Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/7d9a1f5b-7def-3210-ab51-6ea3a7ad2f17.roa
File:                     7d9a1f5b-7def-3210-ab51-6ea3a7ad2f17.roa (raw, json)
Hash identifier:          IaQ/qsLSlMz6GcmHRnjqaVvxUzTNX1ESLd9jIgKld1Y=
Subject key identifier:   06:C0:AC:E4:0F:91:52:9F:67:7A:53:EF:AD:D7:30:7A:02:06:C4:04
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328583AA7A77BAE44923BCDAA4D9580
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/7d9a1f5b-7def-3210-ab51-6ea3a7ad2f17.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     36492
IP address blocks:        136.23.0.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:a7:7b:ae:44:92:3b:cd:aa:4d:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=fd1a4009-e8be-437c-bae1-8585a56f6504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:40:cf:9b:fc:93:9b:fb:58:f9:5a:b2:32:89:
                    23:9c:9a:ff:ea:a4:ef:b9:f3:4d:3f:02:21:fa:63:
                    1e:76:62:c1:88:f6:82:cc:14:5c:d0:c2:72:86:e2:
                    43:98:27:66:09:c4:a6:6c:86:8f:bd:fb:4d:f1:dd:
                    99:dc:fd:59:5c:90:23:f1:98:b2:65:83:1b:31:f3:
                    61:e0:4e:69:f6:be:41:c9:a9:a5:5e:74:8d:ac:3d:
                    47:dc:52:65:07:77:3f:cd:90:bd:85:10:03:11:39:
                    aa:03:f3:2b:b9:e2:d3:39:0c:5c:42:b1:a4:b6:d9:
                    cd:da:81:43:09:16:48:76:9c:7a:92:97:a3:46:0c:
                    62:16:8a:4a:f7:ac:0c:ea:81:1e:48:76:dd:ef:41:
                    f1:03:13:b1:c3:a5:d9:ef:18:d2:48:03:9a:b5:30:
                    ae:7a:34:99:30:aa:e0:a3:55:9b:b9:03:14:58:e6:
                    b9:8d:4b:5e:09:be:5a:14:bf:b8:d2:5d:e1:cb:f4:
                    9e:ef:e6:83:2a:90:f2:82:33:51:ab:6b:58:2e:8a:
                    c5:f4:c4:3e:4e:cc:02:0b:41:2e:c5:00:07:2a:fb:
                    4b:bc:89:73:f1:f5:8b:27:ff:03:3c:07:8b:1b:6b:
                    e5:84:4a:94:1b:ce:fb:09:54:ed:25:3f:85:e0:fa:
                    4a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:C0:AC:E4:0F:91:52:9F:67:7A:53:EF:AD:D7:30:7A:02:06:C4:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/7d9a1f5b-7def-3210-ab51-6ea3a7ad2f17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:bd:a0:34:a9:22:53:7a:ef:dd:1e:3d:c4:03:86:0e:57:08:
         35:2a:78:3d:de:ff:86:59:95:d7:68:d3:3d:16:55:6a:3a:26:
         19:3a:84:50:ff:7a:52:3c:ba:6d:e1:1f:57:79:50:06:97:d9:
         56:ed:e5:a3:18:b9:71:74:ea:5f:c0:9a:5a:71:b2:36:2c:10:
         89:4c:31:44:95:f3:53:1d:63:47:f8:59:a2:15:bf:65:5c:e6:
         a7:95:5e:e3:d4:21:bb:5e:04:1d:95:a8:fa:a5:ba:80:32:a0:
         9d:24:7f:1d:69:b8:61:af:d0:ef:a2:9c:17:a8:1f:6e:3f:87:
         0a:8b:75:34:8b:55:97:da:e1:7a:b9:d7:66:2e:f4:ee:31:59:
         8a:17:29:3e:13:d8:72:37:3b:7c:32:71:d8:a4:ab:b2:60:a2:
         4a:3e:d8:a3:b1:59:33:af:6a:b7:b8:a7:1d:d6:4f:87:b2:de:
         ee:fc:d7:97:df:17:ed:55:71:7d:4e:c7:4a:cd:0a:da:05:da:
         74:d9:8c:ab:73:50:ca:8f:b5:fd:a3:1c:d4:30:20:55:df:64:
         0b:6f:4f:31:e8:d2:aa:61:78:67:84:8e:b1:84:50:8f:c1:d0:
         dd:a1:e5:ce:45:86:bb:13:7c:25:18:4f:4e:89:f1:32:2d:8d:
         13:62:db:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:47 2023 by rpki-client on console-fra.rpki-client.org