Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f7b13a52-3717-3fb1-976c-64e6020ded0d.roa
File:                     f7b13a52-3717-3fb1-976c-64e6020ded0d.roa (raw, json)
Hash identifier:          Nvig27FRPfdZ8w3z0sECmjvo4KFn1nmB5ZjkkKgnq7E=
Subject key identifier:   1E:62:E7:71:3D:D3:FA:40:20:28:8D:41:AA:50:6E:9F:F8:FE:87:AF
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328583AA7C14945753745EE94A56F20
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f7b13a52-3717-3fb1-976c-64e6020ded0d.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     15169
IP address blocks:        104.134.138.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:c1:49:45:75:37:45:ee:94:a5:6f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=eb1c77a7-869e-49fa-804c-529cfb146732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:74:7c:42:5f:0f:16:af:98:4d:2e:a1:1c:be:
                    2a:7f:c1:fe:39:cd:cd:d5:16:6d:1b:b3:b6:d3:7e:
                    27:6e:10:b1:63:a2:8e:a9:92:db:0b:fc:33:09:e1:
                    1b:a0:f1:24:8f:07:42:c0:7d:0e:00:4a:90:52:dd:
                    b7:03:58:2f:6a:7f:71:37:b1:97:36:3f:39:06:3b:
                    9a:56:30:82:02:6d:c0:01:ab:c3:82:a2:6a:78:f5:
                    74:a5:e7:5e:0d:12:aa:8c:8e:b9:08:65:0a:fc:fc:
                    f0:02:49:73:da:b4:d0:e1:d3:99:e5:9f:9d:d3:f4:
                    71:df:c1:e1:39:98:a8:e0:cd:d3:84:de:2f:bd:ab:
                    14:0f:f2:53:2d:dd:d6:4d:15:73:f1:a5:9e:fa:07:
                    7c:33:d6:1d:b8:16:b8:d7:aa:34:50:87:38:49:0a:
                    2b:b5:fb:c0:4b:39:93:8f:83:c9:78:df:b9:7c:10:
                    e0:07:e0:ae:ac:da:a6:c2:d3:af:4b:c4:af:1e:da:
                    50:10:8b:55:04:10:9f:0c:b7:ce:b6:03:65:6d:a9:
                    8b:ae:8d:88:f2:02:64:90:9b:51:68:40:78:cc:32:
                    58:91:26:d6:55:9b:fc:a3:ef:e9:f5:c1:f3:5b:7c:
                    97:c7:31:bd:36:2a:bb:e6:70:44:4f:48:8f:fd:34:
                    b8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:62:E7:71:3D:D3:FA:40:20:28:8D:41:AA:50:6E:9F:F8:FE:87:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f7b13a52-3717-3fb1-976c-64e6020ded0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:32:c1:64:20:ef:15:6c:8a:d9:96:e9:c7:68:44:75:0e:15:
         06:70:0f:1c:1e:ed:2a:d2:f8:95:3e:0b:00:1b:16:97:72:31:
         e0:2e:20:b3:53:82:11:9c:1e:e2:d0:44:6f:66:4e:4f:77:4f:
         88:d9:0a:45:26:c6:bc:d3:3d:0f:90:6a:ba:cb:3f:e9:92:ef:
         88:af:c7:08:78:65:20:c7:10:43:6b:d2:61:96:d8:fd:97:22:
         a1:bd:c6:a8:20:f6:ed:74:61:05:42:bc:f2:a8:21:e2:71:d4:
         57:6b:88:81:f1:b6:71:06:00:34:cf:40:f6:a4:d4:e1:86:45:
         d0:8b:8c:da:b5:48:da:9b:3d:9e:97:31:19:83:2a:52:11:e7:
         dc:85:a2:1f:56:0b:16:22:7b:dd:1c:0f:10:3f:64:20:f9:58:
         bf:90:6c:5c:18:e8:9e:94:c9:a6:dc:01:9c:74:82:d8:0d:44:
         bc:79:de:1f:ab:8e:a9:a0:ce:48:b5:6a:ae:2a:1c:2a:25:ab:
         37:e2:3c:e9:48:72:30:fd:ab:76:53:b3:bd:7f:dc:41:05:b7:
         38:1e:8e:9d:a5:c3:ac:97:e8:ab:ca:64:7e:cc:d3:ab:fd:d4:
         a5:f8:96:2d:11:df:70:88:b8:dd:98:52:d9:2f:cc:80:c1:f7:
         3e:91:c4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:38 2023 by rpki-client on console-fra.rpki-client.org