Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c4ea5119-4676-3029-9c7c-6477f3e7adde.roa
File:                     c4ea5119-4676-3029-9c7c-6477f3e7adde.roa (raw, json)
Hash identifier:          GJy1o7S3zgPAqNIhJj6gv8QrdOMUZbCMZtuH1YP5uYo=
Subject key identifier:   7D:52:98:DA:3A:E0:1F:93:8A:A1:9D:D3:D6:FC:3D:BB:9C:1D:90:B4
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328583AA7A64A4C39F63EE96F3BF2E0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c4ea5119-4676-3029-9c7c-6477f3e7adde.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     41264
IP address blocks:        104.132.175.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:a6:4a:4c:39:f6:3e:e9:6f:3b:f2:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=a9440bab-58cb-4345-8f40-4e46df0dbf7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:03:02:f7:a1:07:30:fd:e4:75:b4:35:3f:d1:
                    87:95:3f:12:71:45:83:54:3b:3e:c6:4f:ab:61:18:
                    a2:c2:e9:81:8d:ba:9d:55:48:f7:56:bf:a4:1e:a8:
                    59:f9:3a:31:51:92:84:57:40:50:ea:68:61:73:08:
                    8b:9b:16:41:e5:73:bb:3a:b4:9e:89:7c:32:0d:99:
                    ca:9c:22:68:f9:e1:72:03:d4:86:b0:9a:66:6f:ba:
                    5b:5c:0d:24:08:10:f8:f3:be:2c:7d:23:48:e4:99:
                    72:30:55:c3:e8:d0:f4:14:c2:30:e9:91:17:53:50:
                    ef:ad:83:7f:4d:04:5b:da:ef:05:3f:1b:a5:ff:c7:
                    42:d2:73:3b:07:d1:22:b0:9b:5d:65:85:a3:a6:3c:
                    12:79:cc:fd:b7:2b:c5:2e:13:c7:2e:38:b2:bd:f5:
                    45:6c:45:2d:6b:62:c3:04:a2:f9:d0:ac:e4:8b:66:
                    20:6d:00:28:f1:2e:ff:9e:a9:fc:06:f8:b1:62:a4:
                    56:f9:cf:7a:21:b1:d4:30:0e:60:f2:f4:3c:df:ac:
                    b9:d1:66:85:fb:9e:aa:bd:a2:f5:b1:2c:59:54:a1:
                    30:f6:ae:d2:27:9d:39:46:e1:53:8b:0e:2a:8a:99:
                    a9:33:24:5f:03:8c:20:2e:a7:33:72:ab:a3:56:77:
                    cc:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:52:98:DA:3A:E0:1F:93:8A:A1:9D:D3:D6:FC:3D:BB:9C:1D:90:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c4ea5119-4676-3029-9c7c-6477f3e7adde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:7f:b5:27:96:86:22:31:d5:ca:03:3f:be:5a:d3:91:1b:e9:
         6d:c6:36:7a:c6:61:db:5b:6d:a9:9a:d3:b8:65:7f:f0:f5:c0:
         38:43:ea:99:9b:36:80:4b:f4:12:ed:ab:1c:e4:3f:6c:71:a1:
         a6:ad:90:d9:e5:10:e1:8d:b1:f3:5c:00:dd:7e:71:11:9c:7a:
         02:be:4c:c0:fe:cd:00:09:f0:d2:95:4a:41:be:86:17:c3:13:
         fe:58:e8:0f:ec:d5:2b:2c:43:53:ae:3d:df:0c:27:bd:83:92:
         b0:fa:07:31:87:99:0f:f0:b3:01:96:24:1b:c0:9e:d0:7a:0a:
         54:e6:be:97:cf:c5:a2:72:8f:22:be:25:a3:60:7e:70:8e:6e:
         cc:2d:96:d7:19:60:6a:1e:91:3b:39:54:c1:b2:eb:3f:c4:b3:
         96:8c:33:05:80:52:9c:03:5f:fd:1c:3f:a2:09:28:df:27:c9:
         6f:50:97:66:12:c3:b7:69:fe:70:f8:eb:71:44:02:6b:c4:eb:
         06:c4:6a:3f:fc:fe:90:c5:9d:8f:c3:23:05:dc:10:2c:8f:ae:
         92:03:bb:b1:5d:34:78:6d:ba:70:fe:47:a8:18:cc:3c:4e:8b:
         68:24:61:69:64:26:d0:0e:40:66:5d:ab:12:6d:47:1d:bb:73:
         16:42:93:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----