Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/b9006ec8-1e2d-379d-97d8-64032131f10e.roa
File:                     b9006ec8-1e2d-379d-97d8-64032131f10e.roa (raw, json)
Hash identifier:          BwqZode2Wz+tWmNKh1ZBrvfjyl3X5r5Xc2CgaMRZyWU=
Subject key identifier:   56:33:24:7D:4C:F4:3C:D0:5B:4F:65:7F:C1:67:17:20:D9:4B:E8:37
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F4328583AA7B5D8C60BF428586C516F00
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/b9006ec8-1e2d-379d-97d8-64032131f10e.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     36040
IP address blocks:        136.22.146.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:b5:d8:c6:0b:f4:28:58:6c:51:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=22a04451-0101-4a68-855b-c8b50f56c5cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:78:90:17:d3:4a:80:53:48:39:a6:ff:75:24:
                    53:ef:76:71:b8:a9:2a:58:e8:1b:78:22:ce:9d:0d:
                    51:10:40:d2:a3:52:6c:13:7c:c0:c8:bb:1d:b9:a0:
                    8b:78:4e:18:ff:2a:ba:aa:9b:26:b5:2a:4c:2c:a5:
                    b4:ad:95:a3:88:08:ac:b5:46:bf:02:1b:af:af:24:
                    fc:51:ba:72:4c:69:8f:21:32:8a:c4:38:74:1f:ff:
                    16:4b:0c:c7:2d:c6:59:8b:12:a4:5e:1f:2a:7c:33:
                    9f:b0:c3:79:28:29:6f:86:69:c5:fc:88:39:85:7c:
                    66:c4:df:78:c4:b6:d7:6b:0c:ad:ed:30:8f:a6:22:
                    84:42:6d:1b:08:8a:f6:4b:98:32:3a:a7:7c:a7:cc:
                    2d:69:fd:6a:3e:f8:39:de:be:f6:96:34:f4:36:e4:
                    94:9c:48:00:a1:9a:14:c4:1e:d7:d2:a4:0c:12:12:
                    5e:1c:94:f1:5c:2d:ee:9c:eb:fa:2f:a2:b4:a1:07:
                    cf:b8:c2:c7:2a:ac:07:cd:d3:5d:a3:0a:d4:10:42:
                    2f:b7:0d:fb:53:1d:b8:e9:04:7b:af:58:43:b3:4d:
                    b4:6b:aa:19:34:dd:0c:6d:56:b0:07:b0:bb:74:7e:
                    dd:d2:c7:b2:cf:81:07:7f:2d:71:00:42:98:e3:94:
                    03:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:33:24:7D:4C:F4:3C:D0:5B:4F:65:7F:C1:67:17:20:D9:4B:E8:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/b9006ec8-1e2d-379d-97d8-64032131f10e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.146.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:03:c4:21:a9:a9:90:64:12:50:6b:19:cb:0f:76:a0:79:40:
         e5:53:f6:47:96:fc:f6:55:17:de:6f:9d:db:15:cb:e1:1c:22:
         f0:f1:74:0c:cf:45:90:16:5b:7d:21:bc:79:57:8c:83:3c:bd:
         d4:9c:49:31:c5:8c:b6:ba:f8:34:81:40:3f:74:c7:41:80:d9:
         f4:3f:04:98:9c:85:90:8b:ce:81:18:68:13:af:b5:77:72:bb:
         9b:58:d8:91:a6:f5:d9:bc:1b:4b:67:e4:66:5c:10:fc:c1:31:
         23:0d:a2:15:01:83:32:f5:34:ac:82:eb:b8:69:6e:97:fe:c3:
         d8:3f:d8:dd:54:da:42:6b:b6:15:13:70:e7:58:07:0d:e1:ac:
         76:f0:63:46:2e:fc:53:a4:87:a4:d8:03:d1:dc:ff:af:4f:e4:
         fb:81:f8:98:5f:53:df:bd:1a:26:2e:9c:a4:9c:66:94:1b:c4:
         ac:4f:96:6f:88:c8:2c:ed:30:46:44:65:6c:a8:10:03:35:59:
         1b:66:e9:31:fc:d3:5a:20:bf:be:40:46:9e:19:fd:9d:d1:81:
         72:6b:ee:64:f0:dc:5b:8b:a6:e7:ea:12:94:37:a9:d2:a6:dc:
         c4:c4:4b:1d:7b:b2:8f:74:1c:5d:cf:b0:85:ce:f8:f7:71:0c:
         b0:41:5a:16
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqntdjGC/QoWGxRbwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh
ZWEyMB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
MjJhMDQ0NTEtMDEwMS00YTY4LTg1NWItYzhiNTBmNTZjNWNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlniQF9NKgFNIOab/dSRT73ZxuKkqWOgbeCLO
nQ1REEDSo1JsE3zAyLsduaCLeE4Y/yq6qpsmtSpMLKW0rZWjiAistUa/AhuvryT8
UbpyTGmPITKKxDh0H/8WSwzHLcZZixKkXh8qfDOfsMN5KClvhmnF/Ig5hXxmxN94
xLbXawyt7TCPpiKEQm0bCIr2S5gyOqd8p8wtaf1qPvg53r72ljT0NuSUnEgAoZoU
xB7X0qQMEhJeHJTxXC3unOv6L6K0oQfPuMLHKqwHzdNdowrUEEIvtw37Ux246QR7
r1hDs020a6oZNN0MbVawB7C7dH7d0seyz4EHfy1xAEKY45QD8wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFYzJH1M9DzQW09lf8FnFyDZS+g3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2
Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvYjkwMDZlYzgtMWUyZC0z
NzlkLTk3ZDgtNjQwMzIxMzFmMTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4
ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh
YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2
MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBaSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGEDxCGpqZBkElBrGcsPdqB5QOVT9keW/PZVF95vndsVy+EcIvDxdAzP
RZAWW30hvHlXjIM8vdScSTHFjLa6+DSBQD90x0GA2fQ/BJichZCLzoEYaBOvtXdy
u5tY2JGm9dm8G0tn5GZcEPzBMSMNohUBgzL1NKyC67hpbpf+w9g/2N1U2kJrthUT
cOdYBw3hrHbwY0Yu/FOkh6TYA9Hc/69P5PuB+JhfU9+9GiYunKScZpQbxKxPlm+I
yCztMEZEZWyoEAM1WRtm6TH801ogv75ARp4Z/Z3RgXJr7mTw3FuLpufqEpQ3qdKm
3MTESx17so90HF3PsIXO+PdxDLBBWhY=
-----END CERTIFICATE-----