Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e73bf593-36ec-3e96-8a59-4b6475c41524.roa
File:                     e73bf593-36ec-3e96-8a59-4b6475c41524.roa (raw, json)
Hash identifier:          /pAaosdmQZfVUWz3LjI6BzfyaIFaN1Bqwtlug3PDz7I=
Subject key identifier:   48:4A:F5:F1:A7:73:DB:A2:56:56:C4:20:0D:D8:98:4D:EC:28:CC:3E
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328583AA7AE0591FB97DD14B01337E0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e73bf593-36ec-3e96-8a59-4b6475c41524.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     41264
IP address blocks:        104.133.133.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:ae:05:91:fb:97:dd:14:b0:13:37:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=b398b706-7bff-400f-9d67-19300e370ac5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:df:c4:d3:b8:89:1c:c2:1a:26:97:e5:63:9c:
                    29:70:f3:09:a3:b2:99:52:f7:81:e3:4e:31:9e:ed:
                    be:da:57:7d:ab:b8:66:50:b9:58:0d:7d:42:14:e2:
                    f2:16:60:30:23:a2:05:a1:a2:f1:dc:4f:5e:df:3d:
                    86:cc:cc:6e:15:b8:70:24:a7:33:91:84:d2:9c:68:
                    c5:d0:81:2d:36:fc:0c:6b:35:4a:c7:35:6d:26:ae:
                    38:9c:bd:2a:c2:eb:5a:e2:25:67:64:09:05:4b:7a:
                    80:3f:e6:f9:cf:56:9c:20:18:6e:2f:d3:42:da:ad:
                    0d:d7:5b:b9:ea:d9:d9:f5:3f:2e:a9:be:84:1a:75:
                    32:ce:98:d6:3c:0d:8a:c2:13:59:94:24:40:82:ec:
                    4e:23:63:8c:1a:4c:f1:b6:2e:82:58:73:dd:5d:1b:
                    84:10:34:7b:ee:43:75:ed:5c:22:a7:b7:4f:8d:50:
                    c1:2f:f5:61:29:28:16:d6:e5:24:a2:c9:e9:1a:af:
                    92:62:49:54:3a:7f:28:0b:b2:f9:08:3e:71:9d:da:
                    a6:fd:aa:7b:ca:36:82:51:00:88:65:ec:4e:1c:50:
                    65:47:2a:67:73:09:c6:22:cc:73:f8:70:f1:39:72:
                    3d:f1:7a:24:2a:20:ec:14:3c:f3:a7:f9:c0:60:44:
                    5b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:4A:F5:F1:A7:73:DB:A2:56:56:C4:20:0D:D8:98:4D:EC:28:CC:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e73bf593-36ec-3e96-8a59-4b6475c41524.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:ff:68:d2:5c:15:8b:f0:76:01:d0:13:29:34:d0:7c:60:fc:
         ee:c9:18:e3:f2:4e:95:c3:57:31:5e:87:d2:c3:f4:50:e9:c1:
         27:54:7b:c4:f6:88:bb:ce:9d:22:0c:b2:fb:54:12:bc:41:c3:
         32:04:49:46:18:3d:0d:da:8b:2d:95:68:52:e8:97:d9:b2:bf:
         30:25:83:fb:76:53:69:f9:75:0b:bf:07:bb:3a:73:e9:63:83:
         2c:83:4e:96:ed:59:19:38:c5:66:77:01:32:73:55:b3:a0:40:
         e5:d8:57:03:ac:c3:23:08:a1:cf:6c:2f:d9:a4:37:2b:68:c8:
         51:4c:48:87:3c:c9:6a:7b:ea:15:a6:cf:48:24:63:55:42:f2:
         ac:20:9e:e7:10:93:70:fc:07:49:14:55:46:19:dc:25:1c:5d:
         d3:11:05:42:de:47:10:67:3e:f8:c6:9d:88:39:cf:2e:31:53:
         01:1a:60:4a:61:14:24:fa:97:f7:45:53:a2:38:5e:dd:da:17:
         6c:6b:60:38:18:db:c7:89:a3:01:a9:be:f2:29:a5:4f:5f:a9:
         b4:b2:9f:10:ee:d7:12:a2:13:3c:85:3a:a6:dd:ca:4b:c6:be:
         ee:5f:7d:46:0f:68:b7:08:bf:77:32:0e:52:0e:05:d2:bf:2a:
         41:7b:59:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----