Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c8e4c0bd-8b6a-39a0-b7be-82afc3b83c1b.roa
File:                     c8e4c0bd-8b6a-39a0-b7be-82afc3b83c1b.roa (raw, json)
Hash identifier:          AX2urskgLKsl2AwV/Oyxo/gsNtWINyYP4Bq0xTj4TBo=
Subject key identifier:   CF:31:F7:58:01:3E:2A:9C:2D:BF:50:FE:DE:E0:21:2C:14:54:00:11
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328583AA7B43C4319BD38EBB12A4AA0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c8e4c0bd-8b6a-39a0-b7be-82afc3b83c1b.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     15169
IP address blocks:        104.134.184.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:b4:3c:43:19:bd:38:eb:b1:2a:4a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=fbf748e4-a614-4b77-bde9-77ea5ad5fe2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:fa:8c:f8:6c:da:fc:fb:8d:7c:30:3f:f0:1e:
                    63:86:55:d5:05:18:a7:60:a5:f9:18:67:29:e7:13:
                    17:6d:f8:4f:8c:4d:fc:98:ce:16:dc:05:a1:82:00:
                    5b:95:61:99:09:ee:95:bf:b9:95:81:3a:69:e0:fd:
                    0b:c8:5a:31:65:82:5e:e2:fb:26:0a:50:3b:3a:b8:
                    a2:66:f3:43:f4:82:a7:18:fd:19:00:8e:b2:a9:68:
                    05:67:68:92:72:08:be:30:5e:c4:67:b6:8e:28:53:
                    42:d5:54:5c:f8:9b:77:dd:d1:09:ce:5b:d6:3a:23:
                    d7:ea:ca:90:38:f2:29:11:d6:9b:d0:7b:b8:5a:25:
                    bb:ae:97:02:36:3b:79:59:c5:43:58:0f:62:7b:f9:
                    ee:65:e5:ab:19:62:7e:1a:b6:55:1f:a4:39:41:05:
                    36:38:9d:eb:7d:05:19:cb:77:ad:8b:37:9e:89:da:
                    2a:e1:da:5b:20:dd:e5:8b:fd:e8:7e:1d:9d:9a:41:
                    4f:e4:2e:71:8c:63:11:a2:94:9c:56:8d:24:a4:3d:
                    2b:ed:22:f7:1a:5e:9e:4b:11:49:c6:9d:67:5f:d0:
                    ae:c2:ff:be:22:b8:e9:55:bb:71:f0:f9:02:0d:ac:
                    90:3e:4e:3e:5b:bd:a1:bd:69:b4:56:66:30:35:da:
                    0b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:31:F7:58:01:3E:2A:9C:2D:BF:50:FE:DE:E0:21:2C:14:54:00:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c8e4c0bd-8b6a-39a0-b7be-82afc3b83c1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.184.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:c0:ac:b2:87:39:8b:c2:1d:92:f7:af:ac:6c:27:0b:8c:fc:
         3b:87:c5:7a:7b:5e:aa:5f:80:08:45:b6:43:9e:84:87:df:91:
         00:64:60:0d:a3:d5:e7:24:4f:a8:a6:6f:91:fa:9d:0f:99:89:
         2b:6e:a1:ac:c9:40:9f:c4:22:c5:26:d2:87:19:78:3f:f0:4f:
         23:8c:b1:4a:6c:19:52:a8:29:a7:fd:1f:7f:c1:16:0e:98:a3:
         d7:16:66:e3:b0:48:77:26:a7:e5:20:f8:13:f2:1b:b6:82:6c:
         6f:41:51:93:1c:ef:c1:66:79:bf:07:85:b1:23:10:5f:6f:42:
         53:32:da:60:88:8c:f4:81:4f:34:d4:8a:ad:e4:a4:60:1f:dc:
         50:6c:16:33:dd:63:02:cc:cc:c0:1e:41:e5:5a:6e:24:c2:7c:
         91:2c:1f:63:58:8a:d0:c4:45:f1:41:b8:d6:ff:29:36:4a:77:
         8c:f7:7a:ff:0b:59:f3:17:3d:a4:47:f7:47:8a:76:79:73:3e:
         17:a1:39:ed:98:12:69:84:fc:32:a8:d0:6c:54:ff:d6:c2:ff:
         43:0c:09:24:96:89:ef:89:6b:6c:5c:03:84:d1:0d:ba:2b:bf:
         87:35:99:1c:06:0f:4f:62:5e:25:ab:a9:7a:8a:25:df:3e:15:
         26:64:8e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----