Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f1b7dbb3-367f-303c-8256-f6faa655e78f.roa
File:                     f1b7dbb3-367f-303c-8256-f6faa655e78f.roa (raw, json)
Hash identifier:          ZaGIKLY7w59eSIerhSNu/1dbP7Qe+rFvpzLZW2b1TpM=
Subject key identifier:   D2:96:6B:79:97:AC:8D:02:00:6C:C4:00:09:6B:6A:46:C2:22:B6:9C
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328583AA79ECDFEF10AA25107D79840
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f1b7dbb3-367f-303c-8256-f6faa655e78f.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     15169
IP address blocks:        104.134.208.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:9e:cd:fe:f1:0a:a2:51:07:d7:98:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=2efd36d8-76e9-42af-8b0c-a65225e3cd0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:05:94:00:e9:95:c3:de:ed:ab:6d:7d:9a:cd:
                    38:90:6e:06:de:ea:e4:06:9b:e5:1f:c6:8d:a8:6b:
                    a0:b7:23:1f:6a:d3:60:1d:d7:65:7a:d8:30:bc:0a:
                    e0:2f:cc:bd:4d:c9:b6:e0:be:6f:dc:78:87:82:91:
                    fc:3d:52:44:f8:ea:c5:59:ee:e5:4a:d4:a4:8a:2d:
                    07:8b:0d:c1:1c:40:b4:29:46:89:40:af:1c:e3:90:
                    24:1e:94:68:99:67:f7:d8:53:b4:63:e7:8e:ff:fb:
                    3e:b2:f4:78:bf:24:5a:45:90:ed:51:b6:78:ae:36:
                    1b:9f:fe:c0:b8:27:bb:8a:01:90:ca:f7:2e:05:bf:
                    69:3e:1f:c3:78:b5:3b:76:41:14:48:33:69:42:9d:
                    6c:b9:df:32:24:db:15:25:35:40:cc:ad:5c:8b:93:
                    86:9e:a6:ae:56:21:56:fd:78:c8:61:df:06:2d:c9:
                    74:f4:08:a3:52:98:8d:82:a9:73:ca:fa:3d:9b:b6:
                    7b:07:73:3c:77:18:cb:9e:dd:80:80:8c:bb:7c:a0:
                    52:ac:d2:a6:19:0b:0c:1e:28:ac:40:8b:c2:ed:a7:
                    41:03:77:bf:a6:53:47:d7:89:8b:08:6a:4c:b8:dd:
                    56:1b:90:d6:e5:f9:a0:a2:63:c0:5b:d1:01:0b:a7:
                    0f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:96:6B:79:97:AC:8D:02:00:6C:C4:00:09:6B:6A:46:C2:22:B6:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f1b7dbb3-367f-303c-8256-f6faa655e78f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:e7:3a:88:9c:d2:d2:79:36:8b:65:9e:62:03:35:a6:55:50:
         86:88:c7:b3:df:b1:b0:d8:2a:f4:52:68:3b:4b:01:c0:3a:76:
         ad:fb:20:d4:2a:be:31:a4:28:a5:5b:9c:7e:52:cc:3d:10:ee:
         08:b4:55:e5:6b:dd:3f:41:1d:d0:1a:01:a8:29:9e:62:78:26:
         97:b4:cf:74:c6:46:0d:d6:0d:ac:f1:01:63:11:fc:6b:ae:2f:
         fb:a0:91:a2:cc:42:39:90:bc:b8:fa:dd:2f:99:86:58:9e:65:
         aa:de:24:ad:94:ec:cd:f3:b5:a7:77:15:94:0a:d6:5e:69:5a:
         80:f2:cb:ad:f8:c8:03:01:73:f0:b0:2b:7b:56:aa:f9:96:ca:
         69:63:1d:37:3e:e2:46:d9:df:e0:38:0c:fb:1f:4b:0d:39:b2:
         0a:c1:94:02:65:de:d3:18:0c:8f:df:52:93:30:67:02:e4:3c:
         fb:a0:c1:03:c7:bc:8c:25:7a:73:1c:33:bd:3b:8c:56:b1:58:
         e0:f4:87:14:ef:80:73:95:59:26:a4:19:b1:34:ac:db:08:5c:
         e5:ab:f1:96:c8:2e:20:61:87:62:a1:c8:52:05:a1:64:49:ae:
         a7:7f:77:44:15:52:43:eb:9f:63:28:03:6d:2f:b2:00:89:5a:
         db:e7:84:a6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnns3+8QqiUQfXmEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
MmVmZDM2ZDgtNzZlOS00MmFmLThiMGMtYTY1MjI1ZTNjZDBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wWUAOmVw97tq219ms04kG4G3urkBpvlH8aN
qGugtyMfatNgHddletgwvArgL8y9Tcm24L5v3HiHgpH8PVJE+OrFWe7lStSkii0H
iw3BHEC0KUaJQK8c45AkHpRomWf32FO0Y+eO//s+svR4vyRaRZDtUbZ4rjYbn/7A
uCe7igGQyvcuBb9pPh/DeLU7dkEUSDNpQp1sud8yJNsVJTVAzK1ci5OGnqauViFW
/XjIYd8GLcl09AijUpiNgqlzyvo9m7Z7B3M8dxjLnt2AgIy7fKBSrNKmGQsMHiis
QIvC7adBA3e/plNH14mLCGpMuN1WG5DW5fmgomPAW9EBC6cP0QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNKWa3mXrI0CAGzEAAlrakbCIracMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZjFiN2RiYjMtMzY3Zi0z
MDNjLTgyNTYtZjZmYWE2NTVlNzhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIbQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKHnOoic0tJ5NotlnmIDNaZVUIaIx7PfsbDYKvRSaDtLAcA6dq37INQq
vjGkKKVbnH5SzD0Q7gi0VeVr3T9BHdAaAagpnmJ4Jpe0z3TGRg3WDazxAWMR/Guu
L/ugkaLMQjmQvLj63S+ZhlieZareJK2U7M3ztad3FZQK1l5pWoDyy634yAMBc/Cw
K3tWqvmWymljHTc+4kbZ3+A4DPsfSw05sgrBlAJl3tMYDI/fUpMwZwLkPPugwQPH
vIwlenMcM707jFaxWOD0hxTvgHOVWSakGbE0rNsIXOWr8ZbILiBhh2KhyFIFoWRJ
rqd/d0QVUkPrn2MoA20vsgCJWtvnhKY=
-----END CERTIFICATE-----