Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/8B283B28195911EDBE65BFBDF1222468.roa
File:                     8B283B28195911EDBE65BFBDF1222468.roa (raw, json)
Hash identifier:          sP1sZEOAxKsNIBw3TpLk5bUYpzLMQt9WjYY7CuugFmk=
Subject key identifier:   9B:2F:FA:B7:B9:6D:B7:5A:11:F7:48:0C:1B:DE:F4:04:D5:CF:61:AB
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       07CB
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/8B283B28195911EDBE65BFBDF1222468.roa
Signing time:             Thu 11 Aug 2022 09:39:50 +0000
ROA not before:           Thu 11 Aug 2022 09:39:44 +0000
ROA not after:            Fri 11 Aug 2023 09:39:44 +0000
asID:                     203999
IP address blocks:        161.123.64.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1995 (0x7cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Aug 11 09:39:44 2022 GMT
            Not After : Aug 11 09:39:44 2023 GMT
        Subject: CN=62f4ce66-4e61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ec:18:81:89:1f:3e:19:f8:9d:ce:f5:e0:e8:
                    24:be:e5:c0:9c:34:6e:16:7d:55:23:72:7f:07:83:
                    24:64:75:fb:73:b2:b7:d1:d7:57:2e:6f:9b:cf:f9:
                    ed:07:71:4d:99:59:c1:1c:d4:3e:d6:e2:da:68:3f:
                    c7:83:03:3b:e8:81:3a:37:9a:66:29:92:e7:27:85:
                    28:38:8a:72:e3:c9:9e:b4:de:71:8f:ff:c4:d4:bf:
                    98:af:11:a6:8d:98:ae:33:73:43:4b:45:5a:55:fb:
                    85:c2:fd:99:47:b2:0b:67:8c:d4:9b:89:78:0f:78:
                    a4:5a:6a:a7:e0:1b:f1:0b:a1:b7:77:24:36:a4:de:
                    7c:96:ff:f9:e1:58:59:3b:96:dc:3f:70:e1:f4:c9:
                    17:5d:83:48:e6:f2:68:ba:1d:41:01:99:42:fe:57:
                    db:ae:eb:2f:7e:35:14:ad:45:ac:4c:09:41:b4:09:
                    a3:83:d2:17:43:0a:e7:5b:72:86:b5:9b:9d:8f:18:
                    87:9b:9c:50:0f:3c:00:00:a4:6a:f1:f0:17:8c:e7:
                    1d:1e:23:a8:17:4b:f7:8a:e3:74:92:31:9c:f8:a5:
                    2a:42:a1:b2:8b:fe:31:fa:aa:57:5f:48:37:de:f8:
                    3e:84:9a:ab:51:64:53:50:21:3c:cf:af:34:0a:54:
                    a5:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:2F:FA:B7:B9:6D:B7:5A:11:F7:48:0C:1B:DE:F4:04:D5:CF:61:AB
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/8B283B28195911EDBE65BFBDF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:97:14:6e:0d:3a:f9:70:38:a9:ac:95:e1:48:8f:8c:53:63:
         c4:69:15:ab:a8:87:b3:21:91:37:b8:e0:a7:89:e6:27:b5:bc:
         1e:0b:3e:c3:b2:ca:ee:55:82:fe:0a:9b:5a:87:a5:2a:d8:7d:
         23:9d:01:dd:d3:83:ca:e0:da:63:a1:5a:20:7a:bc:de:56:f9:
         07:d1:6d:6e:4d:2a:d3:8b:d2:b1:5a:0f:ed:1a:ae:9c:70:2e:
         2c:0b:9b:cf:06:38:4d:d2:3a:48:16:26:e9:63:7e:b4:d2:ad:
         40:20:f7:28:86:f7:46:b6:e7:5e:65:70:dd:82:c4:f4:d3:66:
         3d:03:58:01:aa:95:ab:1a:d0:9c:c8:e3:d6:32:9c:cf:b7:62:
         c9:fb:d9:e6:c9:83:f1:cf:7a:ea:1e:4c:3d:a2:9f:f2:c7:6c:
         95:70:d1:0e:8f:61:ce:fd:7d:15:e9:46:af:19:fd:27:89:de:
         2b:d4:3b:a5:e4:23:f3:7f:bd:03:79:9a:2f:3e:78:c1:54:b2:
         50:91:4f:09:4a:4b:08:20:2a:8b:e0:d1:af:62:4a:50:51:d2:
         c2:a1:52:9e:32:53:a8:11:1f:fb:ba:8f:ab:c5:6d:fd:5a:78:
         d3:d5:25:f4:5f:f2:12:c3:8a:66:f1:df:a0:cb:71:fa:c9:76:
         17:0f:75:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 12 01:52:02 2023 by rpki-client on console-fra.rpki-client.org