Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/530cd1ae-4810-3de5-aa9c-0ae38ed8480e.roa
File:                     530cd1ae-4810-3de5-aa9c-0ae38ed8480e.roa (raw, json)
Hash identifier:          6eOWX8sO3or/UrgAvRdq54s13vyUk4g/RLLMkOMiWHg=
Subject key identifier:   8C:00:A1:7F:6E:7F:30:2F:D9:48:3F:73:D6:AF:7F:D0:55:2C:58:17
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328583AA7C02A9FF953E3FDEFA18A00
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/530cd1ae-4810-3de5-aa9c-0ae38ed8480e.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     36492
IP address blocks:        136.22.98.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:c0:2a:9f:f9:53:e3:fd:ef:a1:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=e17b2d38-d8ae-47b0-b704-9895c66d8dc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:65:f4:ff:dc:ea:af:7a:d0:2a:4e:cc:e7:c1:
                    26:85:2a:b0:a8:b6:9c:59:6d:34:7e:0d:09:05:6b:
                    09:dc:dd:fa:9d:56:33:74:4f:69:c0:25:90:b0:f5:
                    0f:1c:0f:44:bf:91:85:23:f3:b7:23:33:11:ec:85:
                    67:cf:0f:b2:db:c3:d0:21:73:c9:c0:7d:84:8a:49:
                    83:d3:76:22:e9:34:63:08:75:72:b4:40:8d:c6:aa:
                    f6:fc:0e:4e:af:d5:2a:e0:8e:3e:a3:5e:82:b6:d4:
                    01:b8:da:7c:39:e6:17:96:cc:0b:00:9a:d8:b4:94:
                    84:e2:49:fd:e5:71:41:b0:5b:79:08:55:07:c3:48:
                    17:b6:1d:47:55:65:ef:2b:b4:8d:ad:7f:3b:7d:8a:
                    a5:4a:26:cf:16:ee:1b:87:ce:21:64:5a:77:ee:4b:
                    d2:fc:5c:a1:37:8b:29:b6:5f:33:68:45:52:8c:7c:
                    e5:ab:84:f7:4d:95:1d:0e:9e:a1:55:05:d5:00:d2:
                    2a:fb:e1:57:0d:a0:c0:6b:b6:40:e2:6d:1d:03:c7:
                    14:0d:ef:70:22:2c:0e:6a:9c:62:e9:b3:23:f4:3a:
                    d0:c7:9d:9e:8e:40:df:8e:50:60:b1:32:83:f1:d2:
                    be:e2:81:b2:a7:c9:c9:e5:8a:61:a7:c5:bd:89:af:
                    ac:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:00:A1:7F:6E:7F:30:2F:D9:48:3F:73:D6:AF:7F:D0:55:2C:58:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/530cd1ae-4810-3de5-aa9c-0ae38ed8480e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:42:ef:96:0f:b6:d8:02:7d:12:f6:f5:ee:8e:87:76:e2:6b:
         d1:d3:69:01:23:e5:9a:19:15:d1:18:bb:a0:9c:9a:33:fd:58:
         95:2e:80:3c:a9:68:ec:68:e3:30:9c:c3:65:9d:3c:60:9a:ba:
         35:32:fe:e9:0f:8e:4c:c6:e8:51:06:28:46:c4:6b:5d:ba:ad:
         a4:8e:b6:22:e9:bc:33:d8:5c:d1:66:e0:33:e2:df:3b:ac:a0:
         02:84:d0:1f:53:4b:a4:28:77:4c:4c:cb:11:56:25:df:82:59:
         6d:29:59:f6:ff:89:70:6f:1d:35:61:84:7e:5a:7d:7f:ed:88:
         6e:7b:0f:d3:4b:15:a2:df:5c:5a:db:5e:2a:f4:a1:0e:b2:5e:
         c7:54:dc:bf:aa:9c:8f:64:42:6c:ea:50:db:da:1f:a7:06:f3:
         f2:de:cd:82:ce:9c:2b:8e:58:d5:b9:09:36:71:ec:27:ab:c8:
         e6:24:b5:88:4e:72:8b:07:76:40:38:d6:f2:a4:30:6f:a7:90:
         8c:35:4f:e1:47:54:57:68:9d:80:04:4a:05:b1:b4:6a:99:48:
         c0:03:fd:54:2e:70:58:96:7f:1e:65:ee:6b:29:37:8f:10:99:
         84:31:31:9e:e1:50:38:af:eb:60:6d:c3:1c:27:cf:65:38:de:
         b0:23:05:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:02:14 2023 by rpki-client on console-ams.rpki-client.org