Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/8657333c-bd10-3617-9dbf-f50590353832.roa
File:                     8657333c-bd10-3617-9dbf-f50590353832.roa (raw, json)
Hash identifier:          1oZwyygRVmxaklfQ37EQXHS36GXXiwvrpxjZ01q0cHU=
Subject key identifier:   F8:46:85:CA:F5:5F:AB:A7:B3:36:B1:2A:22:5D:0A:38:09:30:AE:5B
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F4328583AA7AE67B5B182BA20424B0C80
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/8657333c-bd10-3617-9dbf-f50590353832.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     36040
IP address blocks:        136.22.128.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:ae:67:b5:b1:82:ba:20:42:4b:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=551a1814-789a-4027-b50c-7b31d028524b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:70:3b:cb:d3:2b:29:04:60:0f:63:95:9b:b9:
                    a7:a5:f8:68:85:c7:aa:a5:59:30:d7:af:5d:a9:75:
                    4d:ff:9a:0a:99:68:0f:64:09:25:12:e6:ab:1f:a3:
                    ce:94:7c:f9:c2:47:d9:e0:01:31:50:8d:db:29:8b:
                    af:b0:c0:60:ff:df:ce:b5:f5:b7:d0:b0:f7:f3:81:
                    99:82:8f:e1:75:8a:d7:95:c6:9c:c6:7c:34:b9:b9:
                    61:41:9a:95:3d:c7:89:bb:e6:8f:72:92:53:cc:28:
                    67:24:f9:8a:7b:8f:e1:c7:22:c7:9d:bc:29:2e:79:
                    cb:fa:52:c9:f7:15:b0:2d:31:c0:b7:da:a3:d8:a8:
                    15:d2:6f:0a:7d:f4:34:9c:55:75:f9:ab:39:f9:da:
                    5c:ee:65:be:b5:46:10:e4:ea:4b:f2:3b:aa:2f:79:
                    58:b6:44:c0:af:48:f4:cf:42:95:05:1f:ad:88:9b:
                    f3:af:1a:e0:aa:36:e9:09:eb:f4:93:99:bc:26:e1:
                    e9:08:1c:8b:06:5d:7c:20:7e:89:cb:80:7f:b6:02:
                    d1:2d:67:9e:77:90:28:04:44:e0:bf:cd:a5:b8:10:
                    7e:4c:fb:c4:18:0e:33:39:7d:91:62:01:e8:42:dc:
                    25:e5:7a:62:6a:13:5b:62:79:f8:c7:23:d2:d6:aa:
                    11:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:46:85:CA:F5:5F:AB:A7:B3:36:B1:2A:22:5D:0A:38:09:30:AE:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/8657333c-bd10-3617-9dbf-f50590353832.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:10:b0:a0:b8:d0:d4:c2:50:28:5f:2e:6a:24:ef:13:6e:d9:
         00:99:bb:e4:56:5b:57:99:41:43:84:0d:33:eb:80:f4:61:5f:
         1d:a0:72:e6:6f:f3:ed:59:0f:71:69:42:d1:81:4f:d6:1e:9d:
         21:2a:63:39:4d:d5:6f:05:cf:36:ae:2a:7f:0a:26:c0:e0:3d:
         fd:71:1e:a9:9a:56:3c:33:78:45:5c:d6:ab:7e:2b:66:41:f5:
         85:90:ac:62:50:e2:3b:9a:28:74:24:44:de:e7:c6:1c:a6:b3:
         cd:a2:08:22:65:80:26:e4:26:eb:3a:f5:75:ae:e6:72:8b:5f:
         ff:24:20:7d:1b:90:e5:a7:82:d0:76:27:8e:da:68:b0:1e:28:
         c8:ea:11:ed:b8:e3:e4:bf:97:1c:b4:de:fa:2b:8b:cb:d9:38:
         5d:e1:10:06:2a:fb:2a:6f:4f:b1:c0:1c:c7:a6:18:fe:f5:23:
         ef:7c:91:72:c9:44:3b:d1:40:5e:10:61:ac:09:71:06:ab:53:
         37:a2:a8:96:58:64:54:f4:2c:b2:4a:89:ea:e6:82:84:82:4b:
         6c:ab:a9:1c:d1:89:7c:23:df:45:1c:e9:c3:53:a6:85:96:c7:
         7a:e1:6b:77:48:0e:28:ce:45:51:27:ae:95:fc:1e:92:75:2f:
         7c:f6:a6:46
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnrme1sYK6IEJLDIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh
ZWEyMB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
NTUxYTE4MTQtNzg5YS00MDI3LWI1MGMtN2IzMWQwMjg1MjRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnA7y9MrKQRgD2OVm7mnpfhohceqpVkw169d
qXVN/5oKmWgPZAklEuarH6POlHz5wkfZ4AExUI3bKYuvsMBg/9/OtfW30LD384GZ
go/hdYrXlcacxnw0ublhQZqVPceJu+aPcpJTzChnJPmKe4/hxyLHnbwpLnnL+lLJ
9xWwLTHAt9qj2KgV0m8KffQ0nFV1+as5+dpc7mW+tUYQ5OpL8juqL3lYtkTAr0j0
z0KVBR+tiJvzrxrgqjbpCev0k5m8JuHpCByLBl18IH6Jy4B/tgLRLWeed5AoBETg
v82luBB+TPvEGA4zOX2RYgHoQtwl5XpiahNbYnn4xyPS1qoRqwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPhGhcr1X6unszaxKiJdCjgJMK5bMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2
Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvODY1NzMzM2MtYmQxMC0z
NjE3LTlkYmYtZjUwNTkwMzUzODMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4
ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh
YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2
MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiBaAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF4QsKC40NTCUChfLmok7xNu2QCZu+RWW1eZQUOEDTPrgPRhXx2gcuZv
8+1ZD3FpQtGBT9YenSEqYzlN1W8FzzauKn8KJsDgPf1xHqmaVjwzeEVc1qt+K2ZB
9YWQrGJQ4juaKHQkRN7nxhyms82iCCJlgCbkJus69XWu5nKLX/8kIH0bkOWngtB2
J47aaLAeKMjqEe244+S/lxy03vori8vZOF3hEAYq+ypvT7HAHMemGP71I+98kXLJ
RDvRQF4QYawJcQarUzeiqJZYZFT0LLJKiermgoSCS2yrqRzRiXwj30Uc6cNTpoWW
x3rha3dIDijORVEnrpX8HpJ1L3z2pkY=
-----END CERTIFICATE-----