Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c48c38c4-d45b-3680-8e29-301d30f2a162.roa
File:                     c48c38c4-d45b-3680-8e29-301d30f2a162.roa (raw, json)
Hash identifier:          WRwZB2JGA6Rj/SZfqv9OEbuCHbgDJoEp5v1INVXy7Qg=
Subject key identifier:   2A:9D:7A:B7:DB:61:F4:02:27:98:AC:56:B4:A8:DE:94:C0:00:FA:E5
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328583AA7ACB05523B14604B32A9100
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c48c38c4-d45b-3680-8e29-301d30f2a162.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     41264
IP address blocks:        104.132.227.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:ac:b0:55:23:b1:46:04:b3:2a:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=026dc967-e063-4a25-9b55-4cd1f08f2a1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:aa:e9:19:d5:d4:9c:73:0a:09:fd:7b:db:ab:
                    18:b5:4f:81:17:7d:da:12:3c:2a:d7:66:b1:ba:bd:
                    15:b8:c4:7f:be:02:0d:79:ba:a6:27:d6:21:24:49:
                    01:89:9a:b8:bd:99:d5:a1:b3:d5:c0:9b:79:5f:e0:
                    2e:35:49:41:0f:b3:7a:fa:1a:47:9e:81:a5:b5:5c:
                    71:2d:19:25:69:03:28:07:2e:c9:db:ed:63:51:96:
                    77:e3:eb:62:3a:7d:8b:34:42:23:22:8c:6c:4a:24:
                    20:ee:5e:3a:b8:d0:c6:e4:8a:a2:3d:a2:32:be:2c:
                    22:08:04:e5:d9:f3:db:6b:dc:88:64:89:b1:8d:e2:
                    9f:26:68:6a:74:76:ba:b7:8d:e2:6c:86:14:7d:48:
                    38:b8:bb:14:d1:3e:2c:90:8d:95:ea:04:eb:84:52:
                    e1:dd:c4:b5:bc:b1:06:03:80:79:fe:b1:0a:63:c8:
                    bb:3d:39:17:4e:57:5f:11:69:ad:28:af:e6:2f:00:
                    61:38:8e:79:5f:f3:36:5c:32:80:a6:1e:ba:1c:7a:
                    52:bb:46:a3:75:12:d7:91:c9:16:c7:07:a1:c9:18:
                    5e:72:f8:0f:47:7c:c7:38:e3:83:85:6b:b4:dd:8f:
                    b5:86:57:3f:5c:84:3f:0a:8d:3d:01:10:1d:e6:1e:
                    9d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:9D:7A:B7:DB:61:F4:02:27:98:AC:56:B4:A8:DE:94:C0:00:FA:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c48c38c4-d45b-3680-8e29-301d30f2a162.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:ad:58:2b:e3:62:84:df:1c:b6:c9:ca:2d:59:49:8a:bb:9a:
         02:ca:da:cf:9c:19:8b:04:9f:2d:da:28:8e:db:35:ea:d1:5c:
         5d:de:66:45:6c:c3:0d:74:f9:ca:7a:ce:45:28:8c:03:f6:d6:
         9f:04:00:d5:a3:d5:07:f3:65:1d:eb:5f:15:96:f4:00:d5:2a:
         87:d1:30:cd:da:59:5f:d9:a4:64:c3:ec:07:01:d9:36:fd:e4:
         23:5e:12:73:b2:19:72:56:5b:de:02:0c:21:d4:53:7b:43:5c:
         6c:03:ce:82:13:82:1c:bb:2c:f3:5e:c6:09:d8:44:08:54:a1:
         c9:65:02:09:ef:ff:2b:39:2f:8b:e6:46:83:34:a4:91:e8:5a:
         e4:b6:02:b5:9c:a5:86:94:8b:59:0a:b4:7b:9b:46:dd:9f:cd:
         73:14:90:41:5f:85:84:59:51:fb:f4:6e:3a:2b:3c:21:55:3b:
         56:5a:42:3f:a3:57:30:63:24:b9:36:48:52:f6:37:34:5c:f1:
         e9:72:04:b5:7f:01:a7:ae:fd:6a:8d:c5:9a:f0:3b:0b:89:fb:
         51:c9:61:6b:36:78:be:3d:3c:15:19:d9:cb:6f:1b:a5:99:cf:
         63:f2:9d:4e:82:d0:77:fe:a7:1a:36:e8:23:4e:d7:1e:b9:ad:
         f9:09:e2:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----