Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/748C6040B5E211ECBB9FE6835A40D577.roa
File:                     748C6040B5E211ECBB9FE6835A40D577.roa (raw, json)
Hash identifier:          w8S/nW+Kk291mMcs7SKjKK13m5A4XpA/f9uGcNKhCOQ=
Subject key identifier:   83:A6:1D:64:2E:C4:2E:6C:AC:84:B3:A7:AF:AF:C4:15:C1:BA:02:BD
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       0646
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/748C6040B5E211ECBB9FE6835A40D577.roa
Signing time:             Wed 06 Apr 2022 19:47:56 +0000
ROA not before:           Wed 06 Apr 2022 19:47:52 +0000
ROA not after:            Fri 08 Apr 2022 19:47:52 +0000
asID:                     1239
IP address blocks:        161.123.54.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1606 (0x646)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Apr  6 19:47:52 2022 GMT
            Not After : Apr  8 19:47:52 2022 GMT
        Subject: CN=624dee6c-a1f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e3:87:85:15:f3:9e:9e:4f:61:f2:da:36:30:
                    81:d1:bd:f6:7e:85:de:b7:57:4c:71:fd:c8:0e:96:
                    a8:35:28:ea:47:df:b9:32:87:ca:21:cb:ba:78:55:
                    9c:7b:25:58:b1:e5:56:b9:b3:a5:3a:87:66:a4:9c:
                    67:04:cd:da:21:de:93:05:88:af:14:bc:10:15:72:
                    80:6b:1d:e7:e4:c9:fc:1a:b5:ee:6b:c2:0d:40:ba:
                    e0:82:fe:ca:89:d2:29:a7:b6:1f:99:cf:29:43:85:
                    31:11:a7:b4:dd:c9:97:cc:3b:79:90:c1:14:7e:35:
                    a2:89:cd:3e:65:31:68:1b:4a:1b:d4:a8:e3:cc:23:
                    a3:d6:f6:59:84:5c:b0:7b:7e:a4:eb:33:fc:ec:92:
                    87:ca:13:32:b1:7d:da:c1:a3:2c:49:52:69:7b:3e:
                    7b:42:03:9d:0d:6e:1a:55:b8:dd:61:42:ff:f5:f0:
                    36:e1:92:2d:ba:a9:f2:f7:f4:8e:1d:f6:51:4f:ae:
                    a9:65:24:de:3b:e9:e7:d8:1a:9f:32:81:94:8f:6f:
                    f2:0c:34:ce:b4:14:c3:69:54:88:3b:af:48:6c:09:
                    48:6b:06:5c:a0:b3:b5:dd:81:e7:ed:81:98:bd:93:
                    22:32:20:c9:d3:aa:3c:df:99:2d:1d:fe:4e:97:a7:
                    d3:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:A6:1D:64:2E:C4:2E:6C:AC:84:B3:A7:AF:AF:C4:15:C1:BA:02:BD
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/748C6040B5E211ECBB9FE6835A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:f5:d7:6c:36:1d:c4:88:2f:9e:fa:32:b1:a0:29:5a:f8:2c:
         2f:a8:11:c9:14:17:ad:a3:1e:d6:68:24:14:80:f9:23:a4:58:
         cf:cb:3e:95:11:2a:89:e9:e3:de:f1:06:c9:ae:2c:b4:da:67:
         b5:64:71:28:de:d0:47:62:70:d3:e6:33:02:85:f1:35:73:ed:
         0c:32:4d:a4:96:ad:a0:34:e0:ee:2d:ee:0b:50:ac:4e:ef:2e:
         d3:c2:61:d7:50:c7:f9:22:a2:3b:6b:78:79:6f:ca:5e:2d:33:
         97:40:28:0a:0c:c7:9a:77:e0:fb:a3:69:28:c6:ad:39:1a:29:
         fc:a6:95:1b:f2:39:23:d2:fd:49:7c:33:52:1e:b7:b7:37:5b:
         8f:d1:bc:65:26:6e:7d:c4:4a:e5:e3:2d:fc:cf:be:5c:7e:eb:
         99:89:2e:10:e1:fe:30:f7:db:a3:6c:c4:5f:f1:59:68:5b:5b:
         50:3f:9b:e6:7f:f6:93:4a:b1:7d:65:4c:5a:f1:b6:90:94:a7:
         59:2f:4d:51:2c:45:b5:af:f9:b2:5c:ca:7c:54:5b:bd:c9:70:
         65:7f:b7:80:57:63:83:3f:ed:b5:52:3e:e2:ad:32:15:22:18:
         fc:12:ce:c5:cf:ad:f4:3d:55:35:90:c2:43:2d:51:7e:99:91:
         bf:81:50:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:32 2023 by rpki-client on console-ams.rpki-client.org