Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e4f7ac96-4879-3400-8f65-7c11c6ddc7e2.roa
File:                     e4f7ac96-4879-3400-8f65-7c11c6ddc7e2.roa (raw, json)
Hash identifier:          pXWzivVOSiFwhNt6jYcNatB5KT5KvSu8PzjSC/QfcB0=
Subject key identifier:   95:F2:EA:F0:07:E0:4D:CB:94:49:9B:12:AF:EB:1F:ED:8E:17:BF:7D
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328583AA7AA5FCE35652F5DB16C5A00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e4f7ac96-4879-3400-8f65-7c11c6ddc7e2.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     15169
IP address blocks:        104.134.139.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:aa:5f:ce:35:65:2f:5d:b1:6c:5a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=b81db93c-9363-4f47-a6d8-054c3aed08bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:73:fd:e9:0a:f8:70:d8:c1:35:9c:b2:4f:95:
                    e0:fe:47:f1:ec:67:d7:34:cc:95:ac:d8:64:1c:a8:
                    87:69:76:9b:13:a3:2b:38:dd:b8:66:72:28:14:18:
                    d2:c6:66:4f:a9:81:cf:75:a7:91:e7:9a:a1:7c:ee:
                    9a:47:90:35:fe:af:50:ba:67:18:75:63:c0:c5:d2:
                    d3:91:6a:93:8a:75:79:67:ab:14:f1:33:61:40:fe:
                    ac:2a:49:cb:b5:34:a0:2f:68:cf:55:69:be:37:b8:
                    fc:08:47:9b:f4:26:06:57:17:bf:53:69:9d:c9:c6:
                    8b:74:aa:45:0d:3e:cd:83:7c:d6:96:a5:14:da:65:
                    43:b2:ce:b0:e4:75:be:53:72:f2:02:e2:30:7e:43:
                    63:ba:13:2a:97:63:6f:e3:38:9b:9f:59:55:4f:14:
                    97:ae:6f:92:83:e8:43:76:1e:a0:38:0e:90:1d:be:
                    8a:34:36:ad:5c:ee:50:e1:e6:5c:1f:1b:41:6b:b8:
                    83:76:8d:c1:99:99:a2:eb:af:c6:49:86:d7:9c:2d:
                    f2:7e:f6:f3:6b:fd:f1:4f:e4:64:5c:b4:48:00:4f:
                    0e:0b:8d:cb:a8:e3:55:cd:8b:80:22:ee:8e:b3:8c:
                    6b:75:96:79:4a:a7:5c:f7:c6:63:93:71:0e:0a:64:
                    37:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:F2:EA:F0:07:E0:4D:CB:94:49:9B:12:AF:EB:1F:ED:8E:17:BF:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e4f7ac96-4879-3400-8f65-7c11c6ddc7e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:66:48:50:2e:c5:5b:a4:d6:c6:a2:f0:e3:dd:f9:30:af:5f:
         16:bd:93:01:c2:4d:08:21:4a:c2:69:a9:5b:8f:6a:4f:89:9d:
         b5:f6:5c:b6:ef:59:99:fc:ba:d4:2b:f3:09:d2:0b:ba:cf:ab:
         58:be:73:4b:9c:44:c0:0e:b6:32:3d:32:0b:67:73:d8:6b:82:
         d6:cb:9e:1e:78:42:ee:01:14:7f:c7:93:53:87:5f:f5:53:2c:
         e1:48:0d:c6:20:a0:ae:b3:83:8b:f7:09:44:17:67:9d:d2:cf:
         ea:f0:97:e3:79:ec:19:62:8f:47:a0:04:71:69:5d:34:03:45:
         cc:3e:04:f8:8c:c4:db:db:02:1b:b6:b4:77:6d:5e:61:e6:2b:
         a5:c0:8c:71:a8:98:06:87:b0:5c:3b:f9:19:2d:f1:7d:90:a4:
         bf:9e:1f:ad:d3:7f:9c:c5:54:fd:74:38:6b:f2:f6:cc:14:d6:
         ff:07:25:df:2e:41:e7:96:5c:fe:c1:92:d6:6e:23:cd:64:10:
         05:21:8f:27:9e:ad:90:1f:c8:c4:9c:d9:d9:2f:b4:36:11:97:
         73:2c:99:46:3d:0a:b0:7d:b5:67:b3:fa:b6:db:9e:3f:47:04:
         a1:7a:c9:e0:63:9b:50:17:48:40:91:93:83:c2:48:92:27:d9:
         2b:13:48:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----