Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/e7a50a1e-fa3e-30a5-b654-e084fcb66ba3.roa
File:                     e7a50a1e-fa3e-30a5-b654-e084fcb66ba3.roa (raw, json)
Hash identifier:          AgdB+fIV0kXY7chvziIQcEsLqKkMptjdm/JJqXSiYZk=
Subject key identifier:   66:25:04:84:46:F2:FC:30:C5:3F:BD:A7:9D:78:AF:A2:24:F6:E7:43
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328583AA7C40DAC3169B3B87D8EB200
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/e7a50a1e-fa3e-30a5-b654-e084fcb66ba3.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     36492
IP address blocks:        136.22.76.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:c4:0d:ac:31:69:b3:b8:7d:8e:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=0246117f-8c4d-4c6c-adf3-2ddafde26255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:34:8b:15:02:0c:9d:2b:c0:47:cd:69:59:35:
                    92:f0:33:f9:a0:13:c7:8d:36:ce:38:e1:fa:d5:6e:
                    42:dc:42:17:b6:20:2f:dc:02:b1:c3:02:d1:71:d1:
                    26:ba:5c:5d:12:85:56:14:07:36:bc:63:94:33:47:
                    b5:2c:aa:16:c9:c4:2f:b7:69:62:13:16:ed:97:c8:
                    b3:64:9c:65:c0:62:8a:98:be:f2:33:1b:b8:72:1f:
                    62:8f:0e:47:b6:41:e4:5e:3c:73:5c:df:02:52:51:
                    f1:b6:b5:4b:9a:c5:6c:1a:71:1c:d4:fb:7d:f5:83:
                    a5:b4:46:46:be:8d:3a:05:30:ff:5e:4c:09:da:1f:
                    ec:9a:a3:ec:5a:07:0e:ac:8c:14:30:6f:98:04:2b:
                    2a:c5:ee:a0:e4:26:fa:6c:34:89:d4:6f:7c:95:28:
                    02:e6:a1:80:15:83:13:01:8b:f6:d2:ad:f7:bf:86:
                    d9:8d:6b:ef:81:09:b7:21:02:1e:26:cb:40:67:82:
                    23:ba:fd:1f:38:29:23:79:32:8b:5f:83:39:90:fa:
                    bd:0a:d5:ef:2f:de:9f:57:58:97:80:1b:fd:bf:b0:
                    15:10:14:c7:75:5a:3c:80:ea:a9:91:28:b0:26:c9:
                    c0:33:22:b4:49:96:ee:b2:2a:32:25:bf:70:b8:3b:
                    15:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:25:04:84:46:F2:FC:30:C5:3F:BD:A7:9D:78:AF:A2:24:F6:E7:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/e7a50a1e-fa3e-30a5-b654-e084fcb66ba3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:18:4d:cd:65:7a:51:bb:5b:07:e8:21:58:7a:ed:6f:0a:92:
         9e:69:f8:5a:72:41:20:68:89:e8:86:aa:53:67:4f:2f:c0:16:
         14:e7:50:a0:8e:86:3d:ad:11:6a:12:0e:28:02:fb:d6:e4:08:
         71:96:dc:da:f5:b2:7a:88:07:dc:cb:84:33:84:be:3b:b2:a9:
         af:14:54:03:e2:99:72:a5:fd:93:ba:fe:f0:7b:8c:45:45:f0:
         4a:d5:ac:3d:12:9c:4f:db:6a:ba:2a:54:e4:c7:f8:fd:c9:5e:
         e3:98:21:1a:be:ca:bc:74:66:f6:d3:e9:71:bd:c7:12:f4:9b:
         3c:b2:ad:a3:e5:b7:a6:d3:d3:8e:44:40:55:e1:4a:76:62:4b:
         d4:b9:78:f6:14:8e:ed:d4:9e:ff:3a:b2:1f:b7:38:1c:21:ec:
         23:3b:94:01:11:06:4a:f4:58:1c:83:16:ca:4d:84:bb:bb:13:
         74:d0:ea:83:f8:fa:a1:00:53:a2:cb:c3:b2:81:9b:0b:cf:93:
         8d:70:d0:aa:df:47:1c:74:a4:6b:d5:97:26:3b:5a:0f:a6:76:
         cf:21:f4:5f:f8:db:64:9a:ad:e7:bd:f5:be:68:92:06:9b:68:
         81:32:a9:59:1b:8b:da:a6:c4:c3:e7:ba:32:65:4c:d7:6f:60:
         75:7d:98:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:02:15 2023 by rpki-client on console-ams.rpki-client.org