Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/6117CC32327211EC8381436AD8A014CE.roa
File:                     6117CC32327211EC8381436AD8A014CE.roa (raw, json)
Hash identifier:          jaTVRs5MIWxadRn5fZ66my+OofKCtYMKEGi1PgOHK48=
Subject key identifier:   F5:71:84:29:BD:82:61:C4:C3:C0:76:A8:17:84:CE:BF:8D:67:22:3F
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       01D6
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/6117CC32327211EC8381436AD8A014CE.roa
Signing time:             Thu 21 Oct 2021 13:25:38 +0000
ROA not before:           Thu 21 Oct 2021 13:25:34 +0000
ROA not after:            Fri 21 Oct 2022 13:25:34 +0000
asID:                     60458
IP address blocks:        161.123.162.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 470 (0x1d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Oct 21 13:25:34 2021 GMT
            Not After : Oct 21 13:25:34 2022 GMT
        Subject: CN=61716a52-a666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:4b:b7:bb:65:01:6e:06:a7:ae:f9:80:fd:9b:
                    3f:f2:16:a7:57:e2:60:08:6f:6b:a8:c8:d2:1f:bc:
                    1b:fa:ff:f0:f7:cc:c0:f9:38:d0:ec:03:49:80:34:
                    79:c4:ca:20:e5:7f:94:a1:cc:f6:c2:a2:2d:69:d6:
                    e4:f7:b3:73:bc:06:8f:41:4d:00:69:e5:43:1e:84:
                    41:45:f0:e7:3b:11:0a:11:06:76:ac:21:42:5e:9a:
                    0d:6e:f2:a9:3f:96:16:64:a6:b6:6d:81:ab:ee:28:
                    8a:6f:f4:50:d5:7e:94:61:4b:eb:a3:d2:9c:63:20:
                    f5:e9:93:b5:ca:a1:38:fc:89:ee:4c:28:92:2c:3f:
                    09:3d:8c:fb:41:8b:2f:e9:ba:6c:1a:19:1d:53:62:
                    00:3a:ed:ae:07:76:8c:89:8a:78:6a:5d:dc:45:92:
                    e5:c5:3d:56:aa:fe:1e:71:0b:09:11:53:1a:11:20:
                    8e:d0:aa:07:8f:3d:93:48:f5:6a:61:7e:71:03:7e:
                    66:d0:34:e0:66:f5:d7:a4:ae:16:c8:03:b4:b0:c8:
                    61:eb:65:24:aa:9f:ae:f0:eb:ea:f4:b3:ee:db:b8:
                    d9:65:8f:d2:ce:96:e6:63:96:e7:ca:fb:df:93:87:
                    48:54:d7:ce:fd:83:5b:7b:0c:66:94:d3:04:f6:42:
                    49:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:71:84:29:BD:82:61:C4:C3:C0:76:A8:17:84:CE:BF:8D:67:22:3F
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/6117CC32327211EC8381436AD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:89:61:8c:63:93:c4:6a:3f:6e:4d:90:d2:aa:88:20:a4:22:
         68:b3:5e:bb:00:32:ab:24:e0:8b:c0:d6:52:1a:8a:5a:15:cd:
         e0:8a:d2:9c:f7:ad:c2:90:ae:92:55:65:38:bc:91:69:53:8a:
         67:a6:8f:16:3e:78:74:07:f4:85:60:6e:07:d7:47:e5:ef:54:
         93:9c:95:14:1a:64:c9:14:41:7e:1d:6e:c3:e7:fe:8d:5c:4d:
         07:81:35:38:c1:49:2b:e4:ac:e6:77:62:c1:a4:55:43:f1:24:
         11:45:0f:47:3e:ae:f4:79:af:9d:c5:3d:b1:82:c8:bc:e1:49:
         de:f0:6f:4a:a9:30:cb:d4:33:d1:ca:17:bc:2e:9e:a4:92:ab:
         7c:fe:40:a5:b5:d8:28:f2:52:5e:f3:15:6d:30:78:fd:af:6e:
         bd:40:fd:48:09:2e:ed:5a:9a:27:9e:e3:aa:d0:44:e1:26:03:
         4d:1a:e7:fd:7e:2f:43:7a:28:6f:f9:1c:ac:f3:9e:0e:2b:62:
         16:19:fe:92:51:b8:2b:f7:92:e0:e6:9f:5f:f4:6b:c1:35:c2:
         f5:1a:ae:ce:74:30:fa:be:0e:8e:98:73:b7:56:6d:33:c8:e7:
         fa:87:2e:c5:94:c4:35:04:d6:6f:25:d2:f8:2c:93:3c:a4:86:
         02:a2:68:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:34 2023 by rpki-client on console-fra.rpki-client.org