Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/7f78a67d-ad5d-3aaa-838a-d9a5b9e93903.roa
File:                     7f78a67d-ad5d-3aaa-838a-d9a5b9e93903.roa (raw, json)
Hash identifier:          EfP93rqOP/LyCf05Rm7YVYTOuQzIc/eNmaf8pbvvx4g=
Subject key identifier:   ED:CF:9C:03:27:55:E2:B7:62:FE:B6:17:A7:C5:05:B7:01:69:86:71
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F4328583AA7B28B7DEB894D4674C8B140
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/7f78a67d-ad5d-3aaa-838a-d9a5b9e93903.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     36040
IP address blocks:        136.22.145.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:b2:8b:7d:eb:89:4d:46:74:c8:b1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=b9f17983-8959-4cdc-ab1f-bf86b9e592b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a7:95:34:d0:7a:cd:6d:c9:c3:46:6d:e6:91:
                    fd:83:11:33:a6:bd:a3:b2:ac:c8:db:95:05:32:e3:
                    fe:43:34:6d:9c:bd:c5:e5:58:51:d6:3d:a3:71:8f:
                    d2:a7:18:1e:e2:3a:5b:2d:28:f4:55:ff:50:2d:6d:
                    20:94:a0:51:3b:6b:ae:94:b3:f7:aa:1f:58:f7:c2:
                    77:38:3f:94:44:c6:40:fa:20:1f:ce:26:db:b8:ac:
                    51:79:5d:b8:32:a1:9c:03:24:a5:1f:8a:e9:53:15:
                    a2:bc:78:74:41:86:5a:67:ed:7e:01:64:e4:a5:3a:
                    6e:3a:4f:2d:32:a6:95:f4:73:7f:6f:88:43:ac:b0:
                    77:a8:cf:ca:82:d8:a9:99:aa:ba:4b:df:c9:16:c4:
                    3f:cb:ba:3c:6c:c5:cb:94:d0:6f:f9:4d:c3:bd:c8:
                    d9:83:ed:2b:a8:5d:df:a2:18:a1:d7:86:3a:57:d4:
                    16:f8:d1:d1:5e:a4:71:e0:6f:b5:81:b2:51:fe:78:
                    cd:3b:ee:5d:2d:2f:be:63:fc:b1:27:f8:88:6f:c5:
                    19:c8:6f:28:52:be:13:b7:4d:44:89:7f:1a:5c:c3:
                    f0:23:67:35:e4:c0:f0:e8:23:49:b3:60:b0:70:23:
                    9d:09:ca:14:49:10:10:a0:62:5f:0e:fa:7c:07:e5:
                    ec:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:CF:9C:03:27:55:E2:B7:62:FE:B6:17:A7:C5:05:B7:01:69:86:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/7f78a67d-ad5d-3aaa-838a-d9a5b9e93903.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:5e:80:63:e7:45:cb:89:48:20:0e:cf:2b:8b:f0:58:14:f3:
         6c:d7:93:20:76:41:a4:3a:39:59:30:ae:a9:d0:2a:12:ce:be:
         d0:9f:fa:db:54:e5:2a:51:71:d5:27:40:c1:8e:e2:8f:6c:d8:
         ad:58:b4:37:e0:f7:96:c0:ba:e6:c5:11:1b:52:32:bf:83:f5:
         ff:74:c7:9f:ff:6d:be:26:89:7f:1f:61:87:a7:8a:10:63:73:
         e0:98:a5:f3:c9:9f:f9:72:f8:70:b4:9d:0a:7b:e5:c9:32:87:
         e8:6f:23:2b:61:78:93:6e:74:56:72:ca:6b:c4:40:51:21:68:
         52:e6:7a:00:4f:be:d4:07:95:73:6f:3b:3b:49:a1:3d:51:7f:
         c5:aa:39:67:e9:c3:1f:a2:0e:06:83:60:a2:59:5e:2a:5d:41:
         7c:ca:d7:e5:67:26:c3:25:69:48:e1:3c:44:19:21:dd:5b:01:
         31:21:09:fd:55:8f:ca:0f:8e:c6:6d:84:17:48:5d:d1:00:ec:
         22:c3:68:e7:56:ac:24:0a:28:cb:89:e8:dc:e1:12:e0:57:49:
         c7:f6:6b:5b:78:86:94:91:92:ed:c2:f5:85:c3:eb:da:f8:fd:
         00:e2:ab:92:ef:80:b9:c6:d0:8a:41:a6:c4:73:d9:48:16:64:
         77:5d:57:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:47 2023 by rpki-client on console-fra.rpki-client.org