Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/da2f12f4-ef4d-33d7-8f3a-ecaecc1fd0a8.roa
File:                     da2f12f4-ef4d-33d7-8f3a-ecaecc1fd0a8.roa (raw, json)
Hash identifier:          Hh3WzERRLWVQ64V3Wj24ydco/dpoH+FxzXvUK/MfKns=
Subject key identifier:   54:44:07:7C:C3:87:ED:D1:6C:5B:23:DA:2A:A9:1C:36:AC:1E:A2:99
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328583AA7AB51BEE08EBD482C33E780
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/da2f12f4-ef4d-33d7-8f3a-ecaecc1fd0a8.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     36492
IP address blocks:        136.22.98.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:ab:51:be:e0:8e:bd:48:2c:33:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=7c5f0951-0a22-4be2-87ed-5a4ae71c5ced
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:5e:12:ba:22:bc:40:db:5e:90:23:1e:b7:ea:
                    b4:62:8d:9a:84:b2:3e:8b:3b:4d:fd:e4:4a:69:ed:
                    41:39:5a:cf:75:ed:0b:a6:2c:89:25:71:cf:36:1a:
                    a5:ab:1e:70:8b:a3:18:4b:62:fb:0b:df:0d:48:67:
                    62:ac:cc:fd:23:c7:2f:4a:e3:a2:a7:06:e0:ef:08:
                    11:3f:4f:86:29:1e:e4:24:6f:b9:5d:f9:d8:dc:5b:
                    4c:60:c3:6e:94:f1:71:47:09:d3:40:43:5d:48:e0:
                    ca:0a:f1:11:7b:f5:ca:ed:fe:29:8d:a0:62:4f:8a:
                    14:50:1e:a2:b2:48:c7:34:4c:7a:a3:ee:40:4c:fa:
                    8e:ee:51:be:0b:00:08:8e:29:55:b5:bc:7f:7a:c5:
                    72:74:0d:c2:a7:f1:5c:11:02:31:f1:69:90:d3:52:
                    95:2f:c8:69:7f:ec:59:14:13:ca:a6:45:d4:58:4f:
                    54:64:cd:23:0a:e7:69:56:04:bd:c5:03:eb:f3:b2:
                    90:26:17:5a:ec:68:54:aa:cc:94:6d:6e:1f:29:4b:
                    c9:e0:d8:5f:52:45:82:79:9d:6c:2e:cd:11:0e:db:
                    99:4c:94:6a:2b:5d:fb:a5:2f:85:75:8a:12:c6:34:
                    11:05:3d:6a:6a:1b:ac:55:1d:f6:77:f0:d3:e2:41:
                    e9:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:44:07:7C:C3:87:ED:D1:6C:5B:23:DA:2A:A9:1C:36:AC:1E:A2:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/da2f12f4-ef4d-33d7-8f3a-ecaecc1fd0a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.98.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:47:4b:d7:37:0b:9f:10:ab:88:69:f0:b5:59:0d:c5:af:fb:
         10:d6:b2:a8:52:c7:6a:b2:0c:2c:ee:a9:48:1f:3c:94:2a:bf:
         64:8e:f4:e2:89:5a:17:0f:9c:c4:e7:52:5f:57:2e:bc:e8:ec:
         9c:99:d9:33:51:c2:18:c3:7e:c7:68:5f:4d:44:95:a5:94:d0:
         a7:90:b8:f0:be:a6:31:a6:e8:0d:73:79:7c:71:f4:76:38:30:
         50:11:6d:2a:06:ed:d6:98:8f:15:d6:27:18:dd:b1:a8:4e:93:
         4e:8a:95:01:45:be:37:59:03:8f:6a:6f:55:50:93:ef:21:fe:
         71:df:1f:0c:1a:a3:85:5b:84:80:5b:cd:25:4a:98:dd:b6:a4:
         2c:56:de:d8:6c:5a:0d:81:17:cd:68:45:30:b2:88:8b:be:61:
         56:dd:da:0a:f1:95:20:f0:b5:42:26:41:70:7c:f8:16:f3:67:
         46:54:b7:91:c3:54:31:4e:b9:4a:c0:4b:51:70:fd:1a:05:af:
         69:14:48:bd:bd:fc:59:3d:06:72:ec:83:9f:38:2a:95:a7:62:
         8f:a8:f0:eb:a2:cc:e3:75:ac:a5:73:96:a2:28:c5:bc:47:72:
         d2:ab:3a:36:50:93:0d:3c:1e:58:9e:59:85:54:89:2f:78:dc:
         3b:0e:60:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:39 2023 by rpki-client on console-fra.rpki-client.org