Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ffcaeacc-6607-31ca-a20f-10bf2398bdf0.roa
File:                     ffcaeacc-6607-31ca-a20f-10bf2398bdf0.roa (raw, json)
Hash identifier:          JoZpbBt80RHCbmjW14GE+8K0Lw0l+ErZi33kKPs9QPE=
Subject key identifier:   B5:CB:ED:3F:27:22:57:55:D2:E7:AC:CB:02:71:6A:87:31:30:34:33
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328583AA7BA13855BE068954DAFBCC0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ffcaeacc-6607-31ca-a20f-10bf2398bdf0.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     15169
IP address blocks:        104.134.142.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:ba:13:85:5b:e0:68:95:4d:af:bc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=c2a2bcfe-82e9-431c-9770-eaf63092b097
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:56:86:ac:77:ab:1b:2b:d5:44:29:3c:11:dc:
                    fa:9b:2c:7b:a6:23:7c:b6:56:8b:ab:c2:0e:5f:e3:
                    0c:9f:d9:20:0d:f9:5c:04:61:53:74:73:03:44:aa:
                    24:7e:a6:ea:42:7e:88:72:36:64:56:bd:8a:f0:4c:
                    5f:f2:10:68:e0:88:82:69:dc:34:cf:a1:81:ee:30:
                    31:5e:bc:20:87:1b:85:85:71:12:80:9f:c8:45:17:
                    99:09:25:31:89:9e:4c:35:3c:f5:e4:ba:24:f9:71:
                    a5:ba:1c:a3:2c:4f:1c:7f:07:ea:a3:ce:84:4a:c0:
                    a0:52:68:d3:9f:20:7f:b0:7d:41:07:57:11:6f:e8:
                    e8:38:90:1c:87:3b:c5:4c:ee:2f:69:97:53:a6:ed:
                    89:b6:25:cc:d3:06:2c:c0:56:c1:18:4a:a4:59:15:
                    9e:83:4c:bb:49:5d:db:4a:0a:d1:3d:6f:69:9d:19:
                    13:f2:55:ad:b5:66:d0:fc:9d:83:65:00:a9:29:4b:
                    bb:37:97:c1:e6:6d:cd:df:24:93:6a:65:f0:8b:7b:
                    5d:2d:ca:aa:9b:ad:bc:73:5b:68:c5:72:a8:0b:47:
                    a3:2a:0c:0f:58:5f:cd:9c:11:67:aa:ed:59:3d:34:
                    24:47:5d:2d:9e:fe:2c:57:af:93:c9:a2:f7:bf:1c:
                    ff:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:CB:ED:3F:27:22:57:55:D2:E7:AC:CB:02:71:6A:87:31:30:34:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ffcaeacc-6607-31ca-a20f-10bf2398bdf0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:fe:9f:7a:b9:79:43:4a:e7:5b:42:40:0a:a6:cc:b4:24:fb:
         c8:6c:de:04:44:f8:90:db:7c:f2:fb:cb:fd:41:6d:6e:a5:1e:
         16:a7:52:79:ce:73:ce:bd:9f:c6:2b:7b:5e:71:ee:1a:19:6c:
         3e:00:98:18:2d:5f:c1:0e:4b:2d:7a:90:a9:a9:b8:1c:21:e7:
         25:aa:5c:66:f7:d9:a9:55:78:97:22:16:5f:a2:a5:4d:b2:df:
         26:af:33:aa:e7:7e:7d:08:4f:39:25:fe:c9:76:9d:6a:34:df:
         00:fd:31:1e:5f:ac:80:70:bf:8f:0a:b1:bf:c0:74:8d:1a:38:
         a3:cc:f7:ed:a0:bd:88:55:3c:65:35:f3:aa:7c:34:a0:76:b6:
         3d:44:b6:bf:2c:4f:e4:b9:c4:8d:5f:f6:d8:37:7f:e6:fd:65:
         c4:52:7b:ea:51:65:cc:8b:4d:89:40:7f:9c:bb:f2:aa:a5:da:
         4f:27:37:97:0b:bf:e5:e4:bc:46:a4:87:35:d6:fc:1e:92:8f:
         e2:ae:64:03:4e:ca:16:3c:3e:94:20:91:b8:58:a1:51:0d:2f:
         04:1f:fa:b9:83:28:df:f2:29:14:8b:76:26:41:85:09:94:1c:
         31:91:82:c2:43:25:2a:c6:2f:3f:db:2f:c0:71:0f:52:4f:ba:
         0a:f5:68:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:38 2023 by rpki-client on console-fra.rpki-client.org