Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e2b1d3a9-c759-3144-b049-fa20a9238b3d.roa
File:                     e2b1d3a9-c759-3144-b049-fa20a9238b3d.roa (raw, json)
Hash identifier:          SS2gFM9EvCU6Tv/MOEmqhDj05BzG58oWuglNS4JR4Zg=
Subject key identifier:   34:A7:0F:2A:1C:BB:1C:F6:D6:0D:BB:D5:91:65:96:96:7B:23:60:F3
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328583AA7C0F027AC8FBDF8433FD730
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e2b1d3a9-c759-3144-b049-fa20a9238b3d.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     41264
IP address blocks:        104.133.215.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:c0:f0:27:ac:8f:bd:f8:43:3f:d7:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=9c02943b-6819-4b4e-b66f-c3d64b480aa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:2b:72:9a:f7:d4:1e:b6:3d:d7:20:9e:fe:da:
                    74:86:a2:0e:03:67:84:91:d3:f7:61:7e:bb:63:98:
                    eb:43:cf:f0:d4:bc:7f:5c:a2:a8:1e:ed:63:d0:3e:
                    43:10:24:26:8f:c4:8b:e8:4c:65:83:25:65:a3:56:
                    eb:e9:6d:7b:bb:37:fb:d9:7d:07:dd:6f:eb:5b:42:
                    97:da:ab:55:e3:f5:a4:b7:38:8a:d2:85:21:6b:ca:
                    e6:35:0e:b8:47:58:0d:94:72:05:3c:f6:c0:86:8a:
                    10:44:ec:51:86:7f:61:7b:c6:e4:c0:09:65:26:44:
                    2f:97:75:62:2c:6a:28:07:f8:de:9e:21:b0:e8:9a:
                    bf:30:10:f1:73:14:a4:02:e3:8f:28:83:57:51:f9:
                    c8:7e:53:2d:09:a5:02:1c:0e:63:d6:e8:76:fb:dc:
                    c1:11:e7:92:69:7b:35:4e:27:66:a5:1d:0b:99:a5:
                    cf:b8:bb:ea:37:d6:fd:e1:94:43:5e:17:e9:5b:81:
                    f0:82:68:79:60:55:ae:30:e6:fa:89:cd:43:e0:fe:
                    ac:4c:bb:f9:29:9f:82:48:7a:08:24:a6:95:e3:b1:
                    1a:f7:14:42:30:3c:aa:ce:12:d7:40:b5:72:78:84:
                    6b:4e:82:c6:97:4c:16:06:fa:85:8e:ee:15:de:3b:
                    0c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:A7:0F:2A:1C:BB:1C:F6:D6:0D:BB:D5:91:65:96:96:7B:23:60:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e2b1d3a9-c759-3144-b049-fa20a9238b3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:a0:17:2e:95:d8:33:67:95:a3:f4:50:a6:ed:da:85:be:8b:
         aa:d6:01:1a:e0:ea:6c:33:5f:db:d1:9d:3f:f7:01:5a:2d:65:
         4e:ed:66:df:44:8f:a6:0e:f8:12:16:8c:91:84:88:3b:b5:8a:
         ef:c7:0f:ed:63:72:37:f2:ce:26:bc:3e:5e:e1:71:d1:e0:94:
         85:4d:8c:bc:66:f5:9f:73:fb:eb:c7:ff:3d:e3:b4:11:33:bd:
         a8:08:12:cf:21:b5:e7:fd:18:52:66:09:5e:db:65:3a:1e:6b:
         89:01:bd:bb:fd:e5:ab:db:8c:d3:93:35:ca:cd:6f:13:5e:c9:
         b2:3d:de:fc:42:a6:14:71:fe:fb:74:73:61:4d:08:35:da:96:
         54:c4:ab:b6:14:c4:ee:7d:20:47:ca:41:b7:4e:30:e8:2d:86:
         4f:e9:b6:a8:ce:ea:5d:e6:b2:5b:3b:4d:ff:1b:a7:65:4e:46:
         b4:f2:2f:aa:85:9b:d1:64:82:2e:65:68:2d:7c:2b:f9:ac:d2:
         46:a6:83:5c:52:ea:4f:eb:8e:4f:c9:ae:b7:62:22:ef:46:ca:
         ab:6c:2f:1d:81:8e:87:a7:fe:8b:89:23:8a:c6:40:1b:1e:63:
         8a:c7:d1:1e:39:45:a1:8f:f1:41:0b:c7:7a:4c:e4:df:29:29:
         ac:78:66:ba
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnwPAnrI+9+EM/1zAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
OWMwMjk0M2ItNjgxOS00YjRlLWI2NmYtYzNkNjRiNDgwYWE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiStymvfUHrY91yCe/tp0hqIOA2eEkdP3YX67
Y5jrQ8/w1Lx/XKKoHu1j0D5DECQmj8SL6ExlgyVlo1br6W17uzf72X0H3W/rW0KX
2qtV4/WktziK0oUha8rmNQ64R1gNlHIFPPbAhooQROxRhn9he8bkwAllJkQvl3Vi
LGooB/jeniGw6Jq/MBDxcxSkAuOPKINXUfnIflMtCaUCHA5j1uh2+9zBEeeSaXs1
TidmpR0LmaXPuLvqN9b94ZRDXhfpW4Hwgmh5YFWuMOb6ic1D4P6sTLv5KZ+CSHoI
JKaV47Ea9xRCMDyqzhLXQLVyeIRrToLGl0wWBvqFju4V3jsMRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDSnDyocuxz21g271ZFllpZ7I2DzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZTJiMWQzYTktYzc1OS0z
MTQ0LWIwNDktZmEyMGE5MjM4YjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIXXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE+gFy6V2DNnlaP0UKbt2oW+i6rWARrg6mwzX9vRnT/3AVotZU7tZt9E
j6YO+BIWjJGEiDu1iu/HD+1jcjfyzia8Pl7hcdHglIVNjLxm9Z9z++vH/z3jtBEz
vagIEs8htef9GFJmCV7bZToea4kBvbv95avbjNOTNcrNbxNeybI93vxCphRx/vt0
c2FNCDXallTEq7YUxO59IEfKQbdOMOgthk/ptqjO6l3msls7Tf8bp2VORrTyL6qF
m9Fkgi5laC18K/ms0kamg1xS6k/rjk/JrrdiIu9GyqtsLx2Bjoen/ouJI4rGQBse
Y4rH0R45RaGP8UELx3pM5N8pKax4Zro=
-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:38 2023 by rpki-client on console-fra.rpki-client.org