Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/edd50f04-2f91-36b2-bb77-5324a890dfc7.roa
File:                     edd50f04-2f91-36b2-bb77-5324a890dfc7.roa (raw, json)
Hash identifier:          SLm/usDa50Ogyg34Jl4cmL9Y001p9oJGl3FYcHQbUf8=
Subject key identifier:   6E:81:DC:6A:AF:93:7B:DB:B9:BA:3E:12:DA:22:E7:CB:57:FC:5E:A6
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F4328583AA7B7708EF5E46DD1C1839000
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/edd50f04-2f91-36b2-bb77-5324a890dfc7.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     36040
IP address blocks:        136.22.144.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:b7:70:8e:f5:e4:6d:d1:c1:83:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=795ae15d-ad34-499c-9914-3b1fb8f4882e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:83:3d:9a:85:7e:c9:04:fd:3e:2e:7e:c6:c8:
                    bf:fd:d4:75:8e:b5:d3:49:1b:df:a2:4f:4c:90:3d:
                    69:27:0d:9e:61:3b:e9:26:61:c5:29:57:de:fa:36:
                    de:41:03:5b:93:2d:10:6c:5b:5f:f5:23:2b:72:0f:
                    78:d4:9b:fe:00:76:45:99:fa:08:96:b4:ce:5f:3b:
                    94:6e:63:27:67:33:15:25:59:d1:f6:e6:db:02:63:
                    d8:7e:4a:7e:e7:25:75:0e:38:1c:93:93:9e:ce:7a:
                    23:1d:c8:2a:82:bd:f0:ab:40:dd:bc:d4:47:5b:7f:
                    1f:77:e6:6d:84:1d:f1:14:e0:1c:2b:a2:df:e1:eb:
                    55:e2:c5:05:9e:45:95:de:a8:8a:92:da:a4:b3:6e:
                    2f:44:5e:11:44:d0:01:c3:c5:5e:1b:14:c2:69:2f:
                    9b:c6:a4:9f:34:44:32:1e:c8:3c:a8:d8:9b:fe:33:
                    db:10:77:63:62:b0:9d:43:bb:8e:92:94:2b:17:ff:
                    d5:26:fb:ce:c2:74:e2:99:a0:c8:76:95:a0:db:8a:
                    eb:96:c4:a0:fc:c4:58:ba:a0:73:77:7f:3d:5b:11:
                    cc:87:ae:ab:5f:55:8c:c4:fe:9e:c7:a4:fd:be:ec:
                    f6:60:5c:37:2c:d9:c9:1b:14:f5:63:f3:40:91:00:
                    d7:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:81:DC:6A:AF:93:7B:DB:B9:BA:3E:12:DA:22:E7:CB:57:FC:5E:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/edd50f04-2f91-36b2-bb77-5324a890dfc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:ca:fb:bf:cd:5c:da:3f:ec:52:17:b0:45:cb:af:b9:19:57:
         a3:8b:d2:5f:10:e4:63:1e:36:85:73:6e:16:85:6c:ea:5e:cc:
         d0:fa:5b:40:52:6e:68:82:e3:ee:e8:4d:ab:cd:3d:24:56:1f:
         e8:ae:ba:98:9b:11:63:14:bf:e5:3e:ab:0c:1d:b1:50:01:11:
         fb:f6:10:12:19:e1:e2:66:ea:9d:3b:52:75:5c:52:03:3e:7c:
         8d:c4:ac:0e:75:cb:41:22:3e:80:ef:73:2f:7f:ea:a6:c3:88:
         c9:0e:cb:2a:1b:e0:e4:df:b4:e9:3d:27:41:9d:2a:42:26:12:
         4f:e0:d6:b1:8a:21:f6:fc:88:b3:db:ec:0e:08:dc:b9:c7:1a:
         4b:84:67:f7:10:b6:c5:75:7f:4f:f1:7c:62:9f:70:e0:20:59:
         d6:2e:f3:dc:ec:f1:b0:c9:ac:5e:03:b3:f7:8e:bd:b3:8d:91:
         b4:03:22:f8:75:dc:53:eb:31:62:58:44:1d:8f:e4:d3:33:ad:
         63:90:79:7b:76:b0:30:de:65:3f:09:e6:10:6b:39:f9:25:41:
         d6:76:ab:fa:3a:75:8e:90:fa:03:78:e8:a4:94:77:96:05:8a:
         0e:16:b1:56:83:4e:10:74:3f:c9:de:fe:78:73:a6:de:9e:ea:
         3b:8e:bc:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----