Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/18C5A012E5E111ECADD2B0A2F1222468.roa
File:                     18C5A012E5E111ECADD2B0A2F1222468.roa (raw, json)
Hash identifier:          JNO+pSS56iAnDP9Gyt1DtWgeXWk4vFt8NAAIuFDnlRU=
Subject key identifier:   9E:9B:E7:FA:36:95:13:65:05:87:56:00:53:E4:1F:60:3B:78:9F:60
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       0748
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/18C5A012E5E111ECADD2B0A2F1222468.roa
Signing time:             Mon 06 Jun 2022 21:39:09 +0000
ROA not before:           Mon 06 Jun 2022 21:39:05 +0000
ROA not after:            Tue 06 Jun 2023 21:39:05 +0000
asID:                     203999
IP address blocks:        161.123.62.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1864 (0x748)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Jun  6 21:39:05 2022 GMT
            Not After : Jun  6 21:39:05 2023 GMT
        Subject: CN=629e73fd-3c20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:60:1b:a7:76:87:2e:f5:76:48:fe:3e:29:db:
                    e7:3b:1a:db:be:96:b5:11:35:cb:20:9c:72:35:31:
                    d9:9c:35:ab:78:0c:d6:2d:8d:d6:aa:62:3e:09:f8:
                    b2:1c:0d:86:98:e6:0e:e7:de:b9:39:25:c3:f2:dd:
                    97:48:3d:0d:db:cc:84:a1:94:57:a8:2a:33:e3:5d:
                    cf:11:c6:aa:9b:cf:e6:fb:d3:6a:be:00:43:a4:08:
                    b0:a2:11:f3:5f:c1:77:af:3b:61:5f:55:d2:a4:66:
                    bf:88:51:1e:ba:aa:1a:d1:9d:e2:78:a1:25:09:c3:
                    b0:e0:c0:39:79:ae:ba:1a:78:cd:e4:cc:09:88:a9:
                    91:cb:55:3e:28:54:cf:2d:ad:c6:d6:65:0f:ab:a7:
                    6f:2c:fc:78:12:1a:97:cb:09:fc:1f:2e:41:28:d4:
                    d5:91:90:68:de:cd:b2:db:d1:7b:eb:56:d4:7e:fc:
                    83:03:d4:08:54:73:20:88:8e:09:ae:82:16:52:15:
                    76:30:97:94:d1:af:7b:4b:22:24:71:f5:1d:69:ff:
                    c8:22:14:5a:17:15:a1:6f:db:d4:ab:ad:78:4d:16:
                    95:a9:4d:4f:8c:1a:ea:7a:ad:8e:63:a0:fa:38:a3:
                    47:eb:72:52:d8:38:6e:9b:a9:43:f1:2b:f7:89:60:
                    07:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:9B:E7:FA:36:95:13:65:05:87:56:00:53:E4:1F:60:3B:78:9F:60
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/18C5A012E5E111ECADD2B0A2F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:d2:db:a2:4a:5a:a5:cb:38:3b:57:0f:c8:c4:19:40:64:5c:
         ec:ec:1a:aa:6b:20:c9:0b:b7:36:c6:af:20:85:a9:d3:d0:52:
         b3:71:5e:12:7a:28:36:58:81:1b:7b:ed:e6:36:da:92:fd:23:
         e0:df:07:76:7f:65:77:c7:c4:bb:22:62:39:1e:2b:1a:44:3e:
         f5:19:c4:74:52:2d:c1:44:4f:8a:1a:05:bf:ba:9e:0f:17:5e:
         d3:62:14:9c:de:9d:34:e0:43:bc:fe:ce:43:66:a9:71:ec:21:
         d9:b1:d4:f1:e3:e6:5d:db:1c:54:2c:15:47:ce:b7:ec:43:50:
         2a:2f:57:19:ac:cc:1f:c9:29:c0:6a:53:41:ae:87:9f:06:f8:
         8d:58:b6:fa:b4:6e:6c:30:b5:eb:6f:36:6a:56:65:8a:d4:38:
         25:a4:6d:09:3a:78:46:a2:33:d0:79:a8:33:fa:76:a7:67:34:
         64:b0:87:eb:b1:df:4a:78:80:c1:78:53:a6:47:c5:71:57:e7:
         36:9e:40:8d:d3:ee:2f:f4:b2:dc:b7:cb:43:98:d4:99:4e:6b:
         27:e7:2d:34:83:be:cb:09:e4:23:a7:04:3f:86:23:ad:57:5c:
         98:2e:4f:cc:1b:46:cd:1f:d6:8c:bb:28:b1:1d:2a:dd:ac:e0:
         b9:d6:21:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:34 2023 by rpki-client on console-fra.rpki-client.org