Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e00aade0-0022-313b-a1c6-8c4a59ddc416.roa
File:                     e00aade0-0022-313b-a1c6-8c4a59ddc416.roa (raw, json)
Hash identifier:          lyGedWuLrqKSkU0vWf2lfXGzKnD78AyzTLZurOEgrO8=
Subject key identifier:   21:F2:9D:97:AF:E0:83:2C:44:2E:03:70:E5:4C:1E:28:F2:6F:16:7A
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328583AA7BD882BB521059C4C07E380
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e00aade0-0022-313b-a1c6-8c4a59ddc416.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     41264
IP address blocks:        104.133.118.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:bd:88:2b:b5:21:05:9c:4c:07:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=ca67cbd0-6dc2-4961-a319-c36bcd0c91e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:05:a2:6e:b6:cc:fd:fd:54:02:4a:f0:79:25:
                    3c:45:12:57:b4:e3:12:a2:b6:ea:01:0c:73:57:dd:
                    f7:36:45:fd:71:7f:64:f7:c6:0d:2b:9d:e6:ca:ca:
                    11:83:61:e3:4a:a2:11:96:a8:74:9d:d5:d7:e5:ac:
                    47:6c:19:60:68:85:7a:a0:02:b5:eb:67:d3:a4:9e:
                    92:44:8b:04:20:3c:dc:31:1d:a0:fe:6f:ef:ff:16:
                    be:85:90:fb:97:42:e9:9f:0b:17:f7:6c:b7:a6:07:
                    8b:2e:47:5f:09:1c:f5:aa:61:84:59:4c:e7:0d:0d:
                    e1:ef:bb:d1:2b:12:92:2b:2e:72:f6:b2:b7:22:69:
                    6d:ff:bc:41:27:e6:03:76:83:b2:5c:7d:b1:e0:4f:
                    cb:66:40:c6:c8:7d:85:f9:ec:48:5a:88:b9:c0:6d:
                    87:31:6a:70:b3:8f:b5:f6:7d:96:9f:d8:17:e4:f4:
                    cf:ca:b7:13:1d:63:46:01:7d:41:e5:67:9c:27:62:
                    ea:13:ae:c2:5b:5f:b9:95:f0:97:78:68:c9:74:18:
                    89:67:4c:7a:11:2d:08:1d:fc:0e:1f:e2:ee:61:58:
                    1b:c4:76:38:61:1f:44:a9:fe:29:3e:fa:ec:a9:df:
                    6e:d8:4e:50:21:e9:5f:f7:9e:cf:7e:b2:77:b5:1b:
                    74:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:F2:9D:97:AF:E0:83:2C:44:2E:03:70:E5:4C:1E:28:F2:6F:16:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e00aade0-0022-313b-a1c6-8c4a59ddc416.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:92:02:d6:47:1c:4c:e6:1a:20:95:52:16:a4:9a:70:d3:e7:
         e2:b5:d0:c4:c5:f1:60:2a:47:3d:74:d6:92:e8:16:42:cd:b3:
         36:70:3e:3b:ba:31:aa:15:b3:4f:6d:13:47:ce:a7:d7:20:20:
         a0:d3:e3:16:5b:53:d8:e3:9f:38:ff:bd:4e:e7:06:d1:81:c1:
         de:95:68:0a:97:f4:e2:e3:94:af:7f:c9:be:83:22:0d:3f:ca:
         36:84:25:a9:17:d0:77:b9:d1:5f:05:e4:c6:2e:4e:d6:e6:5f:
         b8:71:85:b2:ab:6d:46:75:87:9c:b1:e7:eb:16:f1:84:e2:fe:
         be:fc:cf:89:38:33:13:d8:60:da:28:b1:d9:cc:64:73:81:6d:
         ee:86:df:58:ec:23:b8:6e:2a:4d:0e:e5:10:f5:a1:3d:be:f7:
         5d:e0:a1:86:25:bd:7b:3d:20:ee:38:d5:69:68:f6:dc:12:46:
         a7:7b:cd:70:b2:f0:7d:2a:0b:a3:71:fe:9e:f1:9b:8c:f1:69:
         33:db:1b:cb:f4:f3:8d:cf:ab:ec:2c:8d:f8:98:88:aa:b5:2d:
         09:a5:2f:4f:5e:31:e7:a2:c4:97:21:b8:c8:24:26:82:17:da:
         58:77:36:2f:ba:a9:29:e3:5a:59:5f:31:30:8b:01:8a:3c:4e:
         34:9c:d3:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----