Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/1cc1543b-9cd5-3ba3-b9f0-d9e998b08ec7.roa
File:                     1cc1543b-9cd5-3ba3-b9f0-d9e998b08ec7.roa (raw, json)
Hash identifier:          UknCvVv81cG9DbEJDcjWgZNIs2e1U+Zx0FXZo02bXkA=
Subject key identifier:   5B:72:D2:4A:A4:29:DC:0A:08:75:B6:77:A0:85:E4:FA:01:C6:F3:67
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328583AA7B974475A79449535CD80E0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/1cc1543b-9cd5-3ba3-b9f0-d9e998b08ec7.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     36492
IP address blocks:        136.22.230.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:b9:74:47:5a:79:44:95:35:cd:80:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=183b0e84-1608-4c2b-8696-b0845c632b89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:62:75:a4:46:72:29:bd:f5:29:0e:2f:6f:64:
                    e8:ee:80:4e:01:7b:f2:a1:97:8e:33:13:1e:6f:f0:
                    78:44:16:f5:94:88:76:a5:c9:db:a2:96:d9:53:a7:
                    28:0d:4f:f4:37:93:b4:a2:d9:24:f0:62:06:2e:c2:
                    77:bb:a1:cf:d3:76:b3:da:10:b6:41:cf:3b:16:96:
                    72:5d:77:0e:71:a2:ad:33:2b:23:d1:d1:f2:09:91:
                    62:9a:1e:d1:6f:8d:10:cf:58:d0:40:18:69:d9:5d:
                    b0:c5:44:ea:21:95:9b:a0:0e:d7:d1:7b:15:43:b4:
                    e9:3b:df:98:9c:b1:46:08:82:b0:75:70:ba:c5:fa:
                    c3:13:d6:06:ed:bf:3c:56:09:60:8c:70:39:69:b9:
                    ac:9c:61:77:b9:4d:6e:e4:e0:00:5f:77:d0:29:d3:
                    15:a6:9f:8a:34:a0:34:98:9b:9d:89:72:07:b8:92:
                    98:30:68:49:cd:03:48:3d:91:56:ad:d1:2f:0f:25:
                    3a:54:3e:cb:b0:1a:73:a4:d0:25:28:fc:47:30:a8:
                    8f:5e:77:b9:ac:7f:a0:2b:9a:06:0a:32:68:54:9d:
                    af:8f:14:c3:3f:07:f0:d3:5c:58:00:19:a5:3c:58:
                    59:97:9e:1f:ea:df:a8:48:37:4b:6f:64:89:04:58:
                    66:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:72:D2:4A:A4:29:DC:0A:08:75:B6:77:A0:85:E4:FA:01:C6:F3:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/1cc1543b-9cd5-3ba3-b9f0-d9e998b08ec7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:0b:5c:3c:98:74:cc:de:e6:4e:23:5d:dc:98:c9:59:4a:98:
         54:90:62:95:08:f7:43:86:be:a3:ff:65:e6:cc:11:4c:5d:4d:
         2f:0c:02:f5:21:ef:43:1b:d1:e5:00:9a:4a:72:50:48:c9:b2:
         37:ba:8b:65:ab:63:ce:97:f9:b3:f9:ae:b3:86:b1:1e:01:d3:
         55:ab:96:87:96:5a:75:e9:b5:43:f3:d4:3c:0e:13:df:a2:1d:
         be:b7:d1:56:1d:0d:af:d1:b8:0a:03:cd:39:c5:16:53:a6:1e:
         7b:a6:84:c6:28:e6:d2:e8:45:be:ee:af:6c:6f:d4:b0:4f:3a:
         c4:f9:48:a4:a1:df:3e:e7:a5:98:c3:fc:cd:09:50:86:c9:a2:
         a5:2a:72:eb:dd:1b:ad:c5:f7:7b:c0:08:86:0c:5a:ed:fe:a6:
         a8:89:3c:63:a0:76:de:03:2a:a3:10:c1:f8:fe:4c:f1:54:5c:
         f1:8e:2d:27:b8:9b:d1:b4:a0:42:1b:51:0b:31:fb:8c:b6:c6:
         b9:62:b2:70:b6:3d:b3:76:f4:87:11:b2:ab:39:9d:43:ca:e9:
         46:17:85:9b:16:1e:03:d5:8a:ed:e1:b8:79:30:04:c5:70:86:
         7d:37:52:94:67:de:06:83:a2:20:ff:8b:67:91:e6:d9:59:d5:
         41:48:49:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:38 2023 by rpki-client on console-fra.rpki-client.org