Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/e39ecf89-2ae2-37f8-8b48-1f7a53610936.roa
File:                     e39ecf89-2ae2-37f8-8b48-1f7a53610936.roa (raw, json)
Hash identifier:          gXovg2WKE/Ay/mNQBrvWQ5akW+KV6CbtGukiBVpQhMs=
Subject key identifier:   1C:B7:0B:D3:6E:9F:6C:BB:56:B2:A3:D5:F5:EC:23:EC:20:99:4F:65
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F432858430A0A742ABAE6A71F5C3572C0
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/e39ecf89-2ae2-37f8-8b48-1f7a53610936.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36040
IP address blocks:        136.22.141.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:0a:74:2a:ba:e6:a7:1f:5c:35:72:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=08b0c74a-0bef-4016-829b-90d5b9469176
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c6:61:d8:0a:59:55:f3:38:98:ac:36:82:a8:
                    93:c0:16:86:56:b2:47:17:dc:48:1f:ae:d6:34:d2:
                    f2:1c:d2:8f:3d:b4:0b:3d:28:d5:ee:53:78:0f:fe:
                    9b:f8:1f:84:88:37:35:50:64:2f:0f:61:c4:9a:5b:
                    03:4b:d4:15:6e:ee:80:15:f4:ac:ba:93:27:8f:af:
                    58:3e:5c:c6:ed:2c:e7:fc:c5:e8:6d:5b:90:aa:13:
                    c5:c9:01:d1:77:1b:e9:4f:43:03:34:6f:96:23:32:
                    46:7f:b3:05:53:db:12:74:f3:b0:20:e5:5b:e1:17:
                    6b:80:95:86:0c:91:43:06:93:ac:08:87:af:71:8c:
                    81:e5:15:e7:42:b6:31:37:8b:56:3a:1f:70:8c:6a:
                    27:8f:9d:87:77:60:98:c4:a8:a8:63:84:4e:c9:dc:
                    91:4e:7f:34:f6:c8:79:a2:a4:f8:f9:f0:c4:3d:3d:
                    60:11:b1:ce:37:25:9f:48:09:76:c6:d7:4c:41:76:
                    26:36:16:b3:9c:9d:07:4c:d0:b5:e7:dd:21:a6:26:
                    99:3b:1c:fd:52:9e:8a:80:0b:9f:08:ba:ae:29:10:
                    59:2f:8b:da:24:33:a7:88:dc:4e:98:25:05:a3:24:
                    80:ab:82:b3:9d:22:5a:87:4d:5b:fa:64:bd:65:df:
                    e6:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:B7:0B:D3:6E:9F:6C:BB:56:B2:A3:D5:F5:EC:23:EC:20:99:4F:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/e39ecf89-2ae2-37f8-8b48-1f7a53610936.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:32:a1:0c:a2:42:43:80:87:34:8f:8d:96:60:ec:87:e9:3c:
         70:ec:00:6b:60:61:0e:22:dd:b5:20:28:a4:14:2e:21:f5:79:
         db:94:0b:e4:33:50:6e:b5:ec:ae:bf:2b:66:cf:c7:f2:3d:1d:
         d8:9f:98:f2:e2:a3:bd:91:47:93:20:6a:d1:34:f5:a3:91:78:
         9c:de:cf:19:fe:58:b1:9d:eb:68:21:e1:24:0c:89:58:27:00:
         23:54:08:4d:16:cd:12:e9:bd:84:1b:bf:3a:38:6c:11:41:08:
         34:48:62:95:f1:4c:8c:fc:8d:3a:a6:12:f9:6e:e5:7f:31:94:
         02:eb:ba:76:f1:13:43:8d:f9:a4:fa:d8:df:90:41:9e:69:4c:
         c2:1a:8c:94:4b:cf:c5:99:92:5e:e8:1d:5a:d6:93:f0:74:f8:
         74:df:12:6e:0d:d4:d5:7e:ad:b8:8a:f3:e9:cf:95:eb:dd:ef:
         2c:7b:dc:39:1e:74:b1:0c:e5:9b:c7:ec:a2:ac:8a:39:56:75:
         7f:c6:9a:15:84:43:1c:e1:21:03:c3:9d:e9:5d:86:d0:cf:42:
         3e:1a:ee:bb:89:32:c7:81:ce:ac:fd:13:2d:1a:d1:88:70:78:
         79:90:64:6f:29:f2:6d:e4:2e:83:ed:27:85:2f:02:07:21:8c:
         0d:0f:39:1a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKCnQquuanH1w1csAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh
ZWEyMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
MDhiMGM3NGEtMGJlZi00MDE2LTgyOWItOTBkNWI5NDY5MTc2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcZh2ApZVfM4mKw2gqiTwBaGVrJHF9xIH67W
NNLyHNKPPbQLPSjV7lN4D/6b+B+EiDc1UGQvD2HEmlsDS9QVbu6AFfSsupMnj69Y
PlzG7Szn/MXobVuQqhPFyQHRdxvpT0MDNG+WIzJGf7MFU9sSdPOwIOVb4RdrgJWG
DJFDBpOsCIevcYyB5RXnQrYxN4tWOh9wjGonj52Hd2CYxKioY4ROydyRTn809sh5
oqT4+fDEPT1gEbHONyWfSAl2xtdMQXYmNhaznJ0HTNC1590hpiaZOxz9Up6KgAuf
CLquKRBZL4vaJDOniNxOmCUFoySAq4KznSJah01b+mS9Zd/m3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBy3C9Nun2y7VrKj1fXsI+wgmU9lMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2
Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvZTM5ZWNmODktMmFlMi0z
N2Y4LThiNDgtMWY3YTUzNjEwOTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4
ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh
YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2
MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBaNMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKQyoQyiQkOAhzSPjZZg7IfpPHDsAGtgYQ4i3bUgKKQULiH1eduUC+Qz
UG617K6/K2bPx/I9HdifmPLio72RR5MgatE09aOReJzezxn+WLGd62gh4SQMiVgn
ACNUCE0WzRLpvYQbvzo4bBFBCDRIYpXxTIz8jTqmEvlu5X8xlALrunbxE0ON+aT6
2N+QQZ5pTMIajJRLz8WZkl7oHVrWk/B0+HTfEm4N1NV+rbiK8+nPlevd7yx73Dke
dLEM5ZvH7KKsijlWdX/GmhWEQxzhIQPDneldhtDPQj4a7ruJMseBzqz9Ey0a0Yhw
eHmQZG8p8m3kLoPtJ4UvAgchjA0PORo=
-----END CERTIFICATE-----