Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/2252b538-5946-3d0a-a9c7-1e80666f5e37.roa
File:                     2252b538-5946-3d0a-a9c7-1e80666f5e37.roa (raw, json)
Hash identifier:          tVt9W+HSZeK2HlyBkcInkeSJxi/25hbue2BQibpeNUg=
Subject key identifier:   C7:3C:08:67:2C:EF:4C:96:70:E3:0C:96:F6:FB:0B:FE:B9:41:65:74
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F4328583AA7C4E3CC5D0A7363EB24EC80
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/2252b538-5946-3d0a-a9c7-1e80666f5e37.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     36040
IP address blocks:        136.22.140.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:c4:e3:cc:5d:0a:73:63:eb:24:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=c08c3339-bd59-4374-91c8-8ee22d936577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:00:22:5c:4e:a3:d6:3c:77:00:5f:cd:1b:19:
                    37:40:11:db:c5:f9:1d:4e:25:e5:5e:d7:16:f5:fd:
                    ff:5a:3f:da:a4:d1:44:7f:23:07:4c:a2:32:d5:bf:
                    f3:07:b8:d6:dd:ea:26:0d:c4:34:c8:75:42:30:31:
                    69:39:eb:10:85:fc:e5:01:dd:5c:7b:e4:09:49:a4:
                    e0:8d:df:27:19:df:88:b3:fe:62:66:05:e4:7f:96:
                    46:bd:21:94:22:d7:af:9b:20:72:be:fa:81:69:60:
                    a6:ae:f2:d4:77:36:88:8f:27:c1:13:86:59:bc:c6:
                    2b:0d:67:bd:c4:20:63:68:3b:af:49:5a:6a:df:20:
                    31:65:f1:f6:b4:c8:6a:24:27:7a:8a:3f:47:ca:0c:
                    88:e6:a9:b1:37:06:48:79:0f:ae:7b:4d:44:80:f2:
                    d2:db:7c:27:b2:79:0d:e3:66:d1:81:8d:3b:b7:38:
                    d9:4c:bd:5f:69:dd:74:f8:f9:54:95:1b:b6:1e:12:
                    1a:fc:54:de:38:1e:76:51:b9:00:2e:37:11:3b:a1:
                    66:a7:4d:17:d8:a6:1d:85:8e:5d:8c:ef:97:38:cf:
                    cf:3a:34:6d:9b:5e:9a:10:64:de:b7:66:93:ab:e9:
                    c9:ad:f1:6d:1f:04:3b:84:e4:6c:df:60:c7:14:c5:
                    5a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:3C:08:67:2C:EF:4C:96:70:E3:0C:96:F6:FB:0B:FE:B9:41:65:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/2252b538-5946-3d0a-a9c7-1e80666f5e37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:c5:9f:65:4d:a8:6a:cb:1a:38:63:c0:5c:cf:6c:e0:05:16:
         ea:c3:18:9f:7f:5b:fb:b3:d0:4d:38:d4:f8:42:c3:ac:6f:89:
         eb:47:bd:06:53:a8:bf:4f:22:60:94:50:66:15:ae:c1:4c:b9:
         06:c6:3c:2f:82:07:97:9e:ec:68:28:cc:23:27:c6:d2:9a:25:
         05:9e:81:f1:c4:5b:8d:e8:70:5b:1d:f6:99:4d:e0:2f:13:24:
         eb:ec:3d:88:d2:10:9c:b5:74:d2:1b:42:de:34:a5:9e:b9:d4:
         0d:5f:0a:b8:97:1f:98:4d:29:a6:90:c2:c0:b3:0a:69:5e:7c:
         ea:b2:60:e2:d9:3c:cf:c6:41:ed:92:34:42:cd:99:b2:ef:53:
         08:fb:3b:ff:9e:14:1c:b1:d5:f4:80:36:72:72:40:ad:f5:3f:
         0a:ce:fb:9a:fe:bd:83:ab:49:ff:90:73:32:12:99:77:e0:bc:
         7a:47:4a:aa:37:73:cb:1a:d9:f7:87:e1:11:62:a9:59:7d:bb:
         78:9e:72:06:8d:23:a5:36:07:0f:70:c3:2f:b9:0a:a5:20:db:
         e4:1b:0b:dd:c4:49:ab:c6:fa:4b:c1:25:fc:3c:e4:a8:b0:c1:
         7f:6c:06:49:bc:eb:14:ef:90:38:07:94:08:4f:9c:27:05:da:
         e5:6d:97:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:47 2023 by rpki-client on console-fra.rpki-client.org