Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/b9727b6d-51b1-38da-8f31-3a71684b57d3.roa
File:                     b9727b6d-51b1-38da-8f31-3a71684b57d3.roa (raw, json)
Hash identifier:          b+1dgH/bNrH2ovNIUS7GqcVcjAGfclsn9g2UWleTCsE=
Subject key identifier:   88:5B:73:1B:80:B0:B1:C3:0C:C7:CA:85:23:D4:59:F2:58:EC:80:86
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328583AA7BE4705A65210CE41AEF980
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/b9727b6d-51b1-38da-8f31-3a71684b57d3.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     36492
IP address blocks:        136.22.251.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:be:47:05:a6:52:10:ce:41:ae:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=1c28c4ad-738a-4b97-a201-f5764d6f0b94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:6c:ee:b4:9c:1e:b1:d3:f2:56:ea:a2:41:ce:
                    d2:2b:25:77:ea:03:cd:13:6b:80:77:8c:01:fd:b7:
                    16:5b:15:8c:e7:43:4f:7d:90:a5:8d:20:d1:6c:07:
                    80:b9:f5:e6:29:7b:fd:35:a6:ae:55:72:e2:32:0e:
                    a7:d7:64:8e:59:32:d7:96:56:1e:70:4a:32:34:43:
                    b2:3f:80:78:c8:a8:a2:13:f0:ec:c8:70:c6:86:07:
                    5b:c3:32:e9:02:6c:2b:3c:6f:40:96:e7:1c:20:7d:
                    90:b4:36:3c:13:cc:ed:8d:61:90:b2:de:2f:84:c2:
                    4a:bf:09:97:f2:9e:71:a6:26:a1:38:34:70:c8:13:
                    91:82:2b:b7:6f:2f:e9:ec:3e:0d:33:35:07:51:6f:
                    1f:47:a3:ea:c5:a8:ac:91:8d:0c:f4:3f:8e:15:c1:
                    1a:b2:26:00:32:3d:ba:79:12:9c:a4:3b:4e:ae:0e:
                    69:cf:c6:07:36:72:3f:37:b5:c6:79:a5:7e:9c:36:
                    fe:ae:89:5c:5b:af:19:1b:c6:cd:8c:f8:d5:ff:05:
                    ea:4e:1c:2f:21:46:7f:be:20:53:d7:63:81:76:63:
                    3a:5d:98:4e:fd:4a:22:e7:02:af:02:4b:06:e0:0b:
                    69:a7:3d:24:e1:ed:33:9f:bf:9a:7a:bc:d9:da:8a:
                    d5:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:5B:73:1B:80:B0:B1:C3:0C:C7:CA:85:23:D4:59:F2:58:EC:80:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/b9727b6d-51b1-38da-8f31-3a71684b57d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:d0:42:a9:25:dc:bb:a1:5b:70:cf:c8:c4:9e:f4:74:5f:7d:
         57:b6:92:ca:1a:4c:ef:8b:25:c7:02:64:2b:a1:c6:23:3b:41:
         9e:d0:32:8e:14:18:9e:84:61:17:09:46:a1:27:0c:9d:3f:62:
         ba:86:e2:73:ea:a7:98:63:99:c8:6b:03:cd:77:22:6c:bc:9f:
         b1:4a:9d:e1:e3:ec:1a:7a:38:c5:82:90:87:ce:a1:49:c1:b2:
         ff:c0:b5:87:76:31:fb:24:c8:d6:11:ee:32:54:94:2b:96:48:
         4e:02:4c:8e:12:7c:cf:12:92:18:46:5f:a0:2b:aa:83:d3:20:
         e8:ac:44:aa:6e:6d:0f:99:e5:0c:c3:ad:7a:ae:4a:a6:53:9b:
         ae:d5:59:04:b3:c2:97:9a:42:4c:27:f6:61:79:7f:88:6a:80:
         b6:a7:24:f2:2f:4e:34:d1:29:04:30:cb:2b:41:65:ca:0e:10:
         94:68:b9:7c:71:39:65:1b:40:c1:ce:17:74:3c:b0:d4:70:90:
         fa:ec:b8:df:95:a7:b3:71:3d:3a:44:27:38:0c:9d:57:56:95:
         d9:b1:67:0a:9c:01:28:93:54:fa:6c:d6:3f:18:35:64:04:6d:
         64:c7:88:07:25:93:98:8b:18:29:03:0e:71:59:7c:78:90:0e:
         cf:fb:b6:92
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnvkcFplIQzkGu+YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
MWMyOGM0YWQtNzM4YS00Yjk3LWEyMDEtZjU3NjRkNmYwYjk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32zutJwesdPyVuqiQc7SKyV36gPNE2uAd4wB
/bcWWxWM50NPfZCljSDRbAeAufXmKXv9NaauVXLiMg6n12SOWTLXllYecEoyNEOy
P4B4yKiiE/DsyHDGhgdbwzLpAmwrPG9AluccIH2QtDY8E8ztjWGQst4vhMJKvwmX
8p5xpiahODRwyBORgiu3by/p7D4NMzUHUW8fR6PqxaiskY0M9D+OFcEasiYAMj26
eRKcpDtOrg5pz8YHNnI/N7XGeaV+nDb+rolcW68ZG8bNjPjV/wXqThwvIUZ/viBT
12OBdmM6XZhO/Uoi5wKvAksG4Atppz0k4e0zn7+aerzZ2orV4QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIhbcxuAsLHDDMfKhSPUWfJY7ICGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvYjk3MjdiNmQtNTFiMS0z
OGRhLThmMzEtM2E3MTY4NGI1N2QzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBb7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACvQQqkl3LuhW3DPyMSe9HRffVe2ksoaTO+LJccCZCuhxiM7QZ7QMo4U
GJ6EYRcJRqEnDJ0/YrqG4nPqp5hjmchrA813Imy8n7FKneHj7Bp6OMWCkIfOoUnB
sv/AtYd2MfskyNYR7jJUlCuWSE4CTI4SfM8SkhhGX6ArqoPTIOisRKpubQ+Z5QzD
rXquSqZTm67VWQSzwpeaQkwn9mF5f4hqgLanJPIvTjTRKQQwyytBZcoOEJRouXxx
OWUbQMHOF3Q8sNRwkPrsuN+Vp7NxPTpEJzgMnVdWldmxZwqcASiTVPps1j8YNWQE
bWTHiAclk5iLGCkDDnFZfHiQDs/7tpI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:42:27 2024 by rpki-client on console-ams.rpki-client.org