Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/fee3c8e2-dbf2-3e79-90b7-6e2379635a8c.roa
File:                     fee3c8e2-dbf2-3e79-90b7-6e2379635a8c.roa (raw, json)
Hash identifier:          GXyPXvKvPPYZf+j2hrEOVcPt2jZQITG+6a8bvDv+g84=
Subject key identifier:   86:94:A2:00:D1:76:1D:39:D1:94:BB:9B:0A:D3:99:15:CC:9C:A9:DF
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328583AA79E6E72CF81BCF4163D6500
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/fee3c8e2-dbf2-3e79-90b7-6e2379635a8c.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     41264
IP address blocks:        104.133.208.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:9e:6e:72:cf:81:bc:f4:16:3d:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=10652d22-df2b-4f0b-9cb1-a4398e6ca54c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e1:c1:12:ed:d8:1e:6f:9a:86:97:6e:c6:68:
                    d9:81:7c:cc:eb:68:b4:01:69:d7:98:26:53:a3:c3:
                    d7:f2:1b:c4:a8:9c:33:b1:b5:01:c8:7e:68:52:d8:
                    56:68:da:4c:dc:8a:45:d4:7c:97:92:96:e9:3f:74:
                    41:b0:1a:c4:29:50:64:ef:37:32:2f:4e:e9:b7:2e:
                    80:9d:74:b2:ca:09:d0:ca:8a:55:72:82:62:24:18:
                    eb:37:9d:75:98:51:10:02:fa:01:29:d7:f4:59:10:
                    c8:5f:a1:b9:3b:20:f6:8b:1b:3e:90:02:53:17:72:
                    8e:e4:a9:6e:bf:57:ea:90:7a:cb:79:ab:97:77:61:
                    36:53:65:2d:57:94:09:2f:1a:12:0e:89:c4:ad:70:
                    62:c6:a1:1b:65:06:23:71:43:e9:8b:37:59:ba:e2:
                    c3:91:d6:16:5b:55:ac:09:40:c6:17:72:19:7c:19:
                    47:c4:3a:10:01:06:fc:d3:4a:21:42:07:38:31:1f:
                    68:b6:cc:b2:a4:b6:5c:db:77:50:9a:16:46:1d:b1:
                    6f:54:3b:87:73:41:20:1b:00:0f:47:fb:b5:26:20:
                    77:34:dd:c3:d1:02:77:14:a1:49:08:d6:a2:b3:d9:
                    2c:11:96:45:b2:39:03:64:32:82:cc:14:40:e7:82:
                    8e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:94:A2:00:D1:76:1D:39:D1:94:BB:9B:0A:D3:99:15:CC:9C:A9:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/fee3c8e2-dbf2-3e79-90b7-6e2379635a8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:f8:cb:8d:cb:4a:4f:52:c1:ce:46:be:34:77:4e:79:3f:e9:
         91:a1:f5:95:26:50:4e:be:c5:96:dd:9d:28:64:05:92:17:53:
         38:49:65:51:b7:8e:3f:d0:bc:da:5b:a2:fc:2b:5b:81:9b:6b:
         35:08:f4:93:1e:f8:7c:4e:33:57:c9:ac:30:3c:9f:b1:39:21:
         b9:5c:fd:f1:11:e9:22:35:1c:ca:50:7a:88:9e:aa:de:aa:74:
         b7:c8:c9:c4:a6:cc:40:4e:50:15:42:8c:a2:3e:e9:b7:13:3a:
         55:29:c3:3b:da:bb:6e:78:64:54:2f:82:7a:97:37:96:ea:4a:
         8c:eb:e3:9b:3d:95:4a:08:a5:82:9e:59:62:88:87:9c:ff:c8:
         1a:4a:76:37:42:ed:61:39:23:aa:ad:33:07:56:3d:6d:d2:5d:
         09:c7:a5:0e:bf:bb:20:cd:69:41:07:30:20:be:88:bb:41:18:
         46:ea:c1:f0:7c:31:a9:69:45:07:7c:d2:ad:c6:2f:29:e4:18:
         e7:e8:39:4b:33:65:4a:b4:a3:5f:bc:46:fd:14:eb:6b:ed:c7:
         84:99:a1:81:e8:bb:3f:80:7c:a3:3c:55:47:dd:5e:e5:94:eb:
         44:f8:92:7b:42:a4:90:e2:fa:e9:b0:0b:f5:37:70:95:67:0f:
         aa:f3:b4:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:38 2023 by rpki-client on console-fra.rpki-client.org