Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d7fe6948-0be9-332f-a627-be198e5730cc.roa
File:                     d7fe6948-0be9-332f-a627-be198e5730cc.roa (raw, json)
Hash identifier:          opU/Pxuh0+dNAhGL86mGhaZixAR9PZUpQTv64CGh8vc=
Subject key identifier:   53:54:70:DA:E6:0D:C6:93:57:1F:2B:67:43:11:4A:FD:51:62:9B:A4
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328583AA7B8C8A2D288FD9E96791740
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d7fe6948-0be9-332f-a627-be198e5730cc.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     41264
IP address blocks:        104.133.216.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:b8:c8:a2:d2:88:fd:9e:96:79:17:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=125f533f-b482-445c-b461-7872446f58dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:27:d3:92:17:11:2e:fe:3e:6a:6a:10:b7:b5:
                    1d:8f:4b:76:72:59:b7:a1:a0:f3:b7:8f:cf:2d:59:
                    37:6a:dc:72:07:14:4e:39:24:8c:ce:a9:e9:3e:69:
                    1e:74:b7:32:8f:e3:83:45:d0:aa:81:4b:a4:a6:b1:
                    72:86:d9:04:e5:ae:6d:27:1e:cc:c4:96:77:97:28:
                    68:43:9d:c5:cc:8d:30:8d:aa:67:dd:cc:e0:b9:29:
                    43:9e:62:e4:13:ae:73:6d:50:24:86:d5:6c:2d:6d:
                    75:c7:06:18:39:73:c4:d9:9b:e8:9d:5b:bd:e0:24:
                    b7:7b:6a:1e:9c:95:83:8d:6a:e6:94:bb:dd:35:0e:
                    ac:ea:cf:6d:60:bf:11:65:5a:54:9b:a8:b6:83:0b:
                    25:9a:c5:9f:53:27:66:25:1c:33:ec:bd:45:5b:41:
                    e1:21:bd:96:ad:e6:22:7b:91:df:4b:04:e7:60:93:
                    bf:9e:a7:f1:89:4b:2b:02:d9:af:1c:86:71:35:fc:
                    af:32:0e:6f:31:31:31:4f:0f:98:d2:c2:dc:0d:ee:
                    14:68:2d:de:dd:ec:58:c4:6f:5a:6d:0e:dd:0f:16:
                    e6:43:b7:88:41:e0:86:9c:46:c7:6a:0a:80:bb:17:
                    d5:dc:03:e9:c2:87:48:a6:76:af:d3:98:81:eb:09:
                    51:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:54:70:DA:E6:0D:C6:93:57:1F:2B:67:43:11:4A:FD:51:62:9B:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d7fe6948-0be9-332f-a627-be198e5730cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:e5:16:7f:2f:48:13:8f:f4:d6:e8:da:1c:12:6a:a9:a1:60:
         12:81:80:9a:16:50:c5:e8:f3:f1:6c:72:49:c9:bb:85:d1:71:
         b3:27:0d:90:ca:49:51:f6:51:30:cb:bc:09:3b:5c:76:cc:a8:
         c6:43:12:4e:21:86:40:11:44:81:26:0f:f8:f2:15:3f:9d:18:
         9a:9d:f1:82:81:f1:44:8f:fc:24:13:c7:65:19:42:e3:f9:82:
         25:74:5c:61:f9:f2:07:90:c7:01:1f:ad:9a:5c:08:b7:7c:0a:
         0b:22:83:27:c4:d1:cc:71:7c:28:9b:15:33:b4:94:db:6a:b7:
         54:36:46:5f:69:7a:f6:36:0a:76:ec:cd:16:05:08:49:16:4b:
         25:dc:4e:9d:17:6d:16:3f:88:b4:00:25:8c:72:73:b1:bd:58:
         2c:12:01:e8:fc:96:9d:1b:4d:82:3a:1f:1a:0d:d5:50:a6:87:
         79:43:f5:dd:b6:49:16:38:a3:11:25:64:b4:39:2e:de:2e:a9:
         67:3c:7b:b5:05:04:e6:a6:88:fe:de:62:84:45:3b:17:96:fb:
         9a:e4:3a:aa:38:67:ad:c8:da:31:4d:8c:3d:7e:6b:ec:d9:b5:
         73:4f:22:a4:dd:5d:3e:bc:79:44:de:98:7b:ba:7d:48:3b:c5:
         91:ec:98:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----