Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/e2d0bc9a-4dc8-3a00-8ee5-09530471ce39.roa
File:                     e2d0bc9a-4dc8-3a00-8ee5-09530471ce39.roa (raw, json)
Hash identifier:          m2Firz0SRdG8JAXvBM5a1sS1/ikT6QNTZXasrQD9BaA=
Subject key identifier:   6E:7F:1A:65:66:00:D4:D4:D9:B2:1F:83:94:25:7E:C1:CA:34:08:F6
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328583AA7B7372C93DD10DCCBEC2140
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/e2d0bc9a-4dc8-3a00-8ee5-09530471ce39.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     36492
IP address blocks:        136.23.20.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:b7:37:2c:93:dd:10:dc:cb:ec:21:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=dab1e369-4a2d-4576-bc4c-a4e528badf47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:19:dd:9e:fb:02:8c:28:87:3b:49:d9:58:20:
                    c9:18:85:71:ea:17:6e:d7:e6:59:48:9d:f4:8f:ee:
                    cd:f7:23:df:57:da:57:81:63:e9:cc:02:ad:54:9c:
                    04:d5:20:f5:a3:37:fa:07:52:b0:61:56:08:11:3e:
                    12:7d:bf:01:bb:9a:f2:1d:4b:9f:60:ff:22:df:7d:
                    9a:73:8d:e0:58:c3:0b:7e:e7:90:8a:fa:33:29:8e:
                    43:f7:df:04:e3:8b:80:a7:7c:f2:fd:4c:ab:f8:96:
                    d3:d4:9b:a7:39:b2:89:5b:99:14:79:4b:91:ad:89:
                    45:c9:e7:c8:c8:3d:76:12:ed:ce:d0:2f:35:4f:c8:
                    1d:25:30:82:9d:d8:5b:43:d1:1a:c6:70:ab:f3:54:
                    37:a5:1a:61:47:20:44:95:ca:10:0a:c9:c0:4f:95:
                    3f:46:dd:4b:d8:e3:4a:2c:50:69:27:ef:86:02:19:
                    b3:cd:1d:13:d6:ce:aa:76:a8:e7:1b:cd:c4:56:56:
                    ad:7b:b8:cf:f9:af:cc:e6:c8:7e:08:3f:93:91:03:
                    89:df:18:12:b8:b9:11:1c:0f:3b:6e:4e:a7:a4:10:
                    cf:be:6a:95:c9:4b:3c:d2:36:28:93:87:20:f3:15:
                    05:56:c4:f0:56:c3:25:a1:4b:52:f3:a3:01:93:9b:
                    d3:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:7F:1A:65:66:00:D4:D4:D9:B2:1F:83:94:25:7E:C1:CA:34:08:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/e2d0bc9a-4dc8-3a00-8ee5-09530471ce39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.20.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c9:59:a4:0a:6c:1d:5f:71:6c:bd:2e:6c:87:e3:92:ca:58:70:
         55:46:df:8e:63:c4:13:02:05:88:7f:14:9d:1b:64:c6:70:03:
         16:78:28:a9:c6:ad:ab:72:d5:e8:18:9d:57:13:bf:de:86:fc:
         32:fa:e6:06:f7:a0:c5:dc:17:10:21:78:3a:d1:8e:28:fa:52:
         04:7a:a5:38:5f:28:43:4d:b7:de:37:20:6d:c5:8c:38:49:ad:
         0b:e3:f5:7e:43:74:b7:85:df:9a:25:23:de:70:eb:ca:d7:3f:
         d0:92:08:33:ab:2b:cf:ae:34:92:d2:e0:4c:0a:07:7c:92:04:
         93:33:1d:4c:fc:05:55:6b:d4:83:0b:24:9d:48:d7:fc:37:a9:
         61:99:b5:0d:82:15:96:34:61:62:ff:10:78:47:9f:3f:7f:d8:
         8f:dd:84:56:e0:c3:36:0e:f4:79:26:de:86:3f:ba:b3:81:e9:
         e3:a2:99:97:9e:b4:1a:5e:e1:31:8c:66:af:69:b5:c2:de:2e:
         61:1f:ab:4b:12:54:87:11:cb:7d:e1:82:ba:4d:b3:96:15:ca:
         34:f7:98:87:73:c5:ff:77:11:df:82:12:65:ee:d9:d1:93:86:
         9d:b6:61:fc:7d:fb:f9:52:90:81:32:b8:d6:c8:91:4b:28:f9:
         17:1c:59:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----