Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/eb54d277-b948-3e41-988c-f25d4e191734.roa
File:                     eb54d277-b948-3e41-988c-f25d4e191734.roa (raw, json)
Hash identifier:          JT5YFKm3xjINOZcRcG6EUtwG0Z2Gp6VlDCPGwkKcGp8=
Subject key identifier:   18:20:9C:06:FB:4A:6E:A1:16:D7:7D:27:77:F3:5C:D4:57:1D:0D:CE
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328583AA7A8674A95FB5A372680A460
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/eb54d277-b948-3e41-988c-f25d4e191734.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     36492
IP address blocks:        136.22.250.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:a8:67:4a:95:fb:5a:37:26:80:a4:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=f4d8f6b7-271c-44fb-a672-1610c774f609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:92:0a:5a:8a:69:f3:33:60:9f:c5:a9:b3:a3:
                    2f:13:a0:df:8a:a0:a4:55:d7:e2:ca:15:56:70:c2:
                    67:74:be:c8:10:99:6e:cb:11:af:b9:d9:d5:30:ef:
                    12:15:bf:c4:21:56:ba:8d:99:90:71:07:8c:e2:af:
                    13:27:7d:a3:d5:f6:84:83:44:db:a6:c1:d8:2c:ed:
                    d2:89:64:1a:17:dd:05:6e:07:03:63:00:7d:74:2c:
                    df:85:f4:30:2a:2b:b4:de:76:fa:c3:98:cc:92:98:
                    2a:27:16:e8:31:f3:f2:6e:db:dc:b4:a5:99:0d:7f:
                    af:24:4f:6f:67:09:32:cf:71:81:48:5b:8b:22:ff:
                    98:78:62:d6:71:4a:42:af:35:37:b6:ef:a0:76:cd:
                    76:c7:c3:b1:15:01:14:94:7a:6c:a6:27:85:62:8a:
                    05:af:50:1f:3e:c5:96:70:28:b9:87:fa:d9:aa:f4:
                    b8:9f:6b:89:12:0e:4a:34:fd:dc:af:95:76:ca:1f:
                    e8:f2:fd:8d:f1:43:cf:c0:cf:a4:fb:2b:b3:ce:8e:
                    0c:f3:06:3f:2e:7d:d4:37:43:54:c1:e1:8f:f3:c6:
                    04:5a:71:99:e9:1d:cf:c7:c0:92:01:37:f1:22:98:
                    24:a1:f0:a1:40:75:49:79:94:fb:f5:7f:6b:c6:23:
                    b6:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:20:9C:06:FB:4A:6E:A1:16:D7:7D:27:77:F3:5C:D4:57:1D:0D:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/eb54d277-b948-3e41-988c-f25d4e191734.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:12:18:b5:a5:9f:0b:b7:c5:c9:93:a7:15:ea:d5:1e:6e:23:
         c7:6d:68:45:1d:79:33:6d:7d:c6:5c:62:74:4a:c4:dc:78:d3:
         9e:e2:5c:ad:8a:c6:37:a8:57:d9:aa:d4:46:38:2e:15:fe:ee:
         7c:58:65:28:5a:53:7d:61:35:2a:d1:1d:e2:94:1c:03:b5:78:
         88:a7:ec:66:0f:11:b8:84:44:44:3a:d6:89:11:72:d4:c0:60:
         b6:cb:17:e4:35:9d:c4:da:f7:9e:70:b4:66:94:67:86:93:e0:
         9f:57:30:40:d0:e4:23:19:82:99:a3:f1:65:96:92:d3:05:0a:
         ac:8e:1a:d5:77:01:18:40:b6:cf:7b:dc:4e:5f:34:5f:8d:f5:
         fd:79:9d:15:78:cb:e8:08:73:99:91:7d:cc:95:cd:14:dd:fe:
         6c:e6:9b:f1:9d:01:cb:75:c7:c0:e1:65:da:82:0f:40:22:bd:
         14:eb:b9:49:ef:83:c0:de:06:17:f6:9e:d3:d9:af:66:1d:8e:
         d6:27:98:3d:da:4c:03:95:9e:06:8a:b3:d5:a2:6a:ca:83:bd:
         3f:28:ac:fa:7f:bb:fa:0d:db:17:e9:ac:d5:13:86:1b:b5:15:
         1c:66:a0:40:d4:a0:bc:c5:36:bd:a9:09:b3:cd:ed:d4:1a:0b:
         0a:53:45:cb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnqGdKlftaNyaApGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
ZjRkOGY2YjctMjcxYy00NGZiLWE2NzItMTYxMGM3NzRmNjA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopIKWopp8zNgn8Wps6MvE6DfiqCkVdfiyhVW
cMJndL7IEJluyxGvudnVMO8SFb/EIVa6jZmQcQeM4q8TJ32j1faEg0TbpsHYLO3S
iWQaF90FbgcDYwB9dCzfhfQwKiu03nb6w5jMkpgqJxboMfPybtvctKWZDX+vJE9v
Zwkyz3GBSFuLIv+YeGLWcUpCrzU3tu+gds12x8OxFQEUlHpspieFYooFr1AfPsWW
cCi5h/rZqvS4n2uJEg5KNP3cr5V2yh/o8v2N8UPPwM+k+yuzzo4M8wY/Ln3UN0NU
weGP88YEWnGZ6R3Px8CSATfxIpgkofChQHVJeZT79X9rxiO2+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBggnAb7Sm6hFtd9J3fzXNRXHQ3OMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvZWI1NGQyNzctYjk0OC0z
ZTQxLTk4OGMtZjI1ZDRlMTkxNzM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBb6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJMSGLWlnwu3xcmTpxXq1R5uI8dtaEUdeTNtfcZcYnRKxNx4057iXK2K
xjeoV9mq1EY4LhX+7nxYZShaU31hNSrRHeKUHAO1eIin7GYPEbiEREQ61okRctTA
YLbLF+Q1ncTa955wtGaUZ4aT4J9XMEDQ5CMZgpmj8WWWktMFCqyOGtV3ARhAts97
3E5fNF+N9f15nRV4y+gIc5mRfcyVzRTd/mzmm/GdAct1x8DhZdqCD0AivRTruUnv
g8DeBhf2ntPZr2YdjtYnmD3aTAOVngaKs9WiasqDvT8orPp/u/oN2xfprNUThhu1
FRxmoEDUoLzFNr2pCbPN7dQaCwpTRcs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:53 2024 by rpki-client on console-fra.rpki-client.org