Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/0ba5144d-6cef-36fa-8cc0-d5d769f5474c.roa
File:                     0ba5144d-6cef-36fa-8cc0-d5d769f5474c.roa (raw, json)
Hash identifier:          CjvK+p5mQb/mFeLl+thtcOmLLj0J08oc50BshyWPkAQ=
Subject key identifier:   C6:0D:09:E0:93:8B:C2:D3:F2:CB:7D:CF:EC:1E:26:D4:E6:76:A6:E8
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328583AA7AF1D72F17B03C79A0F3AC0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/0ba5144d-6cef-36fa-8cc0-d5d769f5474c.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     36492
IP address blocks:        136.22.196.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:af:1d:72:f1:7b:03:c7:9a:0f:3a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=f8ae749a-a999-47b2-998e-ab7de5cabc5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:30:9d:3b:40:0c:a2:96:73:19:aa:fe:be:93:
                    ab:a3:98:92:ed:dc:98:0c:03:b2:a7:c1:a1:24:92:
                    7b:b3:10:e4:62:da:45:a9:3e:2c:7c:89:17:b8:d6:
                    0d:b7:04:31:47:31:d2:16:42:51:9a:66:d9:e0:2f:
                    09:80:68:8b:ad:b1:33:6f:39:2f:ac:7d:f0:f7:fd:
                    73:c6:ab:a8:21:5a:61:da:f6:9a:dd:15:6c:99:00:
                    dd:0f:76:18:98:f2:5e:a6:fe:e2:ab:2d:af:09:f2:
                    4c:1d:6b:1d:a2:77:1d:4c:dd:7e:33:f8:f2:d8:ed:
                    96:63:0b:33:7f:02:6e:d7:37:48:81:b6:5a:0f:18:
                    58:ea:d6:a8:70:86:39:b5:a6:3e:f3:b5:86:b1:be:
                    45:ae:c9:67:cf:b6:70:98:5e:c1:07:48:e9:84:b1:
                    92:e4:a5:a1:04:81:b1:6b:eb:b5:66:74:c3:da:89:
                    8a:0c:3e:7d:e7:76:83:46:c1:7e:f0:df:79:4f:33:
                    23:d0:40:3b:2d:56:5e:7f:bf:ac:9c:75:f0:a3:d0:
                    13:0b:d5:28:00:96:08:4b:33:c2:ca:c6:76:aa:7f:
                    63:ce:d1:5e:d5:a0:42:95:d4:ff:04:c8:da:0c:8b:
                    e4:dd:02:6d:34:de:80:1e:5c:85:46:21:ec:c2:b3:
                    32:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:0D:09:E0:93:8B:C2:D3:F2:CB:7D:CF:EC:1E:26:D4:E6:76:A6:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/0ba5144d-6cef-36fa-8cc0-d5d769f5474c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.196.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:1f:1b:ea:54:a1:fe:74:40:22:b6:39:f8:87:89:69:99:e4:
         2f:3a:a5:da:0e:3a:8b:e1:d4:1e:a6:f1:ef:3f:09:e8:92:c6:
         9e:11:26:d7:7c:4c:65:19:e2:41:22:03:1a:2b:3c:24:52:44:
         3b:d1:c6:c1:10:3f:91:e4:7f:61:79:96:83:e8:bb:d2:76:b5:
         20:b9:6f:4f:b9:4b:4e:db:9c:19:ce:6d:43:ea:c9:dd:aa:d4:
         ba:c9:12:eb:49:1f:b8:00:9f:43:ff:46:2f:d5:93:e8:68:27:
         f7:91:b7:20:dd:73:03:11:48:e2:54:fa:a0:94:f2:4d:1d:5d:
         79:49:46:35:3f:a7:f0:2a:b9:95:56:27:0e:0f:c4:21:26:34:
         d4:6d:32:93:6d:5e:84:ba:bb:8d:5c:db:71:6d:df:ed:a2:52:
         fd:bf:60:9d:0d:cd:21:9e:8b:cd:13:2c:e0:6d:00:fe:28:d7:
         6e:0d:d1:6c:5e:6d:8d:d3:8f:f8:6d:58:12:3d:af:31:71:2a:
         df:6c:d1:f0:e0:c5:b9:32:85:4d:0a:11:99:32:23:51:fa:8b:
         1a:d9:e4:10:4c:db:22:99:74:e8:32:7b:71:7b:3d:d7:c2:05:
         87:32:86:ab:3e:fc:b5:bd:01:37:4c:95:b2:74:71:98:6a:56:
         75:0f:46:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----