Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d07c81a9-b609-39ff-b202-0329d4527396.roa
File:                     d07c81a9-b609-39ff-b202-0329d4527396.roa (raw, json)
Hash identifier:          GYj0iq02N2b5c3Pjnk32WXQT+YBaEfaVzh3p4vJVcHs=
Subject key identifier:   C7:A3:72:B0:18:0E:FF:EB:1F:AD:ED:98:88:7D:D2:67:3C:0B:70:72
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328583AA7BC833B42D4FB61172DCEE0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d07c81a9-b609-39ff-b202-0329d4527396.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     15169
IP address blocks:        104.134.168.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:bc:83:3b:42:d4:fb:61:17:2d:ce:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=7e520f0a-89d8-44fa-bda4-534ac4d03b97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:3d:bd:07:5d:09:6e:e2:9c:80:72:7a:7a:54:
                    06:c3:d0:75:2f:17:d3:21:b0:2b:fc:58:f2:d4:50:
                    f1:04:e4:78:f6:90:1d:8a:1a:3b:4d:53:d4:b8:79:
                    a3:6d:e3:14:38:b7:15:61:f1:6e:69:41:c2:ab:25:
                    9c:57:2e:ca:8d:c2:d1:dc:24:f0:73:98:fa:d9:1e:
                    cb:c9:6b:30:90:e7:b1:39:40:6c:8a:9b:c9:5e:95:
                    e6:6f:fe:da:6a:d6:e9:a1:1c:b7:08:62:cd:87:07:
                    c8:ab:c8:a9:b0:c3:3e:db:9c:0f:43:8c:c2:16:18:
                    bf:3d:4b:0a:c7:cf:e6:cc:ea:4a:f2:d5:95:6e:6b:
                    67:5b:50:88:a1:ad:b8:15:85:8c:7d:c9:4a:a7:6d:
                    3c:01:33:de:ed:3e:15:34:c5:62:5e:3e:56:b2:a6:
                    7a:71:be:2f:52:de:db:fd:d7:28:b6:a5:1b:d7:9e:
                    10:05:c1:57:b6:e9:f3:2b:4b:da:1c:7c:16:81:17:
                    5b:6f:04:5c:d5:59:61:08:12:73:8c:8d:fd:c2:fa:
                    03:33:18:7d:63:41:c5:8d:34:54:27:fe:50:80:ad:
                    fb:7b:b9:d3:9d:65:e6:8f:a7:51:18:60:77:ff:fc:
                    73:04:69:5a:58:01:f7:91:a0:16:d5:7e:49:e4:da:
                    bc:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:A3:72:B0:18:0E:FF:EB:1F:AD:ED:98:88:7D:D2:67:3C:0B:70:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d07c81a9-b609-39ff-b202-0329d4527396.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.168.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:49:bd:d9:bb:fe:03:46:60:c8:22:0b:c3:b4:3f:a3:2d:c2:
         16:d6:d5:0e:d0:fc:95:4a:24:b8:0d:f3:f1:c5:17:60:43:73:
         e2:fc:b3:dd:87:84:87:c1:6e:0f:42:b5:5f:e0:47:18:4c:88:
         40:19:6c:c9:cf:5e:e2:c4:36:33:64:3c:92:42:1a:8e:3a:da:
         95:b9:9f:c2:20:af:24:8f:e8:68:2c:50:98:8e:da:a6:34:a5:
         5b:6b:9a:6b:3b:6d:d5:e9:01:7e:40:ee:1f:c0:d0:0f:c9:e6:
         2e:b4:83:79:2f:4f:d3:1c:f6:06:2b:26:b9:8e:b6:79:0f:4f:
         51:4c:77:94:ce:70:f3:27:27:1f:e7:94:7a:c9:e1:8e:59:30:
         c1:76:03:b6:01:16:e0:0d:2c:1f:49:15:06:f5:f9:a7:73:9c:
         6a:bb:9e:6b:0a:6e:7f:13:02:31:6a:59:5f:27:7d:ed:bb:1f:
         34:86:2a:63:d8:46:35:b7:37:2f:a4:36:1f:4d:fb:ff:f5:70:
         5f:ed:8b:8f:3d:4e:72:9c:60:eb:03:e5:c5:a5:fe:d2:95:89:
         9b:7f:43:6a:17:1a:d0:b4:64:7c:ab:4e:2d:0e:ad:e1:77:3f:
         5b:c4:66:51:8a:22:4b:89:69:e7:4e:ac:3a:da:b0:e7:b3:05:
         25:f7:4e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:37 2023 by rpki-client on console-fra.rpki-client.org