Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/22b78632-9d07-301c-bf1a-6fd39ebc7456.roa
File:                     22b78632-9d07-301c-bf1a-6fd39ebc7456.roa (raw, json)
Hash identifier:          mNN37abAX845bxK2uan7x2imbtRcKGSpnwsXOlyumYQ=
Subject key identifier:   E6:CB:CB:B3:71:9E:DD:1D:45:8F:EF:B5:15:FE:9E:90:6E:08:A7:79
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328583AA7A5D7C28A53D4ED0409CDC0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/22b78632-9d07-301c-bf1a-6fd39ebc7456.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     36492
IP address blocks:        136.22.242.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:a5:d7:c2:8a:53:d4:ed:04:09:cd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=36533b00-d854-42a0-8f10-60bcb1aaca16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b3:6c:05:04:07:b4:89:20:98:aa:6f:21:3b:
                    9c:9e:bd:f4:11:bd:0c:3b:28:cb:ea:65:aa:62:08:
                    b7:dd:b4:0d:57:b2:43:16:51:1b:81:74:54:52:61:
                    a0:7d:74:11:40:d1:83:f5:cb:d5:02:b7:28:5c:13:
                    e3:df:0a:ac:5c:c4:dd:89:5c:71:03:23:4f:8b:f6:
                    d5:30:9e:75:e2:3b:10:fd:a3:20:74:07:a8:51:21:
                    9a:87:35:d3:53:25:47:fb:2a:a2:12:90:69:3f:b1:
                    93:be:80:20:84:92:96:68:0f:46:6d:cc:4f:94:e8:
                    17:7e:ef:29:ea:98:e4:49:4c:36:6d:81:22:51:81:
                    3a:90:dd:b5:ae:fa:19:15:da:00:8f:5d:c1:a3:0e:
                    1b:0e:6e:63:68:64:ab:c1:03:f4:63:03:91:75:af:
                    ae:8b:ee:de:b4:dd:f7:c1:23:0c:b2:35:b1:8d:9f:
                    9e:e6:9a:56:30:ff:3a:82:a5:83:44:9c:18:20:f1:
                    62:3c:54:87:a5:03:bf:ce:51:11:93:3b:5a:00:99:
                    3f:62:45:7f:5b:26:2e:6c:0c:5e:03:c4:f5:f0:74:
                    98:72:6c:0c:fd:33:c9:80:63:bb:f4:ec:05:21:83:
                    aa:e1:8c:99:2f:52:a2:be:50:98:4d:79:7d:a0:3d:
                    67:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:CB:CB:B3:71:9E:DD:1D:45:8F:EF:B5:15:FE:9E:90:6E:08:A7:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/22b78632-9d07-301c-bf1a-6fd39ebc7456.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:9b:4c:04:20:1e:a6:44:df:05:4a:03:0d:00:df:87:b4:6e:
         5c:ee:2d:bf:e7:be:7a:66:69:b5:e7:54:22:59:e7:7d:5a:91:
         73:34:41:19:e2:2b:a5:b0:36:f8:2b:67:80:a9:de:7c:52:a8:
         49:ea:98:d1:f9:60:29:80:4f:b6:8d:1f:55:92:c1:6e:22:23:
         62:f2:21:4b:40:61:91:aa:63:7a:09:69:19:ff:96:43:11:9e:
         14:6a:78:74:a5:99:09:fb:2e:36:ad:41:9f:d5:a4:dd:3f:01:
         d2:7d:48:a0:9c:b2:d9:20:ab:25:88:2e:10:dd:43:72:d0:dd:
         c2:e7:d4:c4:ec:34:dd:6e:60:fb:dc:d2:79:53:cf:44:ca:83:
         00:7a:fd:bf:f6:7d:37:bd:61:6b:07:85:16:95:9d:bf:0b:57:
         c2:fd:99:d6:d4:0e:06:c0:b8:b4:74:df:d6:86:dd:a0:ca:2c:
         ef:0a:61:a8:5d:ea:54:fe:a1:16:bd:0b:7c:06:4e:5d:4c:39:
         6b:51:62:d9:be:b2:fa:3f:1c:2f:07:05:2e:3f:f3:9c:10:37:
         e3:6e:ad:f9:5d:09:d2:32:77:a6:03:97:86:d6:da:a2:73:04:
         9c:13:a4:7b:c7:a3:13:1c:68:23:c6:65:83:a9:30:99:84:78:
         93:45:8b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:02:14 2023 by rpki-client on console-ams.rpki-client.org