Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/dcff04d8-ed13-3543-96b5-827188598e7e.roa
File:                     dcff04d8-ed13-3543-96b5-827188598e7e.roa (raw, json)
Hash identifier:          zotsuKXNHvRWJ8BaoffhVaP5RE7zd/pQK2PkCrhg9Sw=
Subject key identifier:   6A:9B:18:BF:74:CA:0C:24:EC:C2:BB:D9:C1:07:55:2B:89:49:87:92
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328583AA7A97F56E81BB87724A25C50
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/dcff04d8-ed13-3543-96b5-827188598e7e.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     41264
IP address blocks:        104.132.195.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:a9:7f:56:e8:1b:b8:77:24:a2:5c:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=e18923c8-ab49-42ad-9c65-1fe62e724947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d4:44:b6:02:67:15:07:62:de:0f:e6:3c:59:
                    a2:97:45:a1:3a:8d:fd:58:8a:35:13:35:4d:8b:60:
                    7b:35:ee:85:33:60:9d:25:b3:de:0a:34:09:d8:fb:
                    b0:95:1c:6a:89:c0:3e:a3:c6:8d:02:8c:c3:d7:6d:
                    85:aa:29:c1:5c:cb:ff:36:43:fa:e1:64:38:0a:73:
                    7d:0f:29:2e:33:ec:53:77:f8:68:0f:00:75:0e:d3:
                    6f:00:50:94:5c:fd:3d:de:02:ae:70:3b:f0:67:36:
                    5e:ba:71:e1:ef:65:fe:a1:be:64:70:3f:48:14:c7:
                    a6:b1:6a:36:18:dd:89:73:3a:35:df:48:47:9f:8b:
                    1b:12:89:e3:ff:57:1c:1e:e3:2c:98:94:45:c1:48:
                    af:46:55:ff:1f:18:c4:dc:3c:fd:09:a7:7b:55:f9:
                    17:dc:25:e1:c2:5c:97:fd:8a:cb:2e:38:1e:84:94:
                    ca:48:e6:39:2a:1f:f3:b2:24:73:16:21:75:af:16:
                    23:c2:f9:10:60:30:dd:d9:68:6f:fe:37:8c:1e:62:
                    b4:8f:54:76:31:d7:dd:b0:b2:54:00:ad:d8:7c:59:
                    70:14:9d:d3:75:9d:b5:8f:d8:8a:25:1b:80:39:7b:
                    75:76:20:79:98:0b:0a:48:c1:0d:82:af:c7:21:9c:
                    5b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:9B:18:BF:74:CA:0C:24:EC:C2:BB:D9:C1:07:55:2B:89:49:87:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/dcff04d8-ed13-3543-96b5-827188598e7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:9f:d8:7b:45:0d:72:9f:8e:92:21:52:80:ba:6f:d7:a2:10:
         e6:59:f8:6a:b7:d9:bf:40:f0:c3:b1:d1:50:7a:c6:ee:28:ee:
         a4:35:fe:23:87:d1:ec:0b:54:88:48:9c:b0:2e:e4:f1:24:d3:
         66:fb:b6:44:08:51:5d:b9:8e:af:f0:79:59:20:90:8e:b9:33:
         9c:13:96:5b:0c:e9:37:14:d0:0b:50:46:4a:d8:8d:8d:22:d4:
         10:4e:8c:1c:ee:6c:85:e3:2f:18:e6:ad:24:5a:ca:ef:0f:54:
         57:1e:92:a4:23:85:d2:1b:9a:ac:10:dd:94:1b:e1:95:62:e2:
         7f:ef:bc:7a:1b:e4:26:d4:f2:74:50:f8:6d:21:ae:3a:6f:cd:
         51:1e:c5:8c:ac:ca:1f:cc:4e:27:21:55:0e:dc:bb:30:73:f3:
         0a:cd:db:66:e3:37:03:73:bd:13:4f:27:6a:c7:5a:c3:34:d5:
         3a:1f:d1:a7:bd:3a:01:a2:61:6d:d1:2c:f0:fb:fa:63:1a:22:
         b3:50:21:37:a9:c5:fb:0e:70:f2:36:48:cc:dc:80:9d:ba:94:
         70:62:8a:16:7e:0b:cb:b9:01:ed:b1:2c:37:9c:2b:1e:66:ca:
         af:27:ce:0a:8d:d7:c0:6c:73:51:d3:de:fb:d6:7c:7e:50:1a:
         cb:0f:e2:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:38 2023 by rpki-client on console-fra.rpki-client.org