Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/940c8633-2f71-32b3-8190-9073cc37e3aa.roa
File:                     940c8633-2f71-32b3-8190-9073cc37e3aa.roa (raw, json)
Hash identifier:          JfNsKgGRAuq3vOfRNDRqg8SZ3Mn7oHKrYE2kUotu9B0=
Subject key identifier:   A4:BB:E4:47:67:D6:20:48:39:52:20:BA:A1:C2:07:DB:51:A6:15:63
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F4328583AA7C398E34F59F9C2138BFA80
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/940c8633-2f71-32b3-8190-9073cc37e3aa.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     36040
IP address blocks:        136.22.148.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:c3:98:e3:4f:59:f9:c2:13:8b:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=05df51ec-cb08-46da-a687-a11fd7d47250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:56:5a:20:20:78:94:69:54:7b:1b:7f:89:ac:
                    cb:2e:6a:18:e6:ab:dc:76:04:d2:0e:02:94:58:80:
                    86:88:79:16:31:52:40:ef:1a:34:ae:97:15:7e:a3:
                    9e:ca:c4:86:0d:c0:f2:55:f8:53:47:3f:db:2f:9f:
                    da:ba:bf:7c:69:fb:f4:44:d0:f1:a3:58:56:ad:e1:
                    65:75:b4:c1:f6:46:38:b0:6d:06:fa:a7:25:86:af:
                    92:24:6a:73:4c:1e:63:e4:bb:7b:7a:dd:61:b7:10:
                    0e:98:85:f9:ae:33:d3:a7:19:f6:49:82:9b:1b:88:
                    b6:5f:5f:c6:2f:40:9d:aa:30:ff:0e:a8:2c:87:39:
                    6c:df:ca:3a:f3:b4:e2:60:e3:83:64:65:7b:38:be:
                    aa:c7:f8:3d:ee:1e:eb:d9:e3:57:41:22:78:d0:61:
                    d9:2c:0e:29:28:cd:4b:37:21:05:2b:23:6d:eb:34:
                    d6:a2:f0:bb:c3:da:42:f6:72:4e:0c:45:5e:d4:f8:
                    2f:c7:54:58:e5:d4:11:3a:3e:fe:bc:fc:74:65:36:
                    4c:e5:df:be:50:8a:d3:66:09:43:db:b6:77:8a:5e:
                    eb:16:5d:c1:9f:fd:7a:85:a5:66:aa:a9:ca:1b:24:
                    61:77:f3:09:29:0e:23:66:b9:10:25:09:25:00:18:
                    3d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:BB:E4:47:67:D6:20:48:39:52:20:BA:A1:C2:07:DB:51:A6:15:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/940c8633-2f71-32b3-8190-9073cc37e3aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:05:33:45:89:35:71:18:34:99:a9:43:0e:52:9e:c3:46:49:
         ff:54:70:49:54:e6:b0:95:80:bc:7b:69:f1:f6:c3:5c:a4:ac:
         0b:8e:06:25:31:10:7b:7c:71:4e:ee:72:53:0a:02:90:2f:d3:
         b8:6d:bc:e8:d9:7d:16:b7:6f:fe:86:b9:84:71:2b:c9:01:67:
         b8:ee:08:16:b7:3b:2a:46:68:6a:0c:b2:cd:1e:ea:ec:65:d5:
         35:f9:aa:32:02:1c:21:e0:03:33:86:c5:5e:f5:15:fa:18:af:
         e4:c8:13:04:27:fa:a8:ba:03:63:8e:f6:a4:ea:4e:64:1e:55:
         12:b1:f1:1b:18:35:73:aa:e8:b8:73:bb:07:ee:98:f7:33:e0:
         dc:71:29:02:2b:f7:3d:b5:24:af:b2:1c:b0:29:34:41:7f:12:
         1a:86:e0:74:f8:42:14:d7:06:7b:f9:a2:5d:bf:11:18:54:34:
         d2:08:fe:39:2d:cd:12:82:09:a6:fe:e9:45:18:24:66:5b:96:
         4e:cc:86:89:b7:f1:41:1d:25:32:e8:67:2e:20:a5:38:d9:e0:
         69:9d:c9:8e:8d:c7:6c:3b:e9:66:2f:44:56:b3:e2:b1:eb:8c:
         7a:5a:49:07:af:03:25:e7:bf:88:dc:67:48:7c:b3:af:07:35:
         eb:24:47:26
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnw5jjT1n5whOL+oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh
ZWEyMB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
MDVkZjUxZWMtY2IwOC00NmRhLWE2ODctYTExZmQ3ZDQ3MjUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1ZaICB4lGlUext/iazLLmoY5qvcdgTSDgKU
WICGiHkWMVJA7xo0rpcVfqOeysSGDcDyVfhTRz/bL5/aur98afv0RNDxo1hWreFl
dbTB9kY4sG0G+qclhq+SJGpzTB5j5Lt7et1htxAOmIX5rjPTpxn2SYKbG4i2X1/G
L0CdqjD/Dqgshzls38o687TiYOODZGV7OL6qx/g97h7r2eNXQSJ40GHZLA4pKM1L
NyEFKyNt6zTWovC7w9pC9nJODEVe1Pgvx1RY5dQROj7+vPx0ZTZM5d++UIrTZglD
27Z3il7rFl3Bn/16haVmqqnKGyRhd/MJKQ4jZrkQJQklABg9ywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKS75Edn1iBIOVIguqHCB9tRphVjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2
Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvOTQwYzg2MzMtMmY3MS0z
MmIzLTgxOTAtOTA3M2NjMzdlM2FhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4
ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh
YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2
MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiBaUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHwFM0WJNXEYNJmpQw5SnsNGSf9UcElU5rCVgLx7afH2w1ykrAuOBiUx
EHt8cU7uclMKApAv07htvOjZfRa3b/6GuYRxK8kBZ7juCBa3OypGaGoMss0e6uxl
1TX5qjICHCHgAzOGxV71FfoYr+TIEwQn+qi6A2OO9qTqTmQeVRKx8RsYNXOq6Lhz
uwfumPcz4NxxKQIr9z21JK+yHLApNEF/EhqG4HT4QhTXBnv5ol2/ERhUNNII/jkt
zRKCCab+6UUYJGZblk7Mhom38UEdJTLoZy4gpTjZ4GmdyY6Nx2w76WYvRFaz4rHr
jHpaSQevAyXnv4jcZ0h8s68HNeskRyY=
-----END CERTIFICATE-----