Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/76d93440-c7c0-3a5c-870b-09110a43280f.roa
File:                     76d93440-c7c0-3a5c-870b-09110a43280f.roa (raw, json)
Hash identifier:          zHBv+Na0KBTwq7wQT9pKOCEC+mxh5bP1jFIJr4jPV6k=
Subject key identifier:   F4:83:00:D6:2F:30:8C:2F:95:D6:87:AD:43:CA:5A:B1:89:7B:97:04
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328583AA7B4147A1F7B5580EBE5E780
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/76d93440-c7c0-3a5c-870b-09110a43280f.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     36492
IP address blocks:        136.22.241.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:b4:14:7a:1f:7b:55:80:eb:e5:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=5a16ac8c-48e9-4df1-ae9c-e24543a1f010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:42:c6:92:05:06:e7:b9:de:5e:50:04:1f:cc:
                    a3:3b:b3:1c:0c:fa:ec:85:4d:9d:69:9c:28:5d:4a:
                    54:c4:da:15:18:9e:aa:c3:8c:35:b5:39:9c:82:30:
                    18:c3:be:85:3f:44:4e:32:b2:97:ac:97:77:63:5f:
                    70:a3:94:21:89:aa:2c:e5:03:b2:ae:e5:6d:54:b8:
                    ca:1d:05:9b:e2:94:94:ab:3f:dc:4c:54:6b:5c:57:
                    e5:ca:ef:a1:96:b2:29:2b:76:93:6a:19:22:14:56:
                    2b:fb:64:b9:c4:6d:ae:62:4e:51:82:f8:70:2e:c8:
                    2a:6f:e4:ec:c9:c8:2f:4e:96:7e:7a:6e:e1:bc:55:
                    a8:74:bb:9f:f7:f4:f3:c8:b4:81:7e:3e:6f:af:a3:
                    ad:16:90:c9:9a:ce:58:59:91:cb:32:43:70:38:d5:
                    af:a0:a1:b6:39:24:72:e9:f1:c9:d5:27:a4:a6:e2:
                    81:30:91:32:f3:22:8b:e9:8f:62:ff:86:ee:ea:c5:
                    ab:ab:3b:d0:dc:73:c0:69:c4:a9:22:d9:2c:d5:ed:
                    1c:da:8c:83:0d:43:bc:f9:04:fc:c5:4e:d2:24:30:
                    5e:a7:a0:a1:c7:6f:35:e8:e2:1b:9e:47:77:46:0d:
                    ef:d5:3d:79:a3:03:50:5d:01:6f:15:6c:fc:74:b7:
                    f2:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:83:00:D6:2F:30:8C:2F:95:D6:87:AD:43:CA:5A:B1:89:7B:97:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/76d93440-c7c0-3a5c-870b-09110a43280f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:87:7c:b0:5e:49:54:f3:f8:a1:e1:0f:56:ea:9d:0c:ac:0b:
         b7:17:e8:25:44:81:af:9a:ac:3f:3e:7d:e9:5a:88:4b:72:a4:
         a2:4e:38:71:d7:aa:84:35:1f:c0:1f:19:69:6f:76:16:30:ee:
         d6:43:a9:41:7c:cf:77:09:20:21:1f:03:ef:d5:93:51:d0:df:
         e0:c0:a3:b6:a6:4f:55:f2:2d:c2:03:4e:12:75:fa:65:ee:00:
         a8:b0:66:07:64:5e:21:4d:43:b6:ea:0b:3a:ef:45:48:8e:ab:
         7f:62:5d:e2:d6:75:fe:ea:07:32:27:c2:a6:49:43:68:04:97:
         de:89:3e:d8:d9:51:19:38:16:25:2e:e5:bc:0f:0b:e5:23:26:
         43:f7:78:01:d9:93:27:31:a1:29:d9:3e:d3:b8:00:0a:8a:fa:
         1d:3f:1c:79:e6:63:d9:91:8f:7e:9f:f0:d4:e5:91:a0:2c:c3:
         04:36:f1:3d:d5:4d:d9:e3:c7:54:76:9b:00:2b:72:ad:cb:55:
         6d:ab:8f:4f:85:ed:4e:7c:d3:05:09:ef:2a:40:e7:ac:26:10:
         86:77:f6:c9:50:e5:8b:88:21:12:90:43:06:ab:9c:81:e6:1d:
         14:ca:ca:79:19:d6:9c:1b:bc:e3:f9:bb:fe:c1:db:21:e4:c5:
         a6:24:30:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----