Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/bf0420e4-60e9-3410-a927-547d55815887.roa
File:                     bf0420e4-60e9-3410-a927-547d55815887.roa (raw, json)
Hash identifier:          UKogATfE/XJ54AUvNmPbfBgGSzIMx7idoDpw4TuW180=
Subject key identifier:   25:8E:70:19:11:9F:43:22:B7:27:C1:B6:16:3F:2A:D5:96:9D:74:1B
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F432858430A13A396F105EFDDE1A1CA96
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/bf0420e4-60e9-3410-a927-547d55815887.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36040
IP address blocks:        136.22.156.0/23 maxlen: 23
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:13:a3:96:f1:05:ef:dd:e1:a1:ca:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=87e997f8-1c25-4d29-8187-947ae4dabdff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:61:82:b3:03:ea:bb:0c:40:83:72:49:ca:6e:
                    58:27:13:86:f5:71:63:06:eb:bc:97:81:e4:8b:66:
                    ed:86:05:ad:51:82:55:8d:ad:72:67:92:8b:ad:9a:
                    84:f5:4c:f4:27:e5:c7:10:86:d1:6a:5e:10:21:e4:
                    73:9d:bc:0c:8d:69:bb:86:19:3d:dd:1b:00:42:6a:
                    67:c4:0b:45:70:48:e6:dd:1f:a5:98:57:70:ee:06:
                    b2:12:2a:db:af:69:c2:3c:3e:b4:3e:73:1e:f4:f0:
                    3e:5c:fe:ae:89:fb:0d:e5:16:8e:b2:72:bb:c3:cb:
                    18:50:08:38:67:50:3f:59:21:f3:c5:84:cf:c6:0d:
                    5a:5f:78:66:fb:7c:22:7a:47:c2:ac:c2:fa:0b:d3:
                    42:c4:77:70:a7:32:c9:d1:ef:79:33:10:dd:25:d9:
                    05:4e:4b:97:55:61:44:d9:49:31:3f:24:81:07:0e:
                    d3:bc:8c:e4:e3:59:4f:57:ef:5d:3b:42:e7:cf:ae:
                    a0:54:54:3b:64:84:37:87:6e:a9:8a:ed:a8:47:bb:
                    9f:fb:47:75:ba:9c:07:4c:7d:94:24:83:6b:2f:e0:
                    54:3f:bc:9f:59:cc:4b:26:b4:ab:de:cf:7d:38:47:
                    b5:0d:e7:53:f2:9a:e5:38:fc:7f:80:22:0f:0e:bf:
                    2e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:8E:70:19:11:9F:43:22:B7:27:C1:B6:16:3F:2A:D5:96:9D:74:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/bf0420e4-60e9-3410-a927-547d55815887.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.156.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:c1:d5:f8:1c:45:a8:90:23:e1:01:12:e8:9a:de:64:bc:c7:
         f9:c3:d4:b8:43:0c:91:f7:ac:17:40:5a:84:47:1c:fd:9d:a5:
         20:5b:bd:bc:9a:06:22:f9:e5:d5:ed:33:c0:dd:45:85:3e:91:
         ca:54:f2:aa:e9:c8:bf:3a:36:9d:39:b1:ff:0f:87:56:4f:3f:
         63:42:c9:5f:0f:6a:7e:91:59:21:28:2e:4d:d6:6b:65:04:84:
         72:f3:ba:37:8e:32:7f:56:e6:96:fa:a9:dd:62:46:3a:35:84:
         50:ff:ab:2d:25:04:a1:bc:ac:29:6d:dd:fa:c9:28:cb:8a:0e:
         e9:4b:53:be:a1:76:76:b7:fd:26:8f:de:cc:5f:d0:af:39:af:
         3e:63:ab:92:4e:e2:e7:43:ba:a2:64:58:f4:b3:4f:17:16:e0:
         93:d0:5a:a7:da:99:60:11:5c:8d:b2:4e:f4:6a:0c:ff:29:c4:
         7a:db:4b:dc:2f:de:ff:ca:2f:cc:22:9b:93:66:a7:db:56:8c:
         aa:bc:af:61:32:12:1d:5b:f3:ca:d4:05:52:fc:cb:cf:e8:c4:
         74:7b:66:70:ca:f1:79:5c:a7:91:55:c3:30:4d:f2:62:0b:50:
         bd:a3:fb:27:ab:bd:ef:b6:fc:32:d3:b1:cb:ee:b3:66:d4:ee:
         10:ef:73:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----