Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d4f0ae17-ce99-3e60-b297-0323c4d1b37f.roa
File:                     d4f0ae17-ce99-3e60-b297-0323c4d1b37f.roa (raw, json)
Hash identifier:          aMjVT5Syucm3gjmAKscUYvHSPyerwqemDKOZ7x+5G5Q=
Subject key identifier:   13:95:55:D7:81:97:63:6F:F7:3E:DB:A6:AC:51:25:62:C3:F5:FC:5E
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328583AA7A83C07765F2CD0DDF6A7C0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d4f0ae17-ce99-3e60-b297-0323c4d1b37f.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     41264
IP address blocks:        104.132.46.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:a8:3c:07:76:5f:2c:d0:dd:f6:a7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=29665d22-7a8e-4da5-802e-d45c53a7b410
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:fc:51:20:9a:08:f7:a6:14:75:0f:2b:39:31:
                    be:c5:28:02:29:63:d6:31:21:9d:db:a0:70:dc:ab:
                    e5:f8:17:d4:f3:57:58:1e:4b:2b:1f:0b:16:be:e3:
                    34:70:24:42:16:93:77:df:c0:8b:69:04:f1:a0:0c:
                    50:27:a5:ba:de:75:95:19:4a:11:14:6a:b8:d2:18:
                    9c:86:66:b7:bc:a3:7e:c1:59:5b:4c:87:25:6b:76:
                    5e:9a:1c:83:ae:e1:00:41:dc:d4:87:90:c6:66:e5:
                    47:f7:52:2b:98:b6:fd:81:e4:39:ab:b0:ff:ed:f6:
                    69:55:34:7e:cd:4a:e3:2d:95:65:93:a7:8f:0c:5e:
                    cd:f3:41:0f:f3:5f:42:f4:7c:34:fe:e6:32:1f:31:
                    05:6f:41:b5:76:44:e4:57:0d:a9:ef:e7:20:bd:2e:
                    2c:b5:60:12:f0:f9:31:b0:4d:27:73:59:43:ea:a2:
                    09:6d:f3:ad:e0:d2:98:8f:31:c6:c5:ef:98:6c:9a:
                    73:65:48:b8:b4:ce:90:6a:51:02:a2:db:3b:a4:f1:
                    c1:33:9f:53:ad:6d:20:2e:44:69:cc:33:64:b6:27:
                    9c:68:9f:5f:3e:51:58:84:bb:ef:fc:c0:1f:03:b3:
                    4e:95:da:f6:6a:f9:df:2d:85:e9:74:32:6c:65:2f:
                    24:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:95:55:D7:81:97:63:6F:F7:3E:DB:A6:AC:51:25:62:C3:F5:FC:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d4f0ae17-ce99-3e60-b297-0323c4d1b37f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:9b:7a:84:ac:a9:98:7c:9b:6b:ed:00:61:7a:81:4d:14:43:
         9c:06:10:12:5b:ef:14:80:9f:64:49:53:9d:f6:e1:79:85:97:
         e8:33:6d:27:77:97:94:8b:7d:bf:6c:2a:f2:49:d3:b1:57:9f:
         62:f3:cc:06:10:67:d9:e8:b9:b5:5d:26:d5:f9:2d:3f:6a:89:
         8e:bf:b0:d1:7c:05:f4:09:f6:75:91:20:bd:8e:39:5e:19:6f:
         b6:8b:4b:bc:8c:49:59:56:6d:4e:c2:5f:32:12:b8:2c:0d:75:
         04:53:cb:f5:b9:dd:a2:1f:b7:0e:f3:4f:c6:6f:72:5c:1e:75:
         50:ae:7a:fa:9c:71:42:c6:30:39:44:f7:f7:9f:9c:ca:25:73:
         f7:2b:6b:c6:63:c3:a4:8c:b9:dd:11:88:8b:3e:3b:35:29:34:
         60:26:02:5e:ad:41:67:5e:e0:19:43:82:75:01:6f:1b:ed:07:
         20:93:45:43:f7:08:02:ec:62:fb:d9:02:f6:ff:c0:c5:b1:d9:
         5f:1e:3b:a4:91:c1:75:d9:82:9d:77:f0:55:26:b1:ef:70:67:
         0c:31:7f:b7:c8:88:87:4d:ab:5f:81:ae:ea:b2:eb:c7:4e:39:
         e2:c5:6e:86:9b:0f:a4:2c:ea:a5:6a:cc:d9:d7:70:c3:34:6c:
         05:1d:67:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:37 2023 by rpki-client on console-fra.rpki-client.org