Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/151b5298-2f85-32b8-996c-159851f193bc.roa
File:                     151b5298-2f85-32b8-996c-159851f193bc.roa (raw, json)
Hash identifier:          tn0NQlIWa4T8+GAnMW7PpNKnAZZ2VY5c3ddQySKjdos=
Subject key identifier:   A9:CA:EE:1B:46:17:9B:B6:7B:31:39:DA:98:66:6B:69:21:5A:6A:FD
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328583AA7A2BC43383C759A00850A00
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/151b5298-2f85-32b8-996c-159851f193bc.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     36492
IP address blocks:        136.22.195.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:a2:bc:43:38:3c:75:9a:00:85:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=7545bfe0-49ba-4cf2-a19b-b0f16476de18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:81:60:5b:63:ca:7f:3d:36:0c:62:5a:96:52:
                    74:1a:0c:32:9b:e6:c8:35:c9:89:2a:e3:84:3f:48:
                    38:2e:90:99:40:87:1d:ce:e4:4b:14:43:7b:c0:64:
                    ff:1f:4e:4f:e4:86:c8:9b:ae:d3:82:95:94:06:ac:
                    51:41:46:53:d1:53:43:b5:54:19:37:59:6c:00:0e:
                    c6:09:b6:ac:89:ac:c7:e1:89:bb:ac:ab:dd:19:16:
                    b6:c4:bf:aa:49:c2:3f:f4:99:bd:93:d0:a9:fa:b0:
                    ec:9e:b1:62:3f:74:64:24:f4:9c:17:81:65:0a:79:
                    f7:6b:4c:69:82:d6:8e:ae:15:1c:3d:94:e3:fe:f7:
                    d4:bf:6f:8e:51:20:55:35:c1:89:36:2b:cf:40:59:
                    11:42:c8:1c:e1:af:ef:7c:b8:9c:12:a0:98:83:e0:
                    4b:50:43:c9:81:e1:09:be:8b:f2:16:49:d0:74:98:
                    20:97:2f:0c:46:52:6d:8c:5a:13:b6:46:84:a1:1e:
                    37:e3:3f:f1:b4:0e:9e:c8:02:2a:94:b4:e2:7e:5c:
                    23:f0:ad:ee:45:47:ed:82:f2:60:50:30:3e:3f:15:
                    8d:9f:01:ac:9b:6b:a5:13:ee:85:b8:c4:5e:f0:45:
                    86:3f:0b:01:44:77:0b:4a:4e:f0:59:ce:78:5b:1c:
                    26:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:CA:EE:1B:46:17:9B:B6:7B:31:39:DA:98:66:6B:69:21:5A:6A:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/151b5298-2f85-32b8-996c-159851f193bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:e6:56:5f:c9:6a:0d:2f:fd:42:28:92:4d:27:2a:68:8d:ec:
         d1:1c:e8:1f:16:cf:f9:1f:17:5a:a6:8d:56:f3:93:5a:36:a2:
         c4:c6:83:81:f3:0d:cb:77:10:7b:97:e5:87:63:0a:2c:74:f8:
         be:30:a5:b9:80:97:9c:c8:8b:fb:92:5a:a1:1a:7b:40:ef:b0:
         7c:46:1c:78:5a:1e:cb:9e:89:95:81:eb:1b:e9:ce:86:c3:63:
         06:3b:2c:1d:67:5b:d8:cd:1e:57:9f:49:ab:9e:59:a4:fd:03:
         74:6d:4e:78:19:b5:2d:9c:54:b7:ff:a0:21:27:a2:a8:b8:60:
         00:dd:ff:5a:2f:f6:4d:ec:de:13:ad:07:2d:50:b6:ea:32:fc:
         7b:ec:d8:24:cd:a5:53:88:c6:20:40:f5:1c:3b:2e:d9:ac:c7:
         d2:ed:9c:a7:54:32:fe:bc:68:9b:28:3d:29:7d:09:f9:0c:58:
         a4:01:88:18:97:68:a6:cb:34:89:9d:40:c6:ed:5a:b8:a9:b7:
         e0:72:0f:3d:e8:9a:45:75:a8:68:ef:a0:fe:98:73:51:47:03:
         2f:ee:cd:19:d7:18:97:9c:cd:b6:1b:66:74:68:e4:45:12:5c:
         02:57:24:19:10:c5:b2:e3:d6:7f:61:a7:22:52:5a:7a:53:36:
         81:19:d3:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:38 2023 by rpki-client on console-fra.rpki-client.org