Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/87262684327311ECB1E1396CD8A014CE.roa
File:                     87262684327311ECB1E1396CD8A014CE.roa (raw, json)
Hash identifier:          +iS3BNr3Efq3v335YkTkAQXrx+wALDwDzjIwIo35wNM=
Subject key identifier:   33:10:6B:FD:A9:E6:2D:8F:56:A1:B8:0E:D2:1C:CE:D2:6C:82:7C:DA
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       01F4
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/87262684327311ECB1E1396CD8A014CE.roa
Signing time:             Thu 21 Oct 2021 13:33:51 +0000
ROA not before:           Thu 21 Oct 2021 13:33:48 +0000
ROA not after:            Fri 21 Oct 2022 13:33:48 +0000
asID:                     60458
IP address blocks:        161.123.183.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 500 (0x1f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Oct 21 13:33:48 2021 GMT
            Not After : Oct 21 13:33:48 2022 GMT
        Subject: CN=61716c3f-437f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:64:d0:e3:d3:3d:52:c7:7e:0c:36:fd:d5:fc:
                    7e:83:13:66:a7:72:ba:75:7b:a9:97:d5:d7:9b:2e:
                    ee:eb:3d:e1:68:a9:0d:57:d5:6a:61:5e:1e:c0:b8:
                    4b:af:6c:a9:7d:c4:61:18:a7:9e:76:79:03:a9:b5:
                    3c:a3:b2:d8:93:e0:98:63:79:0c:fd:69:a3:01:14:
                    69:59:c4:92:cf:2c:79:43:ae:84:12:0f:b2:48:2b:
                    e6:78:bb:f8:39:e1:4e:fe:23:53:dd:2d:22:54:5b:
                    ea:b0:17:6b:3a:60:3c:aa:ee:4b:f6:81:f0:b3:7d:
                    44:5c:e4:73:bc:a5:e8:73:e9:bc:23:60:39:7a:14:
                    d8:ba:be:7a:6f:cf:dc:be:33:4e:b1:46:9f:08:10:
                    7b:71:c6:f1:05:e8:5e:41:3f:4e:1b:fb:c4:1a:51:
                    3d:b7:e5:95:fd:52:f6:2f:8b:62:03:83:49:98:80:
                    8c:57:a9:a8:56:f5:34:b2:25:2a:0a:aa:19:d9:e8:
                    28:c1:74:ce:e5:52:68:de:72:f1:67:2d:76:f8:19:
                    60:0c:ad:f1:ec:c9:03:26:cd:b7:60:df:1c:b0:db:
                    6b:dd:c2:f1:3d:76:ef:94:d4:78:62:ad:67:b8:3e:
                    ac:77:ed:7f:4a:3f:4f:6a:f7:5f:c2:f6:86:ea:86:
                    fb:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:10:6B:FD:A9:E6:2D:8F:56:A1:B8:0E:D2:1C:CE:D2:6C:82:7C:DA
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/87262684327311ECB1E1396CD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:de:e0:03:d5:66:82:bb:0e:35:28:47:5f:a6:5e:28:fe:48:
         0e:05:20:44:86:6d:24:da:26:8c:b0:6f:39:d3:03:bb:e8:7d:
         95:d8:a1:c4:28:12:3f:3f:3f:83:f2:be:b9:c4:ac:9f:eb:bf:
         eb:3d:c0:df:ac:f7:91:c7:a5:9e:57:9d:6f:c4:dd:35:06:02:
         eb:de:a3:b7:29:b5:b9:5e:06:52:24:f2:38:9a:e7:57:3c:3f:
         9f:5f:51:9f:69:9f:a3:d1:c0:e6:34:4f:36:a8:4c:0a:b1:bf:
         4c:68:7b:63:aa:82:83:8e:8e:be:c1:c7:cf:56:30:11:a2:b7:
         89:d5:2f:03:d9:c6:e0:05:6f:e3:c7:aa:d0:2e:6b:8b:5a:53:
         6b:ae:09:06:b8:f1:85:e1:14:36:28:cd:31:46:30:20:06:66:
         53:80:66:a5:ad:52:09:a8:80:52:a6:90:2c:af:1e:ff:31:78:
         3e:96:66:b7:f6:9f:5e:6a:1e:6b:7c:f3:bd:c6:f1:ca:1f:b0:
         d8:06:21:97:00:cc:4e:d0:f6:c7:2a:11:08:ec:39:3e:85:9a:
         7a:64:2f:eb:77:97:35:c6:91:4d:a3:47:32:4d:b2:24:48:75:
         41:1f:a3:7e:07:94:21:f6:b2:09:dd:6f:f0:c3:e5:32:4e:1b:
         e0:aa:22:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:32 2023 by rpki-client on console-ams.rpki-client.org