Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/0230030c-f45c-3570-a922-d04ab6208cfb.roa
File:                     0230030c-f45c-3570-a922-d04ab6208cfb.roa (raw, json)
Hash identifier:          VF6cExQGuM8OPFlZMOTXBi/XRWKRGMSC4PM+MTtjruU=
Subject key identifier:   48:FA:63:51:BB:E9:86:7A:09:71:1D:FD:DA:A5:EF:93:BD:87:61:E9
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328583AA7AE582B31E4C34D2DBACB80
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/0230030c-f45c-3570-a922-d04ab6208cfb.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     36492
IP address blocks:        136.22.85.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:ae:58:2b:31:e4:c3:4d:2d:ba:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=da2150a5-35bb-492a-b884-b3c24ea72b9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:be:2c:13:1e:37:d1:1b:a5:12:25:a3:81:ec:
                    1d:b7:ca:7b:14:5a:f3:ad:d3:17:91:c8:d1:f4:dc:
                    ee:96:23:6a:4c:3a:62:f8:41:2d:1b:de:8e:17:d9:
                    15:d8:6c:10:c7:0b:ef:4a:0f:37:2f:83:c3:a9:28:
                    7c:5c:30:90:ea:81:0b:cc:ff:5d:f0:3d:e6:2d:c1:
                    db:9e:73:44:6f:e7:9b:6e:3d:78:16:3b:4a:2d:7b:
                    06:6e:12:24:ce:68:b9:52:30:46:4c:69:3a:17:65:
                    b8:de:10:a7:9f:1e:bf:f6:12:00:12:a5:3d:57:a1:
                    9a:5e:b8:e7:1d:4d:d6:b0:b1:e7:c6:c2:57:da:79:
                    5c:d9:c2:fe:b7:3d:d3:dd:3e:79:59:58:ba:e4:24:
                    9a:4a:93:31:f0:a5:49:4f:20:50:84:ea:f8:0a:6d:
                    bf:d3:29:f1:ab:9d:88:f8:52:6f:96:fb:ef:20:8a:
                    6e:a3:44:27:02:80:05:e7:0c:0a:88:a4:ba:5e:a8:
                    8a:39:51:96:a9:bb:e8:3a:fb:cc:ac:92:4e:bd:11:
                    66:df:b9:5f:2f:06:a9:4d:77:fe:1f:28:01:f0:18:
                    8f:59:3b:94:7f:e6:43:04:e1:9c:08:63:03:49:e6:
                    6f:27:a5:6a:22:f1:3b:45:64:cb:14:48:55:a3:68:
                    8c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:FA:63:51:BB:E9:86:7A:09:71:1D:FD:DA:A5:EF:93:BD:87:61:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/0230030c-f45c-3570-a922-d04ab6208cfb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:12:17:7f:97:8b:18:be:94:09:b1:c7:ba:65:a7:58:30:41:
         1c:1f:9f:9e:59:03:90:e5:e4:ca:2b:85:fa:b6:72:0a:c8:60:
         ba:9b:a7:60:04:35:d3:5a:37:2b:b0:23:f3:73:28:d5:c3:0d:
         6e:82:08:59:be:49:01:6c:6f:86:5f:c2:25:1a:a1:b5:1e:51:
         4e:c0:2f:10:f5:4b:ae:5c:11:ea:9c:aa:87:4e:44:67:f7:f4:
         a5:ce:34:28:fd:95:23:55:ef:fa:7a:7b:5e:b0:c6:1c:23:f1:
         cb:40:f8:72:5d:86:b3:97:bc:d3:24:7c:ff:68:68:8d:1c:1a:
         0d:d0:d5:e0:ef:9f:70:7f:88:6b:29:5a:2e:85:0b:d3:b1:0c:
         c8:fc:b8:09:c0:15:23:6b:a4:bf:e0:36:a9:84:0c:4d:b0:73:
         ad:dc:43:75:b5:1c:01:85:ec:4e:cf:c1:ee:0f:fd:a3:d5:37:
         13:27:c7:ce:14:4e:f1:1f:86:62:e7:ce:e4:7e:42:44:80:6a:
         21:cb:f9:e2:1a:13:b4:fe:a9:9a:ed:19:7b:49:2c:c2:cc:a3:
         03:a9:20:12:cf:7a:37:45:4d:32:ae:5e:de:fa:25:7e:3a:47:
         f8:f3:aa:f3:99:72:70:7a:b6:19:7e:1e:be:e7:c9:bb:93:07:
         5f:c2:49:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:02:14 2023 by rpki-client on console-ams.rpki-client.org