Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/79772791-e30b-3cf6-a8ef-cbc73ca0eafd.roa
File:                     79772791-e30b-3cf6-a8ef-cbc73ca0eafd.roa (raw, json)
Hash identifier:          pAKJZAZ/ok8hGwJY4BzHa8nqnA/YQ7sWUZf5Ff3TXV4=
Subject key identifier:   67:58:4A:DA:BD:5D:5C:90:A0:56:06:7A:80:DD:07:B4:60:39:30:48
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328583AA79EBAD3D4B9A9E7BBB7A0A0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/79772791-e30b-3cf6-a8ef-cbc73ca0eafd.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     36492
IP address blocks:        136.22.126.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:9e:ba:d3:d4:b9:a9:e7:bb:b7:a0:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=ccd54aad-c089-49f7-b722-53cb2ee2460f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f5:9f:a7:2a:4f:b5:37:cc:34:d5:d1:fd:96:
                    27:b0:73:70:40:e0:2c:f4:9c:7d:f1:29:f7:e5:a6:
                    a2:21:4b:98:ee:80:ed:cb:f2:cb:11:f9:51:3b:ff:
                    e0:76:b7:7c:08:42:f7:89:5c:3a:4e:84:d8:5c:b4:
                    33:88:0b:ce:96:05:ec:78:60:50:09:49:d6:b2:aa:
                    ed:51:ff:d1:fb:e1:85:d5:6d:4f:c3:15:b9:4a:c1:
                    84:e6:c8:4e:fe:c0:e2:64:7d:d6:36:c2:1f:90:cb:
                    8e:38:fc:9e:bc:40:a8:3c:82:ab:e3:82:13:12:a2:
                    9e:50:5e:0d:fe:c8:ae:99:07:70:e0:af:42:07:3f:
                    44:58:4a:7d:a5:4f:d8:fe:19:72:aa:35:26:3c:f6:
                    11:1b:c0:8d:a6:a5:e4:53:bf:b4:2b:9b:f4:13:d4:
                    68:bf:ba:14:13:57:f1:e5:6e:04:0e:f1:2d:da:bc:
                    22:76:f4:b6:69:f5:ea:87:8e:dc:9d:07:27:dd:11:
                    3b:0d:2f:75:59:95:80:6e:54:41:71:0e:8c:15:ca:
                    cc:ba:2c:f3:34:2b:8f:b9:7e:76:d2:3d:5f:7c:16:
                    92:62:a3:ea:34:29:a4:1a:5e:47:25:45:0c:cf:29:
                    c6:dd:2a:56:7e:9b:3c:64:f3:b8:8a:f7:f2:26:2a:
                    07:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:58:4A:DA:BD:5D:5C:90:A0:56:06:7A:80:DD:07:B4:60:39:30:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/79772791-e30b-3cf6-a8ef-cbc73ca0eafd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.126.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:cb:fb:e5:c8:86:ea:b2:38:bd:92:eb:35:cf:b7:9a:65:4a:
         0c:0a:da:a9:9e:a0:b4:5e:19:0c:fb:f7:eb:f4:ca:a5:05:9e:
         be:9b:c1:b5:23:e2:43:28:c5:99:53:bc:f3:e6:08:8b:12:77:
         8c:41:be:db:31:8f:6d:10:1b:ff:25:d0:4c:72:56:c2:a3:b3:
         90:36:1d:e5:c6:50:b5:b9:ac:81:ec:d6:25:f6:12:06:dd:ea:
         58:25:a2:bb:80:c5:a1:9b:d1:ab:c3:9b:59:05:19:6f:31:ef:
         ab:44:7a:c6:4c:24:94:2e:a1:22:6c:ea:8c:e1:eb:46:0f:d8:
         4b:fa:6a:2c:53:21:2e:2d:ab:1e:1f:dc:d3:d0:c8:10:0c:ae:
         b5:51:6e:1d:23:2c:8a:b5:85:7e:9b:78:71:3c:a1:53:1d:18:
         30:8b:55:5a:16:ab:c8:cb:1e:9a:b7:04:8c:85:e8:7f:c2:c2:
         f4:d3:56:e2:15:10:7b:ce:9b:12:55:9a:1a:27:26:8f:d5:09:
         4a:bf:be:f9:79:ef:f6:8d:f2:3b:c9:f6:fb:ba:27:6a:d2:b7:
         69:ea:be:88:22:78:07:88:33:50:ea:b0:c6:5f:5c:30:7e:79:
         35:30:34:57:79:6d:97:20:90:ab:36:37:e2:89:7f:eb:bb:5a:
         db:6e:f2:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:02:15 2023 by rpki-client on console-ams.rpki-client.org