Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/36f59b8f-e886-3108-b780-f4533441984f.roa
File:                     36f59b8f-e886-3108-b780-f4533441984f.roa (raw, json)
Hash identifier:          g9yAJ74WYbVneXhPYHspBn3PeeYJsJkHxi43KYM27GI=
Subject key identifier:   B6:97:F2:6F:19:D7:05:1A:2C:4A:4B:ED:3D:C7:11:60:22:A2:94:2E
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F4328583AA7A6E407AE634F4EF29F6040
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/36f59b8f-e886-3108-b780-f4533441984f.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     36040
IP address blocks:        136.22.146.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:a6:e4:07:ae:63:4f:4e:f2:9f:60:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=934bac36-efc9-4962-afaf-af1f69d7cf5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:4f:da:9a:f4:4c:cf:fc:6a:f9:b3:2e:3e:73:
                    f2:cc:cf:cb:cf:97:44:2a:15:77:10:dc:69:bc:cc:
                    1f:46:b6:e6:73:36:7d:94:d0:87:32:b6:99:50:42:
                    24:95:4f:3d:46:98:e8:eb:7f:90:c6:db:31:4f:b4:
                    b5:a3:96:67:60:33:e1:6d:cc:51:ea:2e:e5:89:8b:
                    17:2d:29:27:8a:49:dc:f5:3f:fb:c6:d3:8a:44:e6:
                    ca:85:f8:05:f3:f3:72:01:9b:4b:07:03:83:0c:d9:
                    68:94:fd:bb:3e:68:43:06:cd:ed:bd:a5:1b:f1:5f:
                    f3:f0:2c:59:e8:5b:ea:d8:38:4e:db:17:1c:0e:99:
                    c8:0e:49:72:c9:ae:3d:69:0f:07:1b:80:bf:c6:16:
                    cf:be:a0:1c:81:e3:35:f0:26:20:03:58:1a:5f:29:
                    9f:49:6e:00:7d:a5:cf:92:c1:1e:6c:48:d9:fa:8d:
                    b9:9b:d2:20:4f:46:37:e0:27:44:94:a4:a4:cc:32:
                    92:b6:61:b6:5b:2e:f3:b8:c5:54:17:c3:c3:ee:32:
                    57:a3:bc:85:b9:1f:14:a1:8f:42:55:e1:c8:0a:2a:
                    d1:7c:55:bd:59:b1:dd:bb:d5:87:a6:f2:c7:0b:18:
                    16:ca:5f:c3:30:1a:21:48:a5:40:a9:82:64:3e:75:
                    2c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:97:F2:6F:19:D7:05:1A:2C:4A:4B:ED:3D:C7:11:60:22:A2:94:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/36f59b8f-e886-3108-b780-f4533441984f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:63:5d:67:21:eb:0f:64:db:6d:5b:5c:02:23:4b:a2:a5:f4:
         e5:cf:a6:20:02:21:7c:8b:9d:4c:f8:0c:b9:8f:88:39:b4:5a:
         69:b5:da:24:48:4f:f2:4e:53:4e:3b:50:18:2c:a2:95:6c:f7:
         e0:7a:6c:3a:57:4e:56:f2:46:8c:e8:1d:06:c5:85:b8:07:cf:
         fb:91:27:c3:05:f9:df:13:b0:75:0b:50:af:26:50:4f:04:5d:
         ea:2c:fd:a9:fa:05:9e:b3:3e:81:c4:5e:b8:6a:46:2e:02:45:
         05:64:3a:92:5c:81:97:c9:5a:47:79:d9:29:16:ef:25:38:2f:
         66:13:40:be:2c:42:74:18:65:a8:e2:97:4c:45:4e:d4:96:82:
         b8:ac:ed:86:06:c8:fb:22:52:8d:e4:14:fa:a2:19:25:9f:9c:
         ef:a3:78:e9:5b:bc:89:fd:fd:fc:61:a7:22:f0:05:af:17:e4:
         37:42:13:38:e4:dd:4c:8a:1a:bf:eb:b1:f3:06:8f:98:ac:be:
         09:6a:81:8e:99:e7:23:c1:64:5f:36:b2:c7:79:59:cf:0c:79:
         9d:1a:3b:73:99:72:2b:82:e4:a7:50:82:8d:5e:59:e1:1e:54:
         c0:01:be:2c:01:f7:1f:40:17:88:28:1d:ed:49:50:72:1d:fd:
         c5:95:7f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----