Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/6A42BE2E84E411ECB9573BA55A40D577.roa
File:                     6A42BE2E84E411ECB9573BA55A40D577.roa (raw, json)
Hash identifier:          sURiYJ015UWMz4rbh6ofiTOzPDC16eMl9KjG0baX1qE=
Subject key identifier:   DC:45:7B:8E:2D:57:ED:D8:89:9A:50:B8:3B:CF:C2:14:1A:F3:2C:FB
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       057E
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/6A42BE2E84E411ECB9573BA55A40D577.roa
Signing time:             Thu 03 Feb 2022 11:28:31 +0000
ROA not before:           Thu 03 Feb 2022 11:28:27 +0000
ROA not after:            Fri 03 Feb 2023 11:28:27 +0000
asID:                     210654
IP address blocks:        161.123.4.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1406 (0x57e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Feb  3 11:28:27 2022 GMT
            Not After : Feb  3 11:28:27 2023 GMT
        Subject: CN=61fbbc5f-01bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:a6:04:92:3b:6b:f6:ed:c4:bf:4a:52:36:9e:
                    0d:64:86:c0:c6:4b:ff:c2:69:4d:7e:00:c7:11:f1:
                    69:60:4e:dc:3d:b2:a2:32:03:9c:42:9c:b6:0f:66:
                    4d:55:5f:eb:6b:57:97:7f:ff:e9:4f:1b:ee:4b:98:
                    f3:67:24:c3:56:c1:4f:2d:02:42:76:99:a5:09:0f:
                    b9:c2:b7:38:18:f2:f2:83:d8:77:73:5b:c2:27:a4:
                    48:ce:ab:16:e8:23:6e:f9:ac:d5:61:67:ed:77:43:
                    9f:69:90:8c:c5:0e:ce:2e:8d:2f:d2:de:12:72:7e:
                    e3:c5:f5:e4:d3:3c:27:78:48:17:e5:ee:91:b7:76:
                    ac:43:2f:ba:a5:87:0d:fe:b1:02:12:9e:75:d9:8d:
                    8e:07:dc:8b:12:cf:a9:15:c8:63:c8:b4:cc:05:04:
                    89:8d:b9:85:72:11:ca:c2:84:aa:97:f7:f8:eb:69:
                    97:10:ab:2b:c8:b5:7b:3a:4a:79:8c:ab:b6:d9:79:
                    9e:bd:13:f5:dd:f2:eb:c4:d8:27:d5:29:07:0f:e6:
                    9a:9a:21:d7:81:9e:49:b8:02:90:6f:fb:35:be:5f:
                    77:bc:63:3b:92:71:45:8f:ef:89:fb:eb:a1:19:0c:
                    58:c5:fb:91:03:a7:53:52:c5:d1:64:71:d1:d8:5b:
                    70:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:45:7B:8E:2D:57:ED:D8:89:9A:50:B8:3B:CF:C2:14:1A:F3:2C:FB
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/6A42BE2E84E411ECB9573BA55A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:c3:7a:25:46:c3:47:9f:07:b9:19:50:e3:2c:70:28:1b:25:
         84:44:66:bb:4b:68:5c:c8:2c:34:85:73:98:c0:24:a2:1e:31:
         8a:67:c4:6e:c8:7e:c2:83:15:30:20:80:2f:70:21:4b:82:34:
         89:eb:6f:b8:78:17:ac:87:91:45:79:fe:3b:7c:33:40:0d:86:
         18:3f:86:7c:0e:ea:46:3f:72:fe:3c:66:f8:f0:92:f7:4b:e2:
         6b:e2:ca:8d:e3:59:3c:76:04:64:2e:41:ad:90:aa:d9:57:6b:
         df:08:6e:e3:29:dd:f9:b8:cf:76:5d:c4:83:af:00:27:ec:c5:
         43:f4:e3:35:fa:1e:94:cf:fb:39:26:f8:48:ca:e6:74:5e:2a:
         b7:e9:5d:c0:63:c1:b6:d7:8c:c0:a9:63:b9:9f:37:76:14:08:
         63:af:ce:59:13:83:c6:8e:01:10:ff:af:15:f9:07:94:4f:ad:
         5f:8a:2a:11:2e:ba:a2:00:d7:42:8b:8e:39:f3:74:04:b0:8c:
         34:88:a4:91:0d:d1:7a:61:20:dc:f2:12:3e:84:eb:73:e2:41:
         f0:25:ae:3d:fe:51:fa:be:0a:56:4c:b6:6f:a2:63:3d:44:a0:
         66:8d:9b:20:3d:26:c2:22:a4:13:c5:2d:e0:0b:7b:62:20:e2:
         a1:d6:f9:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:32 2023 by rpki-client on console-ams.rpki-client.org