Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/54a4dcb2-5a47-3aa7-92db-47f4ba9cc526.roa
File:                     54a4dcb2-5a47-3aa7-92db-47f4ba9cc526.roa (raw, json)
Hash identifier:          wsaEUrRkoDAo7sJUpuWFqVny6wT7lmO/FsofzB9SyeI=
Subject key identifier:   92:E0:7D:F8:EE:94:4C:EB:B7:B6:58:C2:22:82:E5:ED:E4:E7:AE:CE
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328583AA7BA7FA029FC6D48650CB380
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/54a4dcb2-5a47-3aa7-92db-47f4ba9cc526.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     36492
IP address blocks:        136.22.88.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:ba:7f:a0:29:fc:6d:48:65:0c:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=517d39f8-b909-4d76-86b3-af8583351282
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f7:b7:dd:08:f9:ba:44:7e:e0:b8:5b:5d:b7:
                    ed:76:a6:34:4a:64:13:f5:a6:55:1e:29:bd:1a:22:
                    68:8b:89:85:bb:78:33:e8:37:39:39:58:c4:69:4c:
                    59:46:00:9b:66:dc:2e:20:c5:c1:ad:4f:7a:f7:10:
                    22:45:65:0d:c1:91:c4:bf:d0:05:44:d2:28:3b:52:
                    52:c4:61:78:41:6b:11:c1:80:6b:26:f8:d0:4b:5e:
                    0a:20:cb:e1:a5:69:5c:07:e6:6a:de:12:d3:71:87:
                    4d:0f:cf:47:d8:1a:52:74:66:86:10:be:90:c2:b9:
                    2e:00:7a:c9:a2:26:04:0b:aa:b6:9d:32:61:e5:2b:
                    4e:ea:5c:47:8e:da:a2:4a:2a:38:d3:16:65:a8:85:
                    fc:dc:81:3d:56:dd:1e:a5:b1:4f:32:9c:dd:88:1a:
                    7d:8a:6c:42:96:39:b3:05:90:4f:c3:1b:86:b2:11:
                    1c:20:83:c4:d8:7d:cc:19:b5:70:a2:e4:69:8c:7e:
                    53:eb:c7:a5:ee:de:eb:1f:0b:6c:51:a4:7c:07:57:
                    fc:53:7d:e3:cd:05:16:8b:a2:68:d1:c5:02:a6:f6:
                    4a:32:e7:7b:e6:54:88:9e:40:04:0a:06:d3:a2:99:
                    6a:8d:da:4d:f1:02:f9:fe:c6:b5:15:86:1d:77:84:
                    88:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:E0:7D:F8:EE:94:4C:EB:B7:B6:58:C2:22:82:E5:ED:E4:E7:AE:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/54a4dcb2-5a47-3aa7-92db-47f4ba9cc526.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:e4:1e:b5:0a:12:6c:82:5b:f0:a6:7a:07:9f:6b:0b:b0:c2:
         42:74:9c:18:72:4f:67:93:cb:3f:6a:29:5b:8a:10:8c:8c:bf:
         1e:bb:2b:ac:09:92:9e:81:9b:ce:0c:e5:e1:b1:69:ba:90:95:
         a9:36:ed:16:8f:36:92:c3:21:b7:e2:12:0e:6d:02:36:13:65:
         63:41:fb:2c:c9:c0:47:53:c4:fc:27:3e:3b:18:85:33:4c:a0:
         e2:61:a3:cf:8a:fd:7c:d6:78:15:c8:c4:90:ef:ee:52:2a:92:
         7f:2d:d8:30:d6:7a:ba:69:de:44:4d:a1:ab:8e:38:e8:a8:d6:
         74:3b:04:70:45:b1:91:f5:dc:52:1e:90:18:1a:c8:a4:d2:51:
         c2:b2:ae:5a:3f:5c:8a:97:78:bd:02:8d:83:f6:41:8f:c8:b9:
         2a:73:fb:87:5a:1e:4f:9e:bd:8b:cd:ff:c1:de:92:88:b4:11:
         66:bb:76:e7:72:58:bf:3d:0d:d8:54:52:ac:32:39:ff:cd:a7:
         fa:46:df:cf:33:4e:a2:18:06:0f:91:5d:a7:df:85:35:08:d4:
         f0:da:35:a0:10:6e:84:fe:28:ea:73:15:70:71:eb:96:00:a4:
         df:e4:d9:9a:a6:5b:be:52:53:27:a2:20:09:95:d2:8e:d9:67:
         47:98:e4:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:38 2023 by rpki-client on console-fra.rpki-client.org