Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c417ecb1-eba0-35c3-869c-75ab28b089c6.roa
File:                     c417ecb1-eba0-35c3-869c-75ab28b089c6.roa (raw, json)
Hash identifier:          NYMTSc/wjFKjdDuhmAlKju8DFZTF4ye3U3QXFw3Zf78=
Subject key identifier:   D7:62:06:09:6F:4B:95:CE:7A:0F:18:95:48:92:94:62:D9:11:EC:F5
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328583AA7C51FD34D373F6187E08840
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c417ecb1-eba0-35c3-869c-75ab28b089c6.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     41264
IP address blocks:        104.132.249.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:c5:1f:d3:4d:37:3f:61:87:e0:88:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=2371116a-b2e6-4a5b-b254-97b1a3ee9750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:0e:28:4e:9c:2c:8c:8c:7e:8c:b8:cc:3f:7a:
                    9f:fb:0f:f6:45:04:32:e0:f5:a6:ec:b3:8e:af:6a:
                    df:85:e2:fd:a6:52:de:bc:91:2d:74:eb:da:0a:ad:
                    d0:76:58:e6:bb:16:be:c9:b7:c3:c6:cc:06:ad:b2:
                    8a:22:ca:d6:4b:ef:a3:53:c0:fc:c7:2f:64:f8:8f:
                    f5:d1:39:37:d5:32:c4:51:46:ad:b5:39:fc:83:37:
                    00:66:48:d4:b8:40:90:16:aa:31:31:7c:1f:80:0e:
                    d6:64:cb:2f:ef:cc:7b:de:8f:cf:2b:a9:43:12:71:
                    e2:ab:92:9f:7b:a9:ec:41:9a:43:68:5f:de:e6:23:
                    ff:55:9a:e6:03:7a:8a:4b:1a:f0:16:22:a9:ac:ad:
                    1e:45:3e:cc:7b:6d:27:57:6c:a5:d4:4e:b2:ac:a5:
                    c2:20:6f:42:37:c5:22:9d:b8:71:ee:56:4e:bb:64:
                    69:2e:c5:fc:c5:ce:c1:19:07:cc:d5:cf:83:0f:67:
                    b8:99:2d:89:b2:e9:43:73:9b:7b:1c:af:96:05:6f:
                    49:2a:1f:99:4d:34:49:fb:fd:f0:0f:a6:26:e5:b2:
                    96:0c:c7:b1:46:9d:00:49:e6:39:d3:1b:1f:3d:a7:
                    06:de:6c:b3:06:19:95:6a:ca:dc:a5:64:e8:e1:f5:
                    a2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:62:06:09:6F:4B:95:CE:7A:0F:18:95:48:92:94:62:D9:11:EC:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c417ecb1-eba0-35c3-869c-75ab28b089c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:61:48:34:4a:b9:54:90:6c:a5:7f:07:96:24:88:1c:de:45:
         19:4a:85:ed:c9:a2:8e:c9:b8:88:99:9d:c4:0f:50:3a:9b:ae:
         a1:1a:d2:d2:a4:56:e3:39:02:99:f4:ee:05:53:09:e0:c5:40:
         42:83:ab:20:8a:1c:43:05:de:56:16:4e:f9:9b:f4:da:dd:97:
         5a:61:fb:06:24:31:68:d3:09:ba:f3:28:5f:d1:51:6f:fc:15:
         ee:62:9d:e0:35:75:b9:be:8a:ad:fa:55:0a:1f:fb:60:d2:a2:
         d1:e6:e5:2e:95:9c:32:a9:99:b1:3f:e7:99:d8:77:57:95:4d:
         4f:2f:58:c8:f2:c3:28:60:a1:6b:95:67:81:ae:5d:43:e8:0e:
         cf:58:d6:ac:fe:7f:9a:7f:df:f8:39:50:72:14:fb:8d:fe:f5:
         3b:36:1c:f8:89:5b:f6:2e:19:19:6c:87:d2:1d:e4:0a:e4:bd:
         0d:0c:88:c0:b9:1d:d7:df:3b:ce:61:83:c3:a9:82:5b:dd:95:
         45:51:0d:c7:57:a2:3a:f2:68:d7:50:0f:90:44:68:5d:f9:4c:
         67:0d:b8:e5:11:58:c2:c8:59:ca:9e:68:e6:de:8a:13:6d:cb:
         37:14:88:cc:66:01:66:c2:e9:ba:a7:49:77:c3:54:ee:5f:65:
         30:01:ef:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----