Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/0a0a739d-6685-330c-b1a2-c8eed4e620a3.roa
File:                     0a0a739d-6685-330c-b1a2-c8eed4e620a3.roa (raw, json)
Hash identifier:          j5LtwdXBsqLtUF3BIxdbH8GMw4UEwNkIQZD248izmJ4=
Subject key identifier:   72:8B:D9:04:BA:C3:C7:CB:AE:3B:80:EF:B7:52:46:B2:E6:7B:BF:02
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328583AA79E75BBA6FD4DC04D404F00
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/0a0a739d-6685-330c-b1a2-c8eed4e620a3.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     36492
IP address blocks:        136.23.15.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:9e:75:bb:a6:fd:4d:c0:4d:40:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=bb893529-dacc-491a-b8c3-5a0fa45c2069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9d:95:25:29:fd:79:41:02:b8:2e:5a:09:b2:
                    2c:aa:ec:52:79:9f:c7:22:25:0c:31:35:10:f4:38:
                    09:41:1d:a5:e5:f9:c6:ea:94:40:3c:a9:3c:4b:19:
                    16:a5:62:a2:4a:3e:6f:97:9b:29:d8:6e:18:4b:d0:
                    1f:f6:b1:05:bf:97:1d:ad:95:52:fb:c0:f4:93:fe:
                    32:6d:7f:14:1d:6e:91:a5:d6:46:ad:67:35:fd:16:
                    e9:23:49:0b:7e:78:19:03:59:c1:0d:91:a0:d0:0b:
                    70:6d:73:01:11:3f:42:65:fb:87:3c:e0:16:31:6e:
                    ef:94:f0:7f:fa:70:6e:cd:6c:a5:55:b5:5e:9b:da:
                    8e:27:1d:c2:b6:af:2a:49:80:2c:1f:7a:7e:96:cd:
                    b9:3e:65:d1:c1:be:90:3a:97:d6:fc:da:ba:dd:0c:
                    56:6b:24:c2:a2:1a:a7:15:e5:35:1b:95:4c:59:56:
                    48:fe:8a:0c:75:68:4a:66:ce:22:a8:58:14:b5:f8:
                    8c:27:5d:80:d8:a4:98:2d:bc:2d:b0:e0:09:45:2a:
                    b5:a8:5d:56:fe:92:d8:f4:c0:a2:f0:9e:54:bf:df:
                    76:66:2b:a7:41:90:d2:aa:a8:e4:d2:8f:96:28:66:
                    60:85:62:fa:ef:df:b7:81:b0:ac:1b:e6:d2:4a:c4:
                    aa:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:8B:D9:04:BA:C3:C7:CB:AE:3B:80:EF:B7:52:46:B2:E6:7B:BF:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/0a0a739d-6685-330c-b1a2-c8eed4e620a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:d3:9f:5e:ac:39:26:a2:0f:c2:a4:fc:5a:a6:b2:c7:70:6c:
         a2:ef:cb:d6:b8:ae:ec:b7:87:01:a8:0a:33:65:35:79:70:31:
         a8:52:cb:43:5a:a4:c3:00:0c:04:c7:5c:97:38:17:dc:29:2a:
         70:d4:30:14:05:54:e0:b1:41:e9:f8:be:16:d7:f9:15:e6:39:
         f5:ff:21:fe:f9:50:75:92:30:74:13:1b:c9:20:ed:44:f5:19:
         54:ca:65:cb:21:0d:43:e2:5e:5d:31:05:b8:52:82:4a:47:e5:
         c3:17:85:d6:36:c1:9c:02:fb:cc:e5:9d:6a:b5:40:aa:1c:d2:
         2c:6d:16:f5:f8:bb:94:0c:33:77:08:1b:9e:ef:55:eb:09:9d:
         ea:da:10:89:ed:9d:cd:69:3d:9a:85:46:a6:42:d7:0d:1e:1d:
         37:bc:b2:8d:5f:ea:ca:3f:fc:fd:77:af:24:95:fc:e6:14:40:
         14:b5:cf:fb:60:07:c6:1b:31:5d:fd:d4:9b:68:50:04:b4:56:
         57:1d:66:f1:94:c0:61:db:b9:83:a7:61:c0:1e:af:16:3f:bf:
         b4:1b:ac:d9:df:4c:04:d8:a0:a6:83:4d:d0:83:04:43:2c:49:
         11:9b:88:12:70:07:9e:61:24:a8:c3:62:e9:91:10:9a:20:0d:
         be:6c:99:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:47 2023 by rpki-client on console-fra.rpki-client.org