Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/86AA411895F611ECA22CCDCC5A40D577.roa
File:                     86AA411895F611ECA22CCDCC5A40D577.roa (raw, json)
Hash identifier:          V67dJn/zPfIQ9FXloRg20QZ1wV0Cp3MasF8SC5h65lQ=
Subject key identifier:   98:7C:DF:6A:F1:13:56:92:64:08:05:DE:94:94:24:A4:21:0D:2F:E5
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       05E5
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/86AA411895F611ECA22CCDCC5A40D577.roa
Signing time:             Fri 25 Feb 2022 04:50:59 +0000
ROA not before:           Fri 25 Feb 2022 04:50:56 +0000
ROA not after:            Sat 25 Feb 2023 04:50:56 +0000
asID:                     327790
IP address blocks:        161.123.234.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1509 (0x5e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Feb 25 04:50:56 2022 GMT
            Not After : Feb 25 04:50:56 2023 GMT
        Subject: CN=62186033-7934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:0a:4a:a3:ab:f6:ef:47:9a:97:c3:c6:41:d5:
                    57:68:ec:1e:a2:cf:22:ce:8f:06:d1:5f:e5:ec:5b:
                    be:0f:70:09:f5:5d:d6:d0:d6:bb:59:45:88:e4:7b:
                    dd:e5:3c:39:26:9b:6a:83:3b:3f:1d:ea:82:47:78:
                    00:50:9c:cf:1a:3e:4a:e8:70:22:0f:d9:82:4f:ed:
                    40:15:3a:16:12:38:90:75:35:e9:60:36:8d:0d:dd:
                    fc:e4:c8:91:27:81:78:07:f2:91:0f:a2:7a:48:5b:
                    c5:cf:fc:46:c8:93:a3:c3:08:9c:85:9e:b6:39:c0:
                    81:cd:ef:d1:49:1d:42:2f:e3:ec:f9:9c:75:4e:9d:
                    9f:35:f4:3a:bc:b9:e9:67:cc:05:f4:37:40:0a:44:
                    72:a3:cc:4e:1c:b2:ff:c4:40:7d:36:2f:ca:cb:8d:
                    65:d9:5e:28:56:f9:bd:8a:f5:a4:bf:a7:e2:60:d3:
                    dc:87:30:7f:cb:4d:61:37:ea:18:bd:7a:a3:6e:49:
                    d3:a6:c5:37:b7:30:eb:92:2e:d1:b0:53:df:f6:b8:
                    fb:ca:6e:ff:a0:f0:ca:26:27:ac:ed:69:0d:34:4f:
                    73:00:f7:f8:11:78:1d:d7:df:6a:d2:ad:51:ae:4c:
                    14:d1:f0:06:49:69:e9:a6:83:ae:da:8a:d9:07:e9:
                    dc:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:7C:DF:6A:F1:13:56:92:64:08:05:DE:94:94:24:A4:21:0D:2F:E5
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/86AA411895F611ECA22CCDCC5A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:3c:52:da:3a:27:3d:40:1e:80:b8:14:19:cf:69:fd:6d:01:
         9b:18:b3:6f:f5:94:94:b0:59:f5:cb:e6:2f:21:42:94:08:92:
         93:ab:74:4a:17:aa:e9:ea:de:67:90:d4:ac:12:f5:d0:a8:00:
         c4:f0:72:5d:a4:48:87:be:e9:f8:d4:5d:b2:67:f5:68:70:68:
         c6:23:51:9b:09:28:98:45:8a:5d:60:cf:5c:3f:f4:d1:cd:32:
         65:8f:22:e8:bc:b5:5c:47:11:8f:cf:1d:51:38:7d:61:58:ce:
         7d:c8:10:7e:df:24:61:07:f0:90:c7:71:40:c7:73:8c:d3:f2:
         75:92:a9:25:7f:34:b6:02:ea:83:c2:f1:15:6b:6a:a8:7b:96:
         08:ce:a3:86:c0:e2:61:d6:cb:aa:36:cc:cc:3c:96:28:8a:e0:
         7b:0d:98:5e:c8:3e:4c:e4:f6:71:cc:8c:82:b3:8d:3d:09:dc:
         29:ec:f7:11:2b:17:a5:0a:80:50:6f:83:1d:3f:6a:2e:a7:03:
         85:c7:0f:a9:51:34:7e:46:26:17:5a:cc:e4:30:e4:82:9e:12:
         bf:e7:d5:37:97:eb:0b:80:3b:65:5a:08:e4:74:59:9e:5d:4b:
         bd:b5:15:d0:24:54:67:27:4b:78:1d:e9:fb:c6:b3:6e:e2:56:
         61:36:0a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:32 2023 by rpki-client on console-ams.rpki-client.org