Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/6899cf7f-69d9-3c7e-9e04-015f6979d706.roa
File:                     6899cf7f-69d9-3c7e-9e04-015f6979d706.roa (raw, json)
Hash identifier:          KDOQICEZQZOYBfdiVgDiU78hR/RqcHz4n3//EG4PUCU=
Subject key identifier:   6A:FE:28:C5:C3:3E:52:1B:53:87:BC:AF:01:90:CC:01:3F:FD:D7:39
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328583AA7AE9AB151A96FA91DE87E00
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/6899cf7f-69d9-3c7e-9e04-015f6979d706.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     36492
IP address blocks:        136.22.212.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:ae:9a:b1:51:a9:6f:a9:1d:e8:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=cbc860d2-bd8c-4607-a6eb-faff18c07c8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b0:c0:ba:5d:57:b9:80:7b:fe:25:06:b4:f4:
                    b4:5a:01:47:36:88:8b:c0:1f:83:32:ef:37:89:d6:
                    0b:2c:e1:d8:3a:89:b8:dd:3b:41:d4:ae:1f:cd:73:
                    f0:e0:f9:94:ef:c4:96:60:c9:a8:ee:fc:2f:69:2c:
                    8f:da:b0:46:5a:4f:8c:8e:6c:08:11:82:89:4b:e5:
                    26:fe:e6:46:d2:c6:63:c6:94:6f:d1:eb:ab:b9:9f:
                    72:99:ba:d4:02:19:9a:83:5a:7b:90:fc:1a:09:ba:
                    38:e2:cc:aa:bf:0e:3e:9a:c4:88:b1:02:40:e2:23:
                    76:b5:55:b3:47:37:1a:fc:d5:e6:68:cd:2e:69:0f:
                    e1:36:b7:fa:fe:36:8b:b4:3e:e7:3c:4c:23:91:bb:
                    18:55:c5:fd:7a:ba:37:36:3b:b8:96:57:6f:7f:74:
                    cc:af:dc:a6:e9:ad:29:ff:d4:e6:58:d6:69:49:98:
                    fe:a0:c2:94:7d:ab:c8:a5:36:0d:da:ed:b6:5f:6b:
                    0f:66:8e:bc:16:e1:58:54:60:92:11:e5:20:16:18:
                    f4:4d:a4:6f:e7:ed:3d:98:1f:53:5d:a1:79:74:c0:
                    53:1b:26:06:72:13:25:5d:09:5e:b8:04:ba:05:fd:
                    87:41:74:1f:a8:4b:9b:9c:bb:0d:41:e0:7d:c2:a0:
                    2c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:FE:28:C5:C3:3E:52:1B:53:87:BC:AF:01:90:CC:01:3F:FD:D7:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/6899cf7f-69d9-3c7e-9e04-015f6979d706.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.212.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:d7:f9:bb:90:6e:b4:4e:fb:16:4b:e2:6a:c1:5c:eb:36:43:
         d9:a0:f0:81:75:7d:13:e0:37:a3:83:ae:41:ed:85:e2:cf:e7:
         45:53:05:ea:ac:63:65:20:54:1e:90:12:0a:81:1a:34:58:e7:
         68:b5:27:bc:5e:6e:ac:0f:a1:5e:30:22:69:f7:6d:72:90:78:
         87:3c:a0:f4:99:41:a1:82:76:74:af:fe:78:02:5b:62:70:73:
         b2:54:43:7d:df:8d:1d:92:7f:c5:2f:32:83:c7:ef:53:52:6c:
         ed:c5:2b:b4:f0:3c:4d:f7:22:52:eb:61:6e:98:0d:8d:9a:fe:
         dc:94:d9:86:a2:a0:95:02:2b:b4:ae:d9:99:bd:77:11:0a:9c:
         27:bc:34:63:80:f9:45:93:39:41:6c:8d:5d:da:fa:d6:55:89:
         ca:00:d7:f4:d9:68:cb:35:e4:55:23:80:e2:d1:9d:c5:35:4f:
         15:f3:eb:b0:8d:40:68:e1:ab:10:c0:eb:38:eb:cd:56:5a:ff:
         3d:56:ac:c0:71:3a:aa:9c:42:88:1c:8f:a3:b5:4a:b0:21:e8:
         7c:69:4d:e4:11:bf:20:79:00:87:bf:2a:a5:84:52:ca:39:ab:
         da:85:d1:e7:cb:62:a7:1b:f1:35:1c:77:23:90:db:1e:86:3b:
         f7:6d:ee:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:38 2023 by rpki-client on console-fra.rpki-client.org