Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e6c51365-cd2d-318f-a4ef-e1dcbc073d86.roa
File:                     e6c51365-cd2d-318f-a4ef-e1dcbc073d86.roa (raw, json)
Hash identifier:          eDl1RkeDWSJ8oOqD35tXo1tn7KMR1HvM+0ewe22GhRg=
Subject key identifier:   60:88:EA:40:9F:BD:A5:58:17:3F:15:C4:6E:76:F0:56:35:83:33:0A
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328583AA7BD88379F78F01778E08680
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e6c51365-cd2d-318f-a4ef-e1dcbc073d86.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     41264
IP address blocks:        104.132.169.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:bd:88:37:9f:78:f0:17:78:e0:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=30b73958-fd27-4a5d-b8a8-2f60b021ed79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6b:bb:cd:f0:82:6c:ce:f9:16:00:15:fd:cc:
                    15:e0:d9:2e:56:c3:31:68:aa:38:8e:99:91:e3:3b:
                    e0:10:b1:47:ef:49:17:27:89:5c:ec:45:bb:7b:16:
                    a9:27:df:b4:70:98:49:39:66:7d:a3:3e:81:f3:a9:
                    3d:ae:0f:64:74:ec:f2:72:35:55:50:8f:5f:14:c9:
                    0b:30:69:6a:0e:d1:61:29:ad:6b:9a:ca:c8:33:ac:
                    c8:ef:74:e7:26:50:c7:be:9c:4d:20:98:f8:4b:70:
                    4d:19:ef:2f:ed:04:e6:c7:14:9c:5c:27:73:7e:68:
                    b6:11:49:f2:14:c0:13:36:4f:6e:1e:f6:54:aa:3a:
                    e1:b0:1d:8f:f2:85:02:19:6a:99:a3:73:8c:5f:5e:
                    de:aa:98:94:5e:a1:f8:dd:c6:0c:e7:86:ce:ec:31:
                    91:51:e4:d4:09:00:55:99:81:19:d7:f6:e8:b8:5a:
                    e0:48:b9:78:72:23:6d:0b:1c:eb:fa:97:da:a1:bc:
                    23:4e:56:1a:2c:ad:ee:a9:b0:02:52:6b:8d:03:56:
                    b2:7e:61:f6:c3:2c:cf:fc:6a:05:cc:d8:5a:72:1b:
                    39:22:d6:d9:20:55:cd:ba:63:6f:63:17:a1:e0:24:
                    0d:03:47:8f:e5:f1:c2:06:54:95:24:fb:f2:6d:4d:
                    c2:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:88:EA:40:9F:BD:A5:58:17:3F:15:C4:6E:76:F0:56:35:83:33:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e6c51365-cd2d-318f-a4ef-e1dcbc073d86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:b3:20:7d:1e:2a:05:ea:a0:64:d1:f6:70:af:19:d8:fc:88:
         c0:82:ed:33:ce:e1:ed:be:5d:c5:3e:7e:64:16:00:f1:da:77:
         ba:c2:ac:7c:32:13:93:01:bc:59:31:47:1f:ea:7a:cf:af:a4:
         55:d9:23:d0:64:ee:18:71:fb:8f:54:b6:75:e5:cb:43:e5:7b:
         77:d0:bd:31:8b:1e:c4:a0:37:8a:34:c4:67:9f:73:83:db:03:
         cd:33:ca:8c:a1:c9:9f:08:c1:e0:b9:87:e0:cf:fd:32:fd:d2:
         79:99:e4:fe:d5:1f:de:ee:5b:09:d6:cb:ad:3f:65:80:a7:41:
         7f:2f:5f:c8:02:c6:dd:35:78:e2:c7:4d:f2:be:a2:80:7b:5e:
         56:37:60:a8:b1:b5:bd:14:ca:f6:4e:4d:bf:31:88:0d:e7:e3:
         9a:de:ca:a5:04:ae:27:25:64:2e:30:3f:2c:57:06:66:80:27:
         ea:ea:61:77:fe:d2:84:10:98:fb:46:ca:41:8f:1a:62:2b:12:
         3b:16:17:6f:8e:ff:64:b3:f1:6c:45:72:67:3c:f4:43:71:23:
         33:31:f0:ed:fc:d0:a6:92:72:d6:99:28:ba:2d:97:46:88:13:
         fe:8a:2d:3e:4d:c9:ce:04:7a:56:09:a4:6e:86:f8:dd:6c:14:
         a9:d4:12:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:38 2023 by rpki-client on console-fra.rpki-client.org