Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/9dc29493-b16a-3ee0-b23c-5cbc71f76b58.roa
File:                     9dc29493-b16a-3ee0-b23c-5cbc71f76b58.roa (raw, json)
Hash identifier:          5CmiRODT3S/iaegeg5woPMx35LR+DxoDU6+OLQkEKkQ=
Subject key identifier:   5F:E1:DC:B8:49:5A:DB:EB:E3:17:1D:E5:2F:FC:9D:C8:7D:22:29:4A
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F4328583AA7BBCA6ADE29CE9275C52780
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/9dc29493-b16a-3ee0-b23c-5cbc71f76b58.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     36040
IP address blocks:        136.22.144.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:bb:ca:6a:de:29:ce:92:75:c5:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=11f2b47b-b7df-4d86-8fb0-c04546b08422
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:e2:90:44:fa:16:2a:d2:a0:f0:71:7b:6a:d6:
                    36:97:32:0f:09:12:97:b7:77:c6:2a:e9:10:48:93:
                    d7:e9:91:01:a9:32:03:fe:2f:bf:b5:ca:e4:e8:a9:
                    01:72:6f:55:f8:0e:d8:e2:61:cf:86:b5:41:1c:60:
                    87:c5:28:c5:83:d9:7c:c7:52:29:56:7b:bc:07:30:
                    27:d6:b3:eb:77:c8:71:03:b8:59:4f:fa:38:a0:bc:
                    c0:5e:4b:ea:b4:fc:cf:4a:2d:4b:f0:35:69:90:67:
                    b7:79:57:9b:ba:df:1e:fc:10:cc:8a:75:8b:d3:d7:
                    f5:71:c2:92:10:fc:69:19:bd:b2:09:11:a1:73:f1:
                    bd:c1:19:a3:76:83:78:a6:26:22:d5:3d:11:90:d3:
                    54:24:79:63:d3:1c:26:d0:c6:3c:70:b0:73:83:33:
                    10:82:8f:ce:23:4b:eb:df:ca:85:f2:ea:39:05:8e:
                    19:cb:3b:ef:78:1c:ec:78:60:a0:a3:70:a4:09:18:
                    0d:ed:f9:c0:4e:3b:71:5b:32:70:32:65:69:d8:8f:
                    c7:56:c4:39:ad:95:30:67:d4:63:37:ba:71:dc:de:
                    79:8a:0d:56:0e:19:cd:a1:3b:2a:d4:22:c4:47:04:
                    a3:26:52:fb:d0:d0:7b:bc:82:0a:77:16:32:d2:a7:
                    72:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:E1:DC:B8:49:5A:DB:EB:E3:17:1D:E5:2F:FC:9D:C8:7D:22:29:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/9dc29493-b16a-3ee0-b23c-5cbc71f76b58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.144.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:9d:7b:ec:a1:28:4c:f4:90:a9:8f:bb:27:d7:02:11:c6:20:
         91:d6:27:ae:bf:95:55:7f:94:d3:f5:fb:a7:6f:1b:2d:08:65:
         4b:d7:5e:89:4c:e1:38:78:3a:72:43:c2:f4:a9:30:2a:86:30:
         23:a5:66:20:5e:1a:05:4a:7d:cc:86:18:1a:b5:b2:a9:d5:6f:
         ea:41:6e:d6:ab:6a:50:c2:77:4d:48:30:ff:d0:e5:5c:dc:f0:
         cf:cc:6e:aa:6f:52:fa:37:35:d3:31:15:b6:9b:8e:a2:61:3c:
         f5:c8:54:17:2c:a5:fc:57:6c:b6:ae:a6:87:86:01:45:12:ac:
         db:d4:da:c2:fc:6e:c8:32:18:f4:42:a9:af:02:8f:3f:c5:19:
         ed:d3:e9:03:73:28:80:d1:8c:4f:25:03:70:d7:e8:d5:ec:1d:
         0a:ef:3d:19:49:10:7b:aa:73:cf:5e:e2:3b:fe:c7:db:f5:ee:
         de:85:b2:a1:8d:7b:1b:db:3c:be:81:52:d3:39:10:19:8a:21:
         ab:81:8c:9f:54:80:3d:25:af:b0:07:f4:6f:ce:53:64:9c:4c:
         da:85:db:3e:af:a8:6b:ec:e6:aa:35:ca:ed:65:80:87:e9:2d:
         30:64:67:36:83:49:1d:e4:cb:69:45:d5:5d:2a:34:78:82:7d:
         a2:e3:a5:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:47 2023 by rpki-client on console-fra.rpki-client.org