Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c4e71771-1767-30aa-b089-cc795051989e.roa
File:                     c4e71771-1767-30aa-b089-cc795051989e.roa (raw, json)
Hash identifier:          3FErJnPyTsx3t2Eu0dk22cm0Zg74H3os0kk/5X2lfas=
Subject key identifier:   DA:0B:58:1C:8C:7D:23:2A:1B:14:A2:49:93:C9:E2:73:A8:91:77:4C
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328583AA7AB4B6D3A839F56C03B1540
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c4e71771-1767-30aa-b089-cc795051989e.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     41264
IP address blocks:        104.133.81.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:ab:4b:6d:3a:83:9f:56:c0:3b:15:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=a7a7f5c9-4ab0-48b2-a45e-ca70acf8f2bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:80:d2:65:c4:c4:63:f2:1f:ad:8d:01:5a:90:
                    cc:78:34:b4:37:5d:48:3f:91:bf:47:3a:f2:ac:7f:
                    87:00:57:1a:9c:c6:f7:16:6c:20:23:35:f8:23:3b:
                    43:10:23:7e:4a:47:a5:97:f4:1c:d8:9f:48:8b:fd:
                    52:93:62:06:17:06:e6:0e:06:de:5b:3f:70:79:27:
                    30:51:3e:6d:64:cc:4e:28:97:ea:2d:05:d4:25:ff:
                    f6:32:c5:b1:ff:95:ff:5d:da:4c:df:de:de:86:dc:
                    50:ec:45:e3:b2:99:38:3d:e4:bb:81:74:b9:dd:68:
                    76:a0:e8:23:36:0f:2d:a0:05:f7:69:81:72:2a:07:
                    30:d5:5f:0d:aa:7b:af:3d:de:0b:43:d0:0f:59:b2:
                    6f:f8:b2:76:20:40:51:c0:ea:ed:63:10:62:fc:1a:
                    8c:52:4d:ea:8e:4b:b1:c7:0b:38:e4:5b:c2:39:d2:
                    ee:e7:16:67:fb:63:82:33:9a:c4:90:a5:35:99:96:
                    06:dc:71:de:95:b2:4d:66:f5:9a:1c:3c:99:39:25:
                    01:02:9f:13:42:3f:e1:43:1f:39:02:b8:7c:b4:f7:
                    fc:86:52:3a:ba:a1:c9:f0:7f:00:1c:82:6f:de:24:
                    70:79:37:e8:21:ad:70:9b:c6:2e:9b:0f:0a:9b:80:
                    7c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:0B:58:1C:8C:7D:23:2A:1B:14:A2:49:93:C9:E2:73:A8:91:77:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c4e71771-1767-30aa-b089-cc795051989e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:31:f8:9e:da:c9:00:b6:4e:14:17:90:85:1c:57:6c:6e:2e:
         30:b7:c2:0a:01:d7:58:ee:2b:bc:bb:9a:ca:c1:a5:32:74:b1:
         42:e0:08:0f:7c:7b:33:0a:91:6c:42:6f:10:65:64:92:d2:d8:
         c7:cd:af:8a:4a:7b:30:27:8b:f4:01:1f:fa:30:16:49:e7:05:
         17:a7:a2:36:33:e6:75:b2:2e:a8:8f:d5:da:39:e1:72:65:57:
         31:85:97:5c:1f:0c:e5:b9:b6:7a:4c:02:a8:d8:38:22:ad:10:
         36:d9:f0:f9:91:08:f1:5e:11:d9:be:c8:7f:80:27:6b:ba:ab:
         22:38:d8:60:3e:f6:d6:f2:a9:a4:fd:2f:67:73:5a:c8:4d:0e:
         a8:7b:2d:e9:6a:6e:e9:39:dd:a5:e8:ba:f2:3f:9a:b7:a1:1b:
         f0:ed:b5:5e:3e:3a:79:3a:fa:4e:ea:c9:c5:fa:a2:1f:c4:08:
         ec:d1:5b:9d:d9:da:ad:74:c9:86:d3:27:fb:52:c5:81:7b:bd:
         44:fb:ad:75:ef:a7:8c:8b:0d:c3:26:2b:5b:f4:30:7c:2a:b6:
         26:e3:1e:20:68:7c:6e:6b:4e:2e:0b:75:41:73:2c:8b:ea:dc:
         f2:0d:fc:20:3c:a2:bc:7f:77:53:d3:db:83:80:7b:10:72:14:
         d1:b7:ea:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:37 2023 by rpki-client on console-fra.rpki-client.org