Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/01ca7093-7cfc-3ac4-9891-3a677ee3c44f.roa
File:                     01ca7093-7cfc-3ac4-9891-3a677ee3c44f.roa (raw, json)
Hash identifier:          OpE1BNKGHrPDwaUfdQ22EsfyYZrXtR3g2h0/U3Bf9aA=
Subject key identifier:   C7:A8:D7:AE:55:83:DC:82:53:52:9F:AD:A8:18:05:15:12:64:78:2C
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F4328583AA7BF5898C1504B51361D99C0
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/01ca7093-7cfc-3ac4-9891-3a677ee3c44f.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     36040
IP address blocks:        136.22.130.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:bf:58:98:c1:50:4b:51:36:1d:99:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=dedb19e2-bfc6-4412-bd9f-56a8c35d267e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:52:df:50:13:58:7c:bc:a6:44:1d:87:63:a1:
                    1f:51:05:f9:6b:c6:70:4c:c3:3c:0f:ff:e2:3a:38:
                    9d:c0:88:9f:02:d6:a1:43:1f:23:eb:28:05:12:b4:
                    c6:4a:31:06:b6:cf:58:54:8d:d3:fa:b2:a9:db:38:
                    21:ea:b9:3c:20:47:50:91:37:e3:a8:87:1e:d7:f6:
                    ad:11:11:db:55:94:c1:8f:cf:f2:62:d4:ff:5d:46:
                    24:d6:c8:39:39:7c:4f:1e:0c:55:a3:67:ba:72:59:
                    51:be:81:e7:8a:ff:a9:41:a4:18:d9:9b:97:ba:10:
                    86:d7:b5:f5:26:74:62:0f:6c:1f:28:81:bc:1e:c8:
                    0b:92:80:e3:30:09:34:f6:dd:c9:7c:bf:fa:37:56:
                    d6:10:8f:7f:2c:f9:ac:8c:1f:03:2f:ac:27:95:ad:
                    75:26:3f:93:c4:68:59:b2:47:50:96:d0:53:1b:ff:
                    23:14:5a:09:4f:a1:5e:4b:ca:21:1c:08:da:17:0a:
                    3b:b9:80:41:aa:2e:45:d9:20:97:e5:93:23:48:fc:
                    de:05:35:5c:6c:57:59:b6:32:95:a6:70:cf:4f:53:
                    f2:70:42:36:40:e4:b1:c3:1d:ae:32:fb:52:c1:78:
                    c3:db:42:f7:05:f1:55:af:8a:53:46:fb:fa:62:f2:
                    e9:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:A8:D7:AE:55:83:DC:82:53:52:9F:AD:A8:18:05:15:12:64:78:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/01ca7093-7cfc-3ac4-9891-3a677ee3c44f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:e4:f6:7a:00:49:6a:6c:23:00:32:44:43:3d:87:c0:f9:60:
         83:7e:fa:be:94:7c:5b:7c:43:3e:9e:17:c4:15:4e:f8:d9:35:
         b8:52:8a:7c:8f:22:1a:51:bd:4e:2a:ca:37:e5:0f:46:cf:40:
         96:55:a8:04:a6:c4:3a:ca:ac:f7:be:19:1c:8e:46:73:b9:f6:
         a8:eb:08:21:06:6b:45:4b:e3:fe:9b:53:03:a5:90:50:50:ec:
         a4:fe:88:be:8b:bd:82:85:20:c6:98:02:1c:f9:f9:d1:a2:43:
         7a:ac:a9:bf:b6:88:81:ec:4f:7e:4a:89:a7:89:6a:40:bc:bf:
         06:30:b8:4e:12:af:78:98:69:35:f4:9e:d6:09:8f:a6:69:94:
         3e:57:11:71:6f:c6:bc:6e:36:0a:8b:7a:e8:55:66:5b:f7:d5:
         e0:f8:8e:c9:18:9f:d2:9e:1a:d0:d3:b7:b0:28:08:82:b9:9d:
         cc:1c:a0:08:eb:d6:86:0a:c7:3c:a5:80:2d:79:73:69:dd:4a:
         ff:ae:2b:b5:6f:03:ff:fe:be:11:17:fc:da:8b:06:9e:26:80:
         b8:84:8e:38:69:59:76:1d:82:e0:7a:b2:a2:0a:49:12:d3:7c:
         7b:f9:3c:1b:bc:d0:3a:4b:0f:ab:3a:5b:ee:56:ec:93:6e:5f:
         fa:29:f2:4a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnv1iYwVBLUTYdmcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh
ZWEyMB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
ZGVkYjE5ZTItYmZjNi00NDEyLWJkOWYtNTZhOGMzNWQyNjdlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklLfUBNYfLymRB2HY6EfUQX5a8ZwTMM8D//i
OjidwIifAtahQx8j6ygFErTGSjEGts9YVI3T+rKp2zgh6rk8IEdQkTfjqIce1/at
ERHbVZTBj8/yYtT/XUYk1sg5OXxPHgxVo2e6cllRvoHniv+pQaQY2ZuXuhCG17X1
JnRiD2wfKIG8HsgLkoDjMAk09t3JfL/6N1bWEI9/LPmsjB8DL6wnla11Jj+TxGhZ
skdQltBTG/8jFFoJT6FeS8ohHAjaFwo7uYBBqi5F2SCX5ZMjSPzeBTVcbFdZtjKV
pnDPT1PycEI2QOSxwx2uMvtSwXjD20L3BfFVr4pTRvv6YvLpfQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMeo165Vg9yCU1KfragYBRUSZHgsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2
Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvMDFjYTcwOTMtN2NmYy0z
YWM0LTk4OTEtM2E2NzdlZTNjNDRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4
ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh
YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2
MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBaCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD3k9noASWpsIwAyREM9h8D5YIN++r6UfFt8Qz6eF8QVTvjZNbhSinyP
IhpRvU4qyjflD0bPQJZVqASmxDrKrPe+GRyORnO59qjrCCEGa0VL4/6bUwOlkFBQ
7KT+iL6LvYKFIMaYAhz5+dGiQ3qsqb+2iIHsT35KiaeJakC8vwYwuE4Sr3iYaTX0
ntYJj6ZplD5XEXFvxrxuNgqLeuhVZlv31eD4jskYn9KeGtDTt7AoCIK5ncwcoAjr
1oYKxzylgC15c2ndSv+uK7VvA//+vhEX/NqLBp4mgLiEjjhpWXYdguB6sqIKSRLT
fHv5PBu80DpLD6s6W+5W7JNuX/op8ko=
-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:47 2023 by rpki-client on console-fra.rpki-client.org