Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ed2ade15-8bc1-3870-b7b3-9d13e199152a.roa
File:                     ed2ade15-8bc1-3870-b7b3-9d13e199152a.roa (raw, json)
Hash identifier:          ywUBxPZuBzsISUUmK2+drGmnebS2ppC36biwdSX1RIU=
Subject key identifier:   00:9B:DF:BF:CC:61:5B:16:C0:63:40:E6:80:FA:F4:7E:B4:EE:68:4E
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328583AA7BD6ED943BDB662BA0F2300
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ed2ade15-8bc1-3870-b7b3-9d13e199152a.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     41264
IP address blocks:        104.132.255.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:bd:6e:d9:43:bd:b6:62:ba:0f:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=3489d43e-c159-421a-ab6c-df0d302ca081
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:dc:96:a8:a8:f1:5c:2f:af:60:47:c9:a8:5a:
                    1f:87:a9:81:0e:d0:ae:0d:ff:60:b4:2a:aa:52:70:
                    60:2e:4e:cf:47:63:c0:3a:5d:35:44:21:5c:3f:41:
                    db:2f:8c:25:3e:ad:57:3f:34:ff:94:4e:4e:14:06:
                    f5:4f:04:5f:ca:33:11:13:e8:fc:d1:8e:df:97:99:
                    b9:9d:48:a0:8a:45:ce:27:87:82:9d:e3:3d:f9:de:
                    9e:a2:36:89:08:8a:6b:07:36:b6:27:57:e5:3f:a7:
                    38:b3:f8:8a:e6:d7:80:4b:11:4a:0e:b8:90:9a:8d:
                    9a:93:cd:64:b3:a9:99:f8:79:48:3f:b6:ba:87:1a:
                    c7:a5:ac:3d:d0:1b:2e:d6:26:c9:f1:01:c1:44:d1:
                    fd:a7:25:fc:b3:ff:7a:21:c7:e8:1b:4e:b5:f3:ec:
                    7c:71:53:e8:fd:b6:d2:3b:41:54:fd:78:71:14:65:
                    06:e7:ab:80:6f:c6:3e:a0:15:54:29:f0:fe:83:e5:
                    1d:62:fd:18:b0:4f:e9:f2:d1:4f:98:d3:9b:da:6e:
                    4f:da:d8:af:c8:31:b2:5a:6a:f2:52:ed:38:8b:e8:
                    51:0f:7d:43:ca:fd:66:2e:ed:4a:bd:aa:fc:f4:9f:
                    69:f4:4c:b9:94:83:1b:ae:28:8f:d8:d6:ee:68:d5:
                    fc:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:9B:DF:BF:CC:61:5B:16:C0:63:40:E6:80:FA:F4:7E:B4:EE:68:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ed2ade15-8bc1-3870-b7b3-9d13e199152a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:87:5e:52:1b:10:ee:01:f1:b4:71:d3:1a:c3:26:e9:d8:ef:
         82:eb:0d:3a:76:cd:5f:f8:52:e1:cc:41:7e:37:d1:bb:4a:dc:
         57:23:e2:0f:8b:32:d2:97:79:7c:f4:65:c9:63:24:dd:26:b9:
         c7:e8:82:c7:85:60:5d:48:7c:7d:34:12:7f:66:f2:e2:49:51:
         90:77:d1:2d:94:27:fc:39:53:18:c6:9e:64:18:26:17:3a:50:
         a7:8f:41:fc:97:92:e6:c0:bf:06:da:b1:fc:0a:90:f7:e8:99:
         08:56:84:fd:b6:7c:e3:85:46:d0:2b:df:fb:5a:5c:77:7a:60:
         0e:c5:8c:09:57:f7:20:4b:d5:76:e1:16:a0:e3:31:a3:51:e0:
         9f:12:e9:ee:3d:ec:48:56:23:ee:18:e6:0b:f9:8a:61:64:90:
         30:05:5d:dd:26:11:5d:a0:11:5d:64:9f:97:b5:c4:03:5b:48:
         1b:c0:a6:f7:23:47:cb:c5:71:b8:ca:82:dc:08:07:1b:c8:68:
         9f:ed:f6:2f:ec:96:8c:49:a5:0e:02:94:b0:a9:b9:1c:9c:97:
         f3:42:8f:95:ef:2b:9c:84:11:ad:21:f5:8c:c0:0a:e3:42:d7:
         47:21:40:6e:65:18:8d:a8:a0:1c:7f:ab:f8:ba:28:77:87:4e:
         3f:ea:fe:ad
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnvW7ZQ722YroPIwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
MzQ4OWQ0M2UtYzE1OS00MjFhLWFiNmMtZGYwZDMwMmNhMDgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntyWqKjxXC+vYEfJqFofh6mBDtCuDf9gtCqq
UnBgLk7PR2PAOl01RCFcP0HbL4wlPq1XPzT/lE5OFAb1TwRfyjMRE+j80Y7fl5m5
nUigikXOJ4eCneM9+d6eojaJCIprBza2J1flP6c4s/iK5teASxFKDriQmo2ak81k
s6mZ+HlIP7a6hxrHpaw90Bsu1ibJ8QHBRNH9pyX8s/96IcfoG0618+x8cVPo/bbS
O0FU/XhxFGUG56uAb8Y+oBVUKfD+g+UdYv0YsE/p8tFPmNOb2m5P2tivyDGyWmry
Uu04i+hRD31Dyv1mLu1Kvar89J9p9Ey5lIMbriiP2NbuaNX8jQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFACb37/MYVsWwGNA5oD69H607mhOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZWQyYWRlMTUtOGJjMS0z
ODcwLWI3YjMtOWQxM2UxOTkxNTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIT/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG+HXlIbEO4B8bRx0xrDJunY74LrDTp2zV/4UuHMQX430btK3Fcj4g+L
MtKXeXz0ZcljJN0mucfogseFYF1IfH00En9m8uJJUZB30S2UJ/w5UxjGnmQYJhc6
UKePQfyXkubAvwbasfwKkPfomQhWhP22fOOFRtAr3/taXHd6YA7FjAlX9yBL1Xbh
FqDjMaNR4J8S6e497EhWI+4Y5gv5imFkkDAFXd0mEV2gEV1kn5e1xANbSBvApvcj
R8vFcbjKgtwIBxvIaJ/t9i/sloxJpQ4ClLCpuRycl/NCj5XvK5yEEa0h9YzACuNC
10chQG5lGI2ooBx/q/i6KHeHTj/q/q0=
-----END CERTIFICATE-----