Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/7612bc94-673c-3fa4-9718-1797afc29f93.roa
File:                     7612bc94-673c-3fa4-9718-1797afc29f93.roa (raw, json)
Hash identifier:          6rRfF5xk60jC/Di760mVfvJ1wSD7c6TG/wSe8Coo8ew=
Subject key identifier:   72:D0:7A:03:FB:02:9C:4C:80:B0:88:D3:5C:AB:9F:43:A1:C5:8F:DA
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328583AA7A8541394D6A6C1C2348E80
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/7612bc94-673c-3fa4-9718-1797afc29f93.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     36492
IP address blocks:        136.22.68.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:a8:54:13:94:d6:a6:c1:c2:34:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=9c8ba55d-0d30-4890-9b58-f664beaf382a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f5:bd:91:5a:81:80:93:11:54:9e:e5:4e:91:
                    3e:5a:31:bf:88:08:7e:17:9f:65:1f:53:e4:2f:a3:
                    63:bc:1c:2d:d8:9a:b8:77:8f:0f:6a:79:49:ce:16:
                    43:c8:3c:93:ad:bb:21:14:d9:4b:88:51:30:59:b5:
                    c8:1a:f4:9d:d0:44:b5:11:1d:a9:02:7e:8f:18:ca:
                    19:3b:0e:4b:47:6c:29:e7:b7:96:95:41:eb:bf:7e:
                    e1:c9:25:a6:31:31:27:f9:0e:55:8d:a0:d1:ae:1d:
                    88:c6:d9:8b:5c:55:14:75:a3:ca:20:70:dc:1e:c4:
                    1a:0b:30:f0:4b:5c:de:44:0a:c2:8d:fa:04:b0:db:
                    2e:5e:c1:b1:5a:75:e9:83:07:87:e5:65:0b:c4:53:
                    b0:49:69:90:00:6f:d7:09:f7:b5:8b:ed:f3:0d:38:
                    b2:35:ce:0d:e2:fb:f1:db:8b:26:74:7a:24:3f:c9:
                    08:da:27:93:08:f4:a2:b7:73:78:90:75:48:f2:cc:
                    15:57:f2:73:9c:06:ac:c6:ea:5a:c7:23:61:50:80:
                    79:5e:91:7b:9e:b6:ce:4c:1b:16:f9:a8:64:cf:b4:
                    69:4e:02:ee:e9:ea:1e:37:ed:54:0a:5b:5f:74:68:
                    c5:4e:d2:6d:fc:05:48:6a:f3:43:6c:f3:46:b3:9b:
                    5c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:D0:7A:03:FB:02:9C:4C:80:B0:88:D3:5C:AB:9F:43:A1:C5:8F:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/7612bc94-673c-3fa4-9718-1797afc29f93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:f6:93:2b:91:5e:d1:a2:b3:be:9b:96:ba:4a:ac:80:5f:ed:
         08:0c:8f:82:bf:1c:78:3f:29:dc:d6:0c:d7:2a:5a:d6:cb:ae:
         ac:fe:53:82:b6:95:1b:2e:00:11:c8:c0:d4:a6:0d:ea:f3:74:
         cb:ee:15:51:1f:14:da:9f:67:fd:e8:7e:6f:fc:c2:ae:af:78:
         fa:3f:0a:ba:9f:0e:c3:06:2e:0f:01:3e:40:9e:95:71:01:df:
         4d:1e:de:d7:42:86:b5:50:b3:d9:0e:b3:cf:22:de:d4:9d:85:
         3b:a7:da:57:f8:44:72:c2:b7:bb:74:23:0b:02:df:f8:78:69:
         d5:ec:67:6d:94:c7:12:e3:3c:ab:72:dc:98:cd:d9:4d:b3:09:
         1d:51:9b:d6:ea:3d:2d:83:b2:85:da:97:95:eb:5e:a9:1a:7b:
         c6:05:32:d6:97:20:ce:dc:aa:53:12:0b:79:df:3e:b8:d6:42:
         32:32:f5:f9:98:d0:c1:67:84:cc:25:56:62:f0:56:38:77:57:
         7e:b6:4b:f9:99:58:1f:76:23:d7:96:da:22:cd:e0:df:90:7c:
         bc:95:37:6a:38:0a:9b:80:1d:17:42:47:a2:db:e0:b4:b2:9a:
         23:11:6e:99:26:bd:a7:14:fe:12:f5:b6:c1:2c:e7:7b:c1:0f:
         a5:8c:0e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:39 2023 by rpki-client on console-fra.rpki-client.org