Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/68ab0250-2857-32d6-b88a-83f186df3a23.roa
File:                     68ab0250-2857-32d6-b88a-83f186df3a23.roa (raw, json)
Hash identifier:          F8juRGdmtLu7E+7tTI7moEE0adTUaBhOZZcmCepZU0E=
Subject key identifier:   F7:8C:35:04:12:31:85:67:27:FD:C0:E1:A6:E9:19:AA:E4:7F:8B:18
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328583AA7ADC8898F01E13CE1B907C0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/68ab0250-2857-32d6-b88a-83f186df3a23.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     36492
IP address blocks:        136.22.240.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:ad:c8:89:8f:01:e1:3c:e1:b9:07:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=a65686f6-144c-4a3e-9c20-7dc380b9cbc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:cd:50:b0:33:75:6a:81:a5:13:fa:31:0c:e0:
                    9d:d1:00:fe:1d:5d:bc:51:bc:f2:df:e1:9c:bc:11:
                    ff:bd:4f:2f:46:a4:64:f1:43:3a:4b:6c:80:11:b1:
                    66:34:fb:52:9d:05:02:8c:cb:66:5a:5e:cc:dc:f6:
                    cc:e3:3a:55:0b:d6:14:e3:84:07:af:d4:88:8e:44:
                    fb:a6:42:b2:fa:67:57:b2:40:60:f3:b3:64:f6:46:
                    e4:b4:dc:30:36:35:a5:ea:3f:f8:ba:4e:c9:d9:c4:
                    76:95:b3:e6:2b:91:aa:11:6a:d4:af:fb:b5:70:3a:
                    4a:d0:05:c7:85:3f:40:91:85:6e:a2:9a:f9:6d:37:
                    ed:29:da:ff:e2:c2:c2:a4:6c:8b:d2:37:65:2d:ae:
                    35:aa:08:b1:c4:4d:e3:2b:db:f8:6c:d8:09:16:58:
                    26:d8:b9:1c:46:53:d6:be:5f:96:16:ab:88:d6:89:
                    d4:5d:50:44:84:34:be:31:98:f6:3a:24:ca:df:94:
                    fe:13:fa:d0:dc:6f:2f:bd:d9:f4:78:b4:f6:d7:5d:
                    11:2d:36:aa:97:03:94:2e:bd:71:80:a2:e7:3d:62:
                    7a:2f:f6:92:40:cb:1e:30:b9:12:ff:4f:65:ae:65:
                    ab:59:2e:39:a6:ec:8c:93:9f:73:37:d8:75:ed:72:
                    0c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:8C:35:04:12:31:85:67:27:FD:C0:E1:A6:E9:19:AA:E4:7F:8B:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/68ab0250-2857-32d6-b88a-83f186df3a23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.240.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:76:8d:9f:5d:e9:08:30:23:91:35:42:98:c2:7e:7c:2e:59:
         3c:d6:e2:26:f6:4c:5a:8f:84:09:b0:93:9e:22:48:11:52:f1:
         15:e6:b3:aa:32:38:6f:27:08:da:e4:93:0c:db:84:73:7a:2d:
         df:05:d7:bd:e8:df:f1:71:a3:52:a1:50:20:f6:c1:df:cb:6d:
         cb:63:68:72:3b:85:42:14:74:a1:91:3a:ed:ec:cd:91:0f:54:
         ee:4d:89:da:89:b6:67:e7:f4:b5:72:06:f7:a7:7c:29:81:5f:
         43:c3:6c:5b:10:48:f6:b8:9d:db:44:9f:29:5f:44:b8:5b:85:
         03:0a:6f:2d:cc:08:b5:8e:bc:2c:8b:4a:56:2e:55:12:e8:2e:
         89:d6:09:7a:f2:b6:02:84:ff:46:51:69:0c:07:30:35:61:ab:
         5d:22:44:2c:22:ce:78:b6:61:a9:71:74:6e:d0:46:84:09:7a:
         e9:67:a3:8f:c9:70:25:bc:ff:df:8a:9e:b1:c9:68:45:8d:7d:
         20:44:0d:5e:73:fa:24:ee:6a:23:e6:3c:06:4d:20:be:05:7c:
         d5:5c:d8:58:f6:18:b1:60:fc:c9:29:12:85:00:48:9e:35:25:
         0a:00:c6:53:32:db:0e:ba:67:48:ae:a7:ff:9c:cf:90:bb:f7:
         ce:ed:c7:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:42:26 2024 by rpki-client on console-ams.rpki-client.org