Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c3f020f1-57d2-3b2c-ad4b-f7a11e8ddf50.roa
File:                     c3f020f1-57d2-3b2c-ad4b-f7a11e8ddf50.roa (raw, json)
Hash identifier:          wgO+b0j58typW67EMuRcMRzYFfoVHW/n6f0wDMc8cfg=
Subject key identifier:   8F:C7:08:A9:FB:DD:CA:A0:15:84:FC:B9:83:74:35:10:D7:20:97:65
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328583AA7A3C144F4FEBB706A1B80E0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c3f020f1-57d2-3b2c-ad4b-f7a11e8ddf50.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     15169
IP address blocks:        104.134.187.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:a3:c1:44:f4:fe:bb:70:6a:1b:80:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=53b59df4-1a1f-49a6-ab8d-d70e27fb293d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a5:79:af:ba:53:8d:c5:71:06:76:8a:7a:4e:
                    22:ba:f0:9d:87:bb:ae:8f:3e:24:bc:8f:93:41:5e:
                    c0:07:15:7c:6c:90:39:a4:d9:6a:d9:f5:1d:a9:38:
                    dd:43:e3:3c:28:85:10:88:9f:f8:10:5e:cd:6f:95:
                    fe:a6:c0:8e:62:13:18:db:eb:e9:4a:e6:a6:55:fe:
                    a9:57:23:a4:dc:53:80:66:48:c1:89:4e:51:f7:52:
                    e3:90:02:ef:49:7b:67:98:42:74:f1:7a:4d:00:1f:
                    a5:0d:4d:85:5e:69:9c:07:af:f3:4a:87:fa:cb:97:
                    76:a3:2b:29:c8:f3:b9:a8:2e:50:7e:ef:98:d3:01:
                    63:ac:61:d4:c7:b2:dc:a2:e9:cd:fa:21:f4:d3:39:
                    82:c0:53:c3:24:9a:17:07:75:f0:35:a4:4a:d5:2c:
                    93:06:56:22:d6:50:a9:b1:6a:58:4e:da:87:41:da:
                    9f:fe:29:e9:ef:08:a8:6c:fd:ab:3b:08:0e:d6:31:
                    53:73:2d:3d:7a:cf:e7:de:78:b1:d7:8c:1c:f2:c7:
                    d5:42:27:0d:ef:e0:39:b4:a3:3d:76:bf:3c:65:04:
                    44:b8:a3:9d:b8:0c:42:d3:2c:bf:21:9b:10:1e:38:
                    56:62:79:aa:f0:c6:ef:54:32:65:36:94:06:cb:05:
                    f4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:C7:08:A9:FB:DD:CA:A0:15:84:FC:B9:83:74:35:10:D7:20:97:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c3f020f1-57d2-3b2c-ad4b-f7a11e8ddf50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:ce:7e:d9:a0:79:37:13:b4:7c:c7:94:11:c2:79:a7:5e:be:
         a3:1b:54:37:b6:ef:f2:20:30:c5:7c:82:ad:6c:97:38:96:4d:
         e0:8b:2a:15:fd:33:fc:39:15:4f:f4:21:55:21:34:7f:6b:a8:
         bf:e5:55:c1:f7:27:2b:64:0d:3b:7e:10:28:57:2c:56:ab:a2:
         f2:e7:17:fe:b8:61:4e:d9:65:a6:ef:c2:71:c7:5a:b5:7d:0d:
         5c:32:dc:ae:c7:a4:16:be:70:32:9d:2d:cf:43:74:7e:da:0f:
         17:bd:b7:06:e2:b0:c6:0e:2b:50:54:24:bd:f4:00:53:1a:e1:
         90:48:a5:6d:7f:b0:4a:fd:a9:ce:4f:bb:53:53:7e:ac:4e:b8:
         ff:a2:43:64:7f:13:b8:02:17:1b:b6:0c:15:4d:2c:63:5e:46:
         00:95:3b:b6:69:93:f4:b0:32:b0:92:bc:17:46:a5:59:94:16:
         64:e9:99:f8:93:07:3d:32:ea:c5:cb:27:b2:a6:63:79:97:16:
         92:6f:de:2d:b0:96:1e:e0:63:f1:f6:a5:15:61:d4:50:2f:ca:
         c7:77:46:73:a6:0c:16:3d:68:0c:f1:c1:5b:0f:3a:bd:85:4f:
         43:10:a6:55:9b:51:7c:4f:43:aa:2a:36:61:b8:1c:15:85:24:
         35:d1:da:7c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqno8FE9P67cGobgOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
NTNiNTlkZjQtMWExZi00OWE2LWFiOGQtZDcwZTI3ZmIyOTNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKV5r7pTjcVxBnaKek4iuvCdh7uujz4kvI+T
QV7ABxV8bJA5pNlq2fUdqTjdQ+M8KIUQiJ/4EF7Nb5X+psCOYhMY2+vpSuamVf6p
VyOk3FOAZkjBiU5R91LjkALvSXtnmEJ08XpNAB+lDU2FXmmcB6/zSof6y5d2oysp
yPO5qC5Qfu+Y0wFjrGHUx7LcounN+iH00zmCwFPDJJoXB3XwNaRK1SyTBlYi1lCp
sWpYTtqHQdqf/inp7wiobP2rOwgO1jFTcy09es/n3nix14wc8sfVQicN7+A5tKM9
dr88ZQREuKOduAxC0yy/IZsQHjhWYnmq8MbvVDJlNpQGywX0xwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI/HCKn73cqgFYT8uYN0NRDXIJdlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYzNmMDIwZjEtNTdkMi0z
YjJjLWFkNGItZjdhMTFlOGRkZjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIa7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABfOftmgeTcTtHzHlBHCeadevqMbVDe27/IgMMV8gq1slziWTeCLKhX9
M/w5FU/0IVUhNH9rqL/lVcH3JytkDTt+EChXLFarovLnF/64YU7ZZabvwnHHWrV9
DVwy3K7HpBa+cDKdLc9DdH7aDxe9twbisMYOK1BUJL30AFMa4ZBIpW1/sEr9qc5P
u1NTfqxOuP+iQ2R/E7gCFxu2DBVNLGNeRgCVO7Zpk/SwMrCSvBdGpVmUFmTpmfiT
Bz0y6sXLJ7KmY3mXFpJv3i2wlh7gY/H2pRVh1FAvysd3RnOmDBY9aAzxwVsPOr2F
T0MQplWbUXxPQ6oqNmG4HBWFJDXR2nw=
-----END CERTIFICATE-----