Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/8e707e1d-1218-3196-a6fc-c5f3c4b21421.roa
File:                     8e707e1d-1218-3196-a6fc-c5f3c4b21421.roa (raw, json)
Hash identifier:          ULiECRDfa30nFuwTtGZg+tC+CZZqLZUlmACYthOm4i4=
Subject key identifier:   D4:D2:D1:3A:02:01:1D:12:6F:E3:F7:61:9E:37:EF:52:CA:76:68:3A
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328583AA79FC0065EA670D3670FE100
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/8e707e1d-1218-3196-a6fc-c5f3c4b21421.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     36492
IP address blocks:        136.22.79.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:9f:c0:06:5e:a6:70:d3:67:0f:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=7060ea30-3a6f-441c-b06a-603a951aa22d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6b:0f:07:cd:09:b7:33:22:6a:8b:df:84:a1:
                    e4:db:17:87:46:82:77:70:cb:e0:59:aa:15:32:76:
                    1c:c9:53:88:ed:8f:14:62:85:76:ca:dc:96:e9:48:
                    b3:a6:a6:b3:f7:48:7e:e0:59:30:2a:3a:12:22:db:
                    e8:b9:4f:4f:dc:e2:0c:3c:8c:d8:51:63:7e:d5:89:
                    89:0e:4d:af:ff:8b:23:1a:c3:c9:bd:69:58:a8:4a:
                    13:11:10:14:8f:37:b7:9e:f2:b7:22:da:4b:0a:be:
                    1a:7c:be:bc:2a:04:aa:59:aa:3c:8b:50:22:8a:12:
                    f6:70:4d:d6:3c:64:aa:3e:3b:7d:99:da:04:18:cb:
                    6a:66:dd:71:34:5e:5d:c9:6f:1c:71:33:43:7c:2d:
                    3f:2b:9f:50:6a:11:1d:cd:8e:5e:61:2f:99:72:7d:
                    67:63:5f:e1:76:e2:57:5e:9e:c7:97:b4:69:60:fd:
                    af:bf:df:5a:62:4a:55:7a:0e:c6:22:66:c9:8c:e6:
                    59:d0:c7:cb:2c:10:13:ad:d3:c4:64:85:fc:bf:6e:
                    17:0c:9b:13:97:fb:39:af:0b:bf:62:87:88:4a:e2:
                    7f:a5:12:c7:f4:e6:bc:92:15:83:01:a7:8c:24:2b:
                    06:cf:54:de:8e:28:cb:a3:18:e4:3a:bd:22:21:62:
                    54:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:D2:D1:3A:02:01:1D:12:6F:E3:F7:61:9E:37:EF:52:CA:76:68:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/8e707e1d-1218-3196-a6fc-c5f3c4b21421.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:20:91:f7:12:5e:62:27:4a:7b:82:6e:07:c9:a2:e8:c5:7f:
         6d:23:b2:a6:ed:c3:fe:60:bb:8d:fa:f9:64:4e:0c:9a:c9:a8:
         d8:66:a2:56:8d:51:d4:3d:93:87:dd:cb:71:ef:90:c4:b3:69:
         93:3b:fa:e5:f7:7a:57:6e:cd:f0:7c:ee:a6:36:cb:1d:c9:a6:
         3b:74:50:98:99:4c:cd:80:b1:da:44:16:34:cd:1c:8e:e1:2c:
         fd:32:75:2d:82:b7:08:42:d8:5b:44:02:7b:35:85:6e:01:21:
         45:8e:4e:48:14:50:bf:0f:5c:3d:73:7c:9b:d8:ac:69:c6:01:
         f4:02:88:eb:fc:50:4e:9d:0c:11:42:32:3d:24:3b:28:06:bf:
         38:88:a6:3d:cc:c0:e6:67:97:17:b0:6b:c3:8a:94:7b:56:06:
         6a:dc:a8:0e:10:d0:a3:2f:84:b0:e6:12:58:39:8f:ad:6f:73:
         af:d2:cc:aa:b3:62:77:de:b0:98:04:33:c2:c5:54:21:36:52:
         fb:0e:96:03:8a:03:4f:56:44:4b:1a:12:bd:e7:83:d3:93:4b:
         12:77:ad:5a:d4:0e:ae:4d:aa:96:65:fd:36:e1:d3:61:0d:d3:
         34:0d:ac:b4:e1:1d:b4:34:80:c5:60:24:e8:b2:f4:87:19:6b:
         61:9c:8d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:39 2023 by rpki-client on console-fra.rpki-client.org