Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/7e3a6983-9f17-3ec0-af6a-d7f3950f9c83.roa
File:                     7e3a6983-9f17-3ec0-af6a-d7f3950f9c83.roa (raw, json)
Hash identifier:          bk39LMCFs7LTF6n6ZDC3ULDUqnIIks5S1MmMaTwai3c=
Subject key identifier:   C7:40:F2:DC:58:6E:39:8A:D9:2B:C2:1B:53:1C:E1:0E:9F:BF:58:C0
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328583AA7BB05501DF5EC53EF043400
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/7e3a6983-9f17-3ec0-af6a-d7f3950f9c83.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     36492
IP address blocks:        136.22.247.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:bb:05:50:1d:f5:ec:53:ef:04:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=4bd0dc23-d160-43cf-8b57-4bed73fd9c09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c9:be:53:8c:03:51:d0:0c:6e:ce:ab:ca:8b:
                    59:f1:14:6b:64:2b:54:33:b6:93:71:b6:22:f6:3e:
                    cc:75:2f:1a:17:11:90:7b:40:0d:6f:7f:61:24:85:
                    55:9f:1d:29:5e:d8:d8:e5:b6:1d:4b:c8:87:3b:6b:
                    dc:d8:a0:02:c8:3d:ac:06:02:69:cd:f9:b3:e1:7f:
                    8c:b5:3f:f5:b6:b3:31:ff:cc:66:ec:f0:b1:2e:31:
                    44:f5:72:74:3c:ba:e4:75:51:4f:07:0b:e9:64:32:
                    df:ab:43:53:32:3d:61:af:4e:96:e7:cb:41:50:af:
                    95:cb:2c:3a:ba:5b:49:ee:d9:88:95:e0:0a:df:1f:
                    15:42:6e:1c:1f:22:40:5c:16:97:96:60:05:92:75:
                    0f:7d:bd:9a:b0:2e:da:2d:6f:ce:d8:88:65:f3:9f:
                    5e:8f:ea:ca:d4:32:eb:88:52:8f:24:e8:1a:d2:2f:
                    25:82:d7:77:54:ff:4e:c1:2f:bc:76:4e:83:df:b6:
                    b9:2e:cb:6d:c6:d0:fe:97:a0:41:26:c7:84:67:d1:
                    cf:19:c7:7a:12:f1:32:44:90:b8:0f:a1:9e:51:5f:
                    39:45:0b:b3:d9:6c:12:18:ab:12:a7:7f:1e:33:44:
                    32:52:5e:84:1f:10:13:70:f8:7a:b2:4e:04:ed:c3:
                    7d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:40:F2:DC:58:6E:39:8A:D9:2B:C2:1B:53:1C:E1:0E:9F:BF:58:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/7e3a6983-9f17-3ec0-af6a-d7f3950f9c83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:a6:de:6f:0c:9e:d4:d4:c4:23:d9:49:76:b1:f4:36:a1:f7:
         f5:ac:b0:80:c8:77:13:b5:6c:a1:53:18:35:eb:72:fa:58:fe:
         c9:7f:30:e0:04:c4:61:7a:8c:7b:0d:a3:e5:fb:51:57:e7:fd:
         64:8a:a6:f1:40:fc:9f:7e:e6:b8:4b:39:d3:10:a5:a9:6f:45:
         df:be:b0:4e:b8:6c:65:13:11:0f:93:53:23:1f:cc:02:a4:cb:
         7a:db:ce:dd:b9:53:5b:09:9c:20:a1:a7:f0:78:1a:4a:e8:09:
         8d:04:f5:3a:56:c9:ff:a9:37:03:89:18:51:38:e7:2b:60:90:
         05:7d:a7:63:33:7b:b4:71:c8:3f:6e:f4:e1:3e:ee:a4:d3:c1:
         6b:4e:fb:9d:e1:7a:0a:40:54:ae:44:e2:69:44:27:13:1a:c9:
         07:fb:8e:28:ad:e8:7c:72:0d:c6:e5:06:bc:c9:75:94:b1:15:
         85:f1:47:e5:30:6f:bb:60:ff:bd:eb:98:f7:89:0a:e2:31:5e:
         1d:38:30:aa:d1:05:da:63:fd:b9:66:44:65:95:e4:01:ce:d2:
         f7:8a:2f:95:31:b6:45:d7:8d:5e:fa:74:2f:25:9e:49:0b:53:
         da:45:a7:cb:d0:2f:53:04:c7:24:c7:e7:b4:ea:aa:19:a6:3c:
         13:bd:d1:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:39 2023 by rpki-client on console-fra.rpki-client.org