Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/72cb0d66-6086-3c34-af45-2aed4dce644b.roa
File:                     72cb0d66-6086-3c34-af45-2aed4dce644b.roa (raw, json)
Hash identifier:          JltbV2/CfVmu/OWhvMbSXa/8rKYvgyZvFzV/BT6J068=
Subject key identifier:   DE:33:97:8C:AB:4B:90:00:D9:0C:A5:FB:36:98:FC:BA:CE:5F:D2:AC
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328583AA7A2D5B971D9C5831E172580
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/72cb0d66-6086-3c34-af45-2aed4dce644b.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     36492
IP address blocks:        136.22.232.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:a2:d5:b9:71:d9:c5:83:1e:17:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=cb0cbc9f-dfff-45cf-ad7b-f01bea1a7a22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:6d:10:b7:d7:95:8b:2f:5f:91:e0:63:e5:a5:
                    52:ef:27:11:3b:9d:dc:bb:40:7b:b7:08:51:20:ba:
                    27:c9:65:54:ec:2a:30:ab:c2:3e:16:74:91:03:25:
                    9b:38:b5:fb:ef:af:19:ca:59:f9:21:7b:8b:9a:bd:
                    09:03:53:47:fa:13:8e:bb:0a:4d:d6:f9:f8:80:e3:
                    e3:6b:52:b3:c1:63:eb:0e:d8:6b:be:f1:40:d6:72:
                    43:40:97:8c:be:53:c8:0e:6f:4a:81:10:db:c3:c1:
                    c8:e9:ff:35:8d:7a:f6:04:f3:41:34:9e:38:91:0d:
                    f1:4d:66:07:09:ea:d3:03:8b:25:2c:2f:ee:e8:7b:
                    ba:4a:54:18:4c:07:f4:71:09:62:3a:21:68:bb:cf:
                    b6:dd:ff:67:ee:6b:ef:0d:2d:9d:2a:42:ae:ad:25:
                    c5:95:18:6e:0c:b1:f7:bb:4f:e9:31:54:bb:12:4d:
                    3e:7e:0a:74:e3:e1:f4:ed:87:4c:74:0c:1d:e0:57:
                    58:b7:ea:d9:3f:d3:14:8a:34:c1:43:a7:aa:0e:a2:
                    55:86:2c:23:c7:17:4f:6f:de:3d:35:b5:0c:42:41:
                    c9:13:cf:62:1a:5d:ef:6f:8f:90:d6:72:3b:c3:b4:
                    ab:26:06:fb:2d:d2:7e:7f:de:5b:d3:61:0e:4a:a4:
                    f1:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:33:97:8C:AB:4B:90:00:D9:0C:A5:FB:36:98:FC:BA:CE:5F:D2:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/72cb0d66-6086-3c34-af45-2aed4dce644b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.232.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:6a:ac:76:da:1e:2e:37:ea:d4:33:f4:66:55:3f:74:75:42:
         84:5d:44:e3:39:e1:e2:88:89:24:91:44:3a:76:46:fb:41:5a:
         ee:dc:b6:b5:ce:bf:4d:5f:8a:08:4e:fc:d4:79:17:d5:43:70:
         40:e6:92:31:c3:7a:e8:2e:7f:c0:17:b6:44:50:bc:17:78:60:
         06:e3:77:9d:33:29:e1:3a:e1:f3:fd:76:74:98:3d:f4:dd:c5:
         95:f3:9b:09:7a:eb:55:b6:a0:73:f8:74:81:d1:04:38:c7:28:
         83:cf:7b:0e:63:4e:2f:ab:70:f0:74:16:b4:e7:a6:13:ac:1f:
         7d:6c:14:60:e0:d2:4a:5a:8b:cd:5e:5b:f3:4b:65:17:44:fd:
         89:11:69:3a:7d:50:a8:ff:76:7e:62:19:5f:b2:35:8a:55:e1:
         3e:23:34:5e:c2:fe:e7:33:a9:99:d8:72:de:39:e9:e0:7d:c3:
         9c:a3:0e:6d:33:54:22:c3:0d:47:d6:92:7a:1a:04:55:7c:7a:
         f8:58:55:b2:cf:9d:dc:99:fb:8a:60:02:7a:95:a6:05:53:bf:
         28:21:2a:bb:a7:b3:78:51:af:c5:7b:d1:1b:29:88:d0:c4:01:
         74:fc:6b:d8:73:ce:7c:e9:e7:03:d4:32:7b:75:43:8e:df:c5:
         25:1f:b8:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:39 2023 by rpki-client on console-fra.rpki-client.org