Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/a122155a-1d45-3526-9cfd-d3cca9f3100f.roa
File:                     a122155a-1d45-3526-9cfd-d3cca9f3100f.roa (raw, json)
Hash identifier:          26aRYCdv1ptn8HPDaDnS0fkCPHxQYn7GwbEzOw4moDg=
Subject key identifier:   9C:C6:CE:50:94:AB:56:9C:A8:EB:43:AD:70:B5:C0:91:55:3C:7C:61
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328583AA7B4E050C2DDE8495784FB40
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/a122155a-1d45-3526-9cfd-d3cca9f3100f.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     36492
IP address blocks:        136.22.212.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:b4:e0:50:c2:dd:e8:49:57:84:fb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=22f34ffe-6c74-4779-90a0-9b3881d69266
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8d:ad:4b:2d:eb:3a:20:ac:e5:5a:c4:2e:db:
                    93:f6:41:70:75:ff:30:9d:18:57:5a:19:dc:ac:c5:
                    bc:9b:06:89:92:d5:55:26:52:e9:cb:f7:42:95:c7:
                    43:5c:56:90:54:22:f6:39:75:50:76:13:fd:b7:76:
                    cb:b1:1a:c5:2d:84:1c:77:25:15:70:a5:cc:2f:45:
                    5c:ff:43:3c:21:eb:1f:52:58:aa:36:5a:4b:fd:a2:
                    96:2a:a5:f8:37:88:a5:c5:0d:be:cf:1b:21:b8:43:
                    b9:73:08:36:7b:5e:a4:b5:b3:53:f3:d3:a2:f2:1b:
                    89:66:e4:af:5e:3b:2b:8e:33:f0:d8:f7:f0:9c:43:
                    00:80:84:d4:fd:35:c0:71:e1:c2:76:5f:05:47:f2:
                    84:0a:10:5c:45:21:91:c2:db:a1:9c:96:a2:ff:32:
                    bf:66:63:e7:64:de:d0:92:5c:54:c4:8e:a9:e8:6c:
                    f2:1d:bd:24:0c:64:74:e2:9b:2a:c5:a2:44:e4:47:
                    aa:ca:94:13:56:e1:d5:56:33:90:fa:00:df:d7:d9:
                    62:36:84:67:7f:61:49:3d:0a:f8:03:c2:95:a1:e0:
                    ba:dd:4a:17:06:d8:2f:cc:f5:cf:5a:08:d6:23:05:
                    fc:62:d9:5c:2b:b3:5e:53:a1:e7:37:a7:bc:63:8f:
                    78:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:C6:CE:50:94:AB:56:9C:A8:EB:43:AD:70:B5:C0:91:55:3C:7C:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/a122155a-1d45-3526-9cfd-d3cca9f3100f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:e9:ef:bc:04:df:1c:a0:87:9a:51:e7:6a:c3:4e:be:a5:ef:
         ea:ad:e7:06:ea:e6:05:31:53:3d:19:7f:b1:0b:80:4e:7b:6f:
         da:fc:a9:7e:9d:9c:1f:29:9b:e8:de:40:0c:59:42:94:f1:8e:
         fa:2a:44:d2:a4:85:6f:ce:5a:81:74:e8:d1:63:82:14:48:89:
         be:e8:0b:b0:7f:44:ee:cc:fc:6c:8d:cb:28:39:f5:0a:63:9a:
         c5:61:1a:76:7c:74:f3:b8:31:65:45:71:20:19:dc:ee:f8:92:
         0b:b6:3b:df:50:bc:b3:bb:80:17:52:f5:f1:2b:6b:7a:82:b2:
         03:0d:25:47:98:36:42:33:d2:d2:26:cd:22:5f:30:01:27:7c:
         db:82:25:7c:e2:6b:5e:f6:9d:e3:91:f2:c5:59:29:2c:bc:9e:
         9a:44:38:0e:f2:ef:a7:43:9b:d1:5c:a2:7d:5d:bb:26:90:52:
         68:f0:32:15:76:d3:08:99:91:8f:72:8c:89:67:c1:b4:ee:bd:
         dc:aa:72:85:e3:a5:e9:1a:d8:0b:e8:fa:40:af:14:2f:fe:39:
         7c:7c:cb:37:35:fd:66:0c:2b:38:99:ce:33:b2:ae:bf:30:e0:
         54:af:2b:82:94:89:09:4b:62:46:26:c4:3c:c9:fb:da:db:71:
         ee:f3:b9:98
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqntOBQwt3oSVeE+0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
MjJmMzRmZmUtNmM3NC00Nzc5LTkwYTAtOWIzODgxZDY5MjY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArI2tSy3rOiCs5VrELtuT9kFwdf8wnRhXWhnc
rMW8mwaJktVVJlLpy/dClcdDXFaQVCL2OXVQdhP9t3bLsRrFLYQcdyUVcKXML0Vc
/0M8IesfUliqNlpL/aKWKqX4N4ilxQ2+zxshuEO5cwg2e16ktbNT89Oi8huJZuSv
XjsrjjPw2PfwnEMAgITU/TXAceHCdl8FR/KEChBcRSGRwtuhnJai/zK/ZmPnZN7Q
klxUxI6p6GzyHb0kDGR04psqxaJE5EeqypQTVuHVVjOQ+gDf19liNoRnf2FJPQr4
A8KVoeC63UoXBtgvzPXPWgjWIwX8YtlcK7NeU6HnN6e8Y494OwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJzGzlCUq1acqOtDrXC1wJFVPHxhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvYTEyMjE1NWEtMWQ0NS0z
NTI2LTljZmQtZDNjY2E5ZjMxMDBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiBbUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEvp77wE3xygh5pR52rDTr6l7+qt5wbq5gUxUz0Zf7ELgE57b9r8qX6d
nB8pm+jeQAxZQpTxjvoqRNKkhW/OWoF06NFjghRIib7oC7B/RO7M/GyNyyg59Qpj
msVhGnZ8dPO4MWVFcSAZ3O74kgu2O99QvLO7gBdS9fEra3qCsgMNJUeYNkIz0tIm
zSJfMAEnfNuCJXzia172neOR8sVZKSy8nppEOA7y76dDm9Fcon1duyaQUmjwMhV2
0wiZkY9yjIlnwbTuvdyqcoXjpeka2Avo+kCvFC/+OXx8yzc1/WYMKziZzjOyrr8w
4FSvK4KUiQlLYkYmxDzJ+9rbce7zuZg=
-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:39 2023 by rpki-client on console-fra.rpki-client.org