Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/e385d898-60df-35ef-bc55-a633a6581efa.roa
File:                     e385d898-60df-35ef-bc55-a633a6581efa.roa (raw, json)
Hash identifier:          Hc59DtLikusas1mQJ2qi/bqfrr9p5NRbhIj1hS0QIm8=
Subject key identifier:   61:8A:46:8F:98:3C:33:A0:9F:54:FC:7E:1B:16:92:AF:A1:AE:93:1E
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328583AA7B7CB82C79B6BC5ED90FE80
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/e385d898-60df-35ef-bc55-a633a6581efa.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     36492
IP address blocks:        136.22.220.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:b7:cb:82:c7:9b:6b:c5:ed:90:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=416c86d6-2b21-4e96-ab4a-a52abbc3e72d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e0:ce:a2:d5:20:57:c3:af:8d:17:c1:2a:0a:
                    ca:e9:ca:19:42:b3:cd:48:bc:d1:79:87:58:df:35:
                    0e:d4:87:68:4f:6e:ba:a7:53:2d:c7:f7:44:98:52:
                    ee:75:f1:7e:59:73:d0:03:63:1c:ec:07:c7:51:62:
                    e5:89:59:5b:a1:64:d5:e5:3c:87:2a:e2:da:18:98:
                    c4:a7:e4:7e:61:df:2b:e5:22:79:8e:de:3f:f9:dd:
                    d7:5a:62:7d:ce:ab:54:fa:f6:15:fe:e0:2b:cd:09:
                    9e:05:35:ac:f0:98:aa:ee:8d:2b:98:76:ba:9a:08:
                    18:49:54:9c:0c:57:6b:58:f2:fe:80:ea:e1:d3:c4:
                    23:bd:a4:30:33:47:c4:85:94:ba:76:a4:82:70:4a:
                    6a:76:f7:64:55:b6:13:6c:68:06:ee:2f:7b:54:6a:
                    d3:21:bf:d0:f2:a4:96:6e:a9:a7:e4:5a:47:40:c6:
                    e1:03:48:19:c2:19:c1:04:ab:bf:73:0f:10:d7:60:
                    1f:2d:f5:b5:90:bf:77:66:8d:2b:5b:fe:20:be:33:
                    48:96:32:d0:91:1b:67:ba:03:89:6d:8a:28:b7:d0:
                    ad:e6:3f:64:e1:8c:d0:0a:77:9d:1c:ed:6f:c2:11:
                    93:2d:9c:20:c3:28:eb:a6:1b:8f:ef:e8:66:aa:b1:
                    66:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:8A:46:8F:98:3C:33:A0:9F:54:FC:7E:1B:16:92:AF:A1:AE:93:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/e385d898-60df-35ef-bc55-a633a6581efa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:7e:c7:f2:bf:5f:7b:09:b5:46:d7:dc:f0:95:c0:20:97:37:
         25:9e:3a:81:d7:36:6d:94:f0:f4:22:b9:31:cd:98:be:63:31:
         41:9a:57:c6:07:b3:a6:fd:ad:93:da:8b:e1:d9:7c:52:8e:76:
         f6:e1:01:11:6f:c1:a2:4c:18:d4:09:95:63:43:60:22:c1:33:
         eb:16:c7:7d:1e:62:dc:99:48:28:14:d2:9e:c4:bf:83:d0:3a:
         93:e8:08:c6:35:4a:c8:1c:f7:1f:2d:06:eb:84:0d:80:13:f3:
         eb:a9:08:83:87:73:d0:d7:25:1d:2a:65:ba:84:fd:d2:e0:94:
         ff:1f:21:7b:c8:ba:64:88:62:5b:51:94:49:05:cc:06:ff:75:
         6d:c0:01:e8:f8:e2:0b:d2:f7:bf:ca:ee:fd:ca:c7:96:e7:9a:
         1e:5c:be:6a:86:1e:f8:4c:74:bd:a9:c7:5d:5a:31:6a:16:e8:
         b5:38:b5:33:17:af:26:d5:ee:47:d8:0e:2e:cc:4e:32:f5:f3:
         a5:ad:b2:04:41:6e:4f:76:be:c3:7f:dc:30:b9:7b:2b:9c:fa:
         77:9a:3f:bd:b3:86:a4:5f:eb:fd:b2:93:41:2b:74:3c:8e:8e:
         49:2e:84:d3:ee:c5:15:7f:01:03:1e:a5:9e:44:ab:d8:a9:a8:
         13:ec:39:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:39 2023 by rpki-client on console-fra.rpki-client.org