=0b7b7d33-53e6-4f4e-a972-7154dee37546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ff:80:6a:1f:9f:c2:f5:eb:1a:b9:34:00:80:
                    ed:1e:c5:e2:a7:c7:0b:9d:55:ce:24:cd:5f:c1:aa:
                    bf:98:fb:d6:d6:7b:4d:f5:35:ee:82:00:6c:5f:0c:
                    71:87:92:f3:a6:fa:b8:df:93:d4:9e:11:41:20:74:
                    f2:e1:c8:91:7b:ca:03:ac:64:a2:ae:4d:b4:fc:2d:
                    73:90:a6:11:e2:31:35:9d:1d:5e:90:f5:8e:92:4a:
                    12:90:16:60:1d:1c:b8:5c:07:e7:35:36:6f:ae:28:
                    0a:fa:51:8c:a2:b6:60:50:65:bf:14:ac:f3:dc:bc:
                    a4:6e:04:0d:ac:44:e2:3c:a7:0c:56:f5:a2:9e:3f:
                    81:0d:dc:91:49:14:bd:f7:d7:fe:51:a9:8b:90:78:
                    0c:cd:c3:c8:35:b1:12:e8:78:02:20:b1:82:e8:e8:
                    6b:5d:b2:63:cb:d6:1e:fe:9d:82:67:06:b8:68:b8:
                    47:3e:e6:25:86:f8:b8:44:f2:47:9f:32:a2:69:60:
                    01:4a:9d:17:c2:51:6d:b4:dc:9a:bc:b0:d8:76:ee:
                    ec:b3:24:43:3d:2e:70:f2:09:84:4a:6a:a5:71:78:
                    c9:af:c6:d7:33:35:0f:c2:98:f6:cf:da:99:b5:f5:
                    b5:70:22:f4:fb:f0:0d:93:7e:20:c6:f4:e7:81:b1:
                    cc:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:DC:D2:D9:78:45:1C:58:30:73:3A:11:38:5B:B8:BB:B5:1B:0C:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c34f4b2a-714e-34ec-8d19-e47cc177b0a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:2d:82:1e:9e:b0:29:20:09:4f:c0:53:f4:0a:9e:23:d3:35:
         40:77:3c:d7:e9:e7:1d:12:66:78:00:30:b8:d1:f1:01:e8:15:
         23:21:f3:8b:fb:42:de:e3:74:c1:90:bb:85:ee:ad:89:2e:4a:
         4c:32:99:79:dd:34:12:af:3c:83:9f:f2:45:bc:f9:a7:42:a9:
         e8:28:20:81:c3:ac:bc:d3:bb:3c:90:33:a9:d2:ed:67:2d:33:
         42:34:ec:b1:61:62:c3:b0:ae:72:51:2a:77:37:c9:ef:ce:fe:
         ed:cd:f0:85:95:85:85:4b:cc:2d:46:d6:00:4b:f6:09:6d:0b:
         91:ac:57:17:d9:d5:4f:51:74:2b:78:8a:a6:20:7f:ab:8f:4c:
         ba:1e:bf:a8:db:c5:77:a1:1f:59:94:52:76:c7:5a:fc:5b:cf:
         f4:98:c6:52:4c:25:ec:21:18:af:80:97:fa:df:9d:d9:c4:b9:
         18:41:cb:dd:cc:f8:16:37:4f:c7:33:9f:2c:d6:a7:d8:be:8e:
         e1:f0:83:17:ae:63:8e:e3:64:bd:a1:65:08:71:a3:6c:9c:04:
         e3:7d:b3:fb:ee:b6:8b:fa:47:f0:e9:30:e9:f6:fb:60:e9:0e:
         09:ba:3a:0f:cb:6f:ec:40:b1:54:ca:38:27:08:23:87:a4:9a:
         71:f4:77:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:37 2023 by rpki-client on console-fra.rpki-client.org