Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f52c5f67-8e71-3350-85de-06dad52d9504.roa
File:                     f52c5f67-8e71-3350-85de-06dad52d9504.roa (raw, json)
Hash identifier:          GUQLXWGj+losKeZHYOh4q3BRPEBRTIKqvnIGCcMSKcw=
Subject key identifier:   98:A6:01:79:72:CE:98:DA:72:2A:25:8D:D4:D5:F1:53:42:D4:3D:33
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328583AA7B2DC84DE1C11DF4230B3C0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f52c5f67-8e71-3350-85de-06dad52d9504.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     15169
IP address blocks:        104.134.200.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:b2:dc:84:de:1c:11:df:42:30:b3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=81755f12-3b13-46ea-8e20-dae6d16644d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:07:2a:6a:0f:03:33:50:1e:65:9a:44:81:76:
                    a7:d5:7d:17:04:0a:ca:07:16:bb:b9:9b:65:25:75:
                    17:64:8b:e0:7c:e0:08:7c:03:dd:d2:2d:ce:1c:ac:
                    8c:d0:bd:83:6c:95:ed:5a:ab:cf:45:de:15:8b:2d:
                    6a:7f:e6:34:4b:dd:d4:1f:c9:2a:15:f4:4d:08:ca:
                    26:c5:74:d4:d7:0d:52:dc:12:66:81:98:13:46:f8:
                    47:33:14:bd:17:64:ae:29:8d:7e:a9:48:fd:61:46:
                    68:1e:a2:c3:6b:d0:76:7d:6e:43:67:0f:46:c3:03:
                    75:f0:f5:bb:70:56:8e:b0:d4:16:ef:cc:ad:20:e7:
                    7d:a9:0c:56:14:48:36:cf:d2:45:c9:70:ed:7b:59:
                    b7:4f:4d:fa:72:b5:f6:05:e1:55:8a:87:4e:0d:26:
                    a5:26:5c:7d:21:16:c2:58:d9:fa:4b:f5:63:05:5b:
                    ea:cf:e4:83:f2:33:c4:cc:28:1c:42:7b:51:0d:13:
                    f8:61:7f:e5:7b:33:68:03:ad:fa:e6:5d:f2:b2:7e:
                    47:64:bf:6b:43:5a:76:18:56:8a:9d:d2:be:d4:c0:
                    78:4d:82:2f:81:ff:5e:99:e5:b3:35:25:bb:96:1f:
                    c2:47:66:69:37:9e:df:48:6a:d1:3a:01:0a:f3:62:
                    60:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:A6:01:79:72:CE:98:DA:72:2A:25:8D:D4:D5:F1:53:42:D4:3D:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f52c5f67-8e71-3350-85de-06dad52d9504.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:05:cc:a2:96:04:b1:cd:d8:e0:89:e0:6d:1d:44:53:a1:6b:
         f6:9b:64:64:24:07:e2:78:ac:68:23:b7:cc:61:d6:9c:23:81:
         4c:15:de:97:af:6f:84:78:0d:b9:7d:03:85:df:c2:89:aa:36:
         e4:83:51:16:dd:d7:02:c1:5f:b5:01:d7:b3:5d:b3:6d:83:7e:
         21:86:e7:5d:b5:55:3c:ae:ad:a4:81:48:47:be:54:b7:d3:bb:
         f2:16:c9:aa:fe:69:4e:d2:74:55:6b:20:a5:05:49:cb:d1:80:
         e9:6f:c3:0e:08:b9:e7:06:f6:40:54:05:e8:90:cf:d0:8e:8a:
         ff:3b:9c:df:5f:48:73:ba:9c:c9:b0:e5:61:a6:d5:c1:15:63:
         0d:1b:29:d2:11:22:4c:89:27:62:03:ba:47:30:32:3e:99:3d:
         42:5e:da:a7:10:ed:43:df:cf:5d:0e:c2:5b:6d:01:3c:bc:10:
         a6:c5:bf:b1:1d:28:2e:0e:cd:ee:59:0f:98:5f:cd:93:c3:9f:
         6c:f5:16:1d:65:7d:b1:90:d0:07:3f:b9:39:8e:d8:d1:f0:f0:
         a2:06:63:db:a9:e1:32:bf:34:01:65:59:d7:c6:d8:0e:8b:cb:
         64:0d:c1:d2:3f:b9:4f:2b:ac:88:23:f1:27:92:1b:65:1d:32:
         fe:7a:84:9c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnstyE3hwR30Iws8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
ODE3NTVmMTItM2IxMy00NmVhLThlMjAtZGFlNmQxNjY0NGQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQcqag8DM1AeZZpEgXan1X0XBArKBxa7uZtl
JXUXZIvgfOAIfAPd0i3OHKyM0L2DbJXtWqvPRd4Viy1qf+Y0S93UH8kqFfRNCMom
xXTU1w1S3BJmgZgTRvhHMxS9F2SuKY1+qUj9YUZoHqLDa9B2fW5DZw9GwwN18PW7
cFaOsNQW78ytIOd9qQxWFEg2z9JFyXDte1m3T036crX2BeFViodODSalJlx9IRbC
WNn6S/VjBVvqz+SD8jPEzCgcQntRDRP4YX/lezNoA6365l3ysn5HZL9rQ1p2GFaK
ndK+1MB4TYIvgf9emeWzNSW7lh/CR2ZpN57fSGrROgEK82Jg7wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJimAXlyzpjacioljdTV8VNC1D0zMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZjUyYzVmNjctOGU3MS0z
MzUwLTg1ZGUtMDZkYWQ1MmQ5NTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIbIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFUFzKKWBLHN2OCJ4G0dRFOha/abZGQkB+J4rGgjt8xh1pwjgUwV3pev
b4R4Dbl9A4XfwomqNuSDURbd1wLBX7UB17Nds22DfiGG5121VTyuraSBSEe+VLfT
u/IWyar+aU7SdFVrIKUFScvRgOlvww4IuecG9kBUBeiQz9COiv87nN9fSHO6nMmw
5WGm1cEVYw0bKdIRIkyJJ2IDukcwMj6ZPUJe2qcQ7UPfz10OwlttATy8EKbFv7Ed
KC4Oze5ZD5hfzZPDn2z1Fh1lfbGQ0Ac/uTmO2NHw8KIGY9up4TK/NAFlWdfG2A6L
y2QNwdI/uU8rrIgj8SeSG2UdMv56hJw=
-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:38 2023 by rpki-client on console-fra.rpki-client.org