Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/b8e570c0-a33f-3040-a77f-cec7ad8dd3aa.roa
File:                     b8e570c0-a33f-3040-a77f-cec7ad8dd3aa.roa (raw, json)
Hash identifier:          zSexW/czxw197h+m1DcUiKkh/+RGsq86cn9rEA/hj/E=
Subject key identifier:   13:AA:43:2C:5F:09:A7:1A:53:BD:57:02:33:AD:01:40:B5:5C:DF:65
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328583AA7B104C98BB5E7250D75BC40
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/b8e570c0-a33f-3040-a77f-cec7ad8dd3aa.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     36492
IP address blocks:        136.23.0.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:b1:04:c9:8b:b5:e7:25:0d:75:bc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=6eb99b96-8fd9-477c-8f33-086d56f09b32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:91:f1:e7:54:2a:f5:c5:4e:1a:d2:8d:92:b5:
                    75:34:29:45:fe:8b:24:18:16:76:58:23:84:a6:63:
                    df:25:12:d3:c7:d3:94:0a:59:ba:e2:97:f6:13:a7:
                    f1:2b:85:9a:14:6a:37:80:fe:ba:ce:a9:27:23:f7:
                    d3:7f:47:45:91:64:63:a8:b2:c7:4e:6a:7f:c7:3a:
                    d3:22:ee:f3:08:8b:f0:00:4d:c6:01:f2:73:21:cd:
                    a3:ac:c9:ea:05:1b:f9:2a:9f:53:bc:29:53:be:15:
                    14:2e:69:bc:e8:e8:db:de:1c:4a:fa:5b:76:f0:10:
                    f7:c4:ff:5a:90:a1:28:1d:a9:3c:f6:22:b9:c6:b1:
                    97:41:d5:8c:59:82:6e:79:78:f9:ff:38:5b:5b:83:
                    fb:e6:ed:e1:f1:d5:74:19:1c:2d:83:f1:29:94:dd:
                    bd:cf:3d:3d:d6:b7:b5:ee:bc:9d:20:f3:89:dd:6f:
                    a3:17:c2:53:17:e3:c6:4e:ff:ba:2a:8b:06:39:1f:
                    ff:b4:18:5d:88:bc:1c:f7:4d:75:cf:18:62:a2:d8:
                    b1:88:cc:68:51:c9:49:e3:85:88:22:8a:31:c4:cc:
                    f5:bd:dd:b6:8c:60:8a:b0:7c:9a:97:73:6c:2d:4e:
                    53:6c:1a:c1:b6:18:93:47:d1:cb:81:27:71:99:b1:
                    be:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:AA:43:2C:5F:09:A7:1A:53:BD:57:02:33:AD:01:40:B5:5C:DF:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/b8e570c0-a33f-3040-a77f-cec7ad8dd3aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:f3:9e:c2:f9:c0:9d:5f:0a:b1:1c:ff:de:57:47:80:0c:d3:
         68:8f:52:92:56:dd:7b:0d:d7:e6:33:bd:18:a8:83:c5:77:cb:
         f9:d3:94:ca:6a:e6:6b:c5:b3:7e:60:73:2b:ed:53:86:04:28:
         f4:d1:dd:48:0c:35:9d:53:8f:d1:6f:38:0b:0f:e0:58:ff:01:
         4b:ac:6f:ef:2f:18:e1:de:7c:a4:ef:39:d8:68:70:73:8b:e9:
         3b:08:f9:67:e6:bf:9f:2d:f1:18:fe:7f:fb:d8:41:aa:f0:2e:
         ad:6f:4b:5c:38:16:73:36:5a:68:6d:9e:23:2c:ed:71:fd:f5:
         06:1f:8d:ee:8e:8b:0f:33:50:9a:af:66:ff:6c:6b:85:39:f7:
         e6:ee:f8:22:92:1d:77:99:83:2a:53:9e:f2:13:58:05:66:41:
         e1:e2:60:d1:f2:45:fa:0e:05:bf:ff:08:5a:b0:b1:92:f6:d2:
         17:09:95:4f:fb:ae:bd:a6:92:a4:1f:a0:cc:ca:44:e5:a7:a4:
         ed:c8:1d:f0:94:96:03:21:f5:71:42:e2:e2:8d:26:7c:3c:53:
         74:37:13:9d:27:ae:d5:98:c4:b6:58:07:f9:f4:0d:97:23:38:
         ae:cd:97:2d:a3:36:1a:75:94:15:11:6f:7e:46:b1:01:d0:b1:
         a2:0b:8d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----