Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/e4e02fd7-7a50-3c73-a554-3e30da116dbd.roa
File:                     e4e02fd7-7a50-3c73-a554-3e30da116dbd.roa (raw, json)
Hash identifier:          0X7/jpxBDKRupBO22gnGxPwBTyUxm9RouHOYCz4+P3Q=
Subject key identifier:   1B:46:51:1C:23:56:F3:CC:F1:E7:0F:DF:6C:C0:FE:91:32:70:05:2E
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328583AA7B3F4ADEC6B1F592E9EA300
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/e4e02fd7-7a50-3c73-a554-3e30da116dbd.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     36492
IP address blocks:        136.22.225.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:b3:f4:ad:ec:6b:1f:59:2e:9e:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=2e528a2e-450e-4d92-a009-4957011187e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b9:32:46:ee:b9:13:17:a5:7b:a0:6c:a1:78:
                    a7:79:37:80:fb:0d:82:c6:3b:3c:01:18:d9:11:45:
                    fc:b4:2f:1c:36:94:8e:02:31:fb:b0:56:aa:28:24:
                    ee:96:86:21:b7:21:49:c4:48:07:af:0e:83:23:f8:
                    10:88:72:e4:ee:f9:5c:6a:a7:23:bd:d5:41:06:46:
                    56:16:ff:10:d4:fb:81:dd:b2:78:4b:31:0b:3f:f1:
                    b3:ca:60:54:1f:bb:7b:b7:80:90:73:d6:f7:43:04:
                    29:18:76:03:f6:41:2d:c7:98:78:79:a2:28:a1:c7:
                    2d:72:d2:ac:34:1c:60:19:09:3f:49:17:e8:c2:66:
                    82:4d:32:94:f3:e3:83:77:c9:f0:b3:d6:bb:21:a3:
                    f8:d9:ff:3b:ee:1e:4b:c1:f0:2c:73:dd:27:9f:35:
                    00:86:e4:c3:a6:a9:51:3a:1a:7b:ea:c9:bf:b0:8a:
                    35:f0:a2:42:ab:7e:9d:b0:0f:05:e1:b8:4b:0f:7a:
                    82:09:1d:0e:92:50:ac:0a:44:94:11:70:26:4c:cf:
                    30:46:f7:b7:2b:93:cc:21:75:f4:86:75:00:bf:c9:
                    b8:c7:89:cc:96:4d:17:5f:76:23:62:b0:8b:45:ee:
                    ba:24:dc:6c:c6:7b:35:c0:10:1c:c6:af:f0:7a:91:
                    36:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:46:51:1C:23:56:F3:CC:F1:E7:0F:DF:6C:C0:FE:91:32:70:05:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/e4e02fd7-7a50-3c73-a554-3e30da116dbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:48:0e:80:8c:c7:8a:ca:65:23:68:ce:f4:6a:ce:06:16:9f:
         16:e9:d9:fe:35:5d:c9:0a:bb:ba:cf:11:27:b2:79:3a:4e:87:
         57:ff:1f:39:da:0a:a8:6d:7b:cf:f8:d5:91:9c:bd:bb:c6:90:
         15:8f:09:e5:8f:33:b8:0b:ce:e6:23:6e:13:1c:5d:83:fa:40:
         92:01:fe:3a:4f:f4:0c:0a:91:1a:a4:31:7e:63:bf:dd:35:cd:
         27:3f:87:e1:1b:7d:3e:1c:b6:d7:cb:32:9e:81:eb:63:f2:b6:
         ca:53:eb:e4:06:59:bb:c5:50:78:5a:d5:51:75:21:0b:90:d0:
         5a:75:03:d6:2c:4a:8a:0a:d1:7a:6a:6c:42:50:ff:fd:3e:bf:
         d1:3b:2f:c9:6f:2b:89:4e:68:7b:a5:51:0f:30:ea:0a:45:f6:
         3e:de:41:76:8c:27:25:a9:62:dd:b4:b7:43:de:83:11:07:45:
         62:17:33:ce:c7:e6:64:c4:6b:5a:1d:09:05:6e:ac:95:15:28:
         9a:34:ee:6b:ca:d3:4a:89:b8:f5:88:7b:9d:a8:f2:19:16:b6:
         7a:6b:ca:ca:13:28:70:a9:a9:30:5f:6e:b7:fa:4c:81:77:a5:
         f9:c2:33:32:ec:33:3b:8a:15:ee:24:e5:a2:fc:11:4d:81:36:
         73:62:d7:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:39 2023 by rpki-client on console-fra.rpki-client.org