Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/A6E88DA2F16011EC930693AEF1222468.roa
File:                     A6E88DA2F16011EC930693AEF1222468.roa (raw, json)
Hash identifier:          yFc8PRc/dCJDUqE5mOwgeqjM8zVrFkdH8btHdeNmTv8=
Subject key identifier:   F5:E6:CA:38:88:5D:5C:4E:C8:5B:B0:A9:9F:A5:89:B5:D9:01:80:6B
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       0767
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/A6E88DA2F16011EC930693AEF1222468.roa
Signing time:             Tue 21 Jun 2022 12:49:56 +0000
ROA not before:           Tue 21 Jun 2022 12:49:52 +0000
ROA not after:            Wed 21 Jun 2023 12:49:52 +0000
asID:                     203999
IP address blocks:        161.123.24.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1895 (0x767)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Jun 21 12:49:52 2022 GMT
            Not After : Jun 21 12:49:52 2023 GMT
        Subject: CN=62b1be74-a3c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:34:96:ef:00:b2:a6:99:a8:ee:b2:6c:b3:02:
                    27:0e:76:bd:c1:57:28:80:31:25:4e:a1:a6:4f:a2:
                    ce:d3:cd:19:49:3f:4e:e6:5e:6f:9b:92:a0:74:69:
                    5f:5f:35:db:de:87:b5:e2:4a:cc:61:d3:ab:6f:a4:
                    68:c5:25:6f:fc:be:3d:46:65:f5:fa:45:64:d9:be:
                    2f:ed:9c:47:8b:e6:3a:6a:dd:88:6d:20:4f:cd:77:
                    35:fd:31:8d:b3:bf:ec:aa:34:69:b0:68:9b:21:6f:
                    41:b2:95:88:2d:08:dc:51:a8:7c:25:60:35:3a:26:
                    25:19:ea:31:b3:44:65:d2:91:38:67:47:9e:d1:93:
                    99:05:45:d0:35:89:06:cb:9d:e4:76:bd:7d:92:4e:
                    77:cb:87:94:1f:2c:d2:21:31:36:4a:7a:8d:a3:c5:
                    da:ee:87:c5:db:08:a9:ce:ce:98:fb:ef:ba:c9:a0:
                    fe:e1:8a:6e:df:7c:99:d2:fd:11:27:2b:b9:bb:76:
                    65:09:82:c8:64:95:80:06:b7:58:13:c9:51:9a:57:
                    04:b6:dc:d0:6f:f4:28:fb:f1:14:15:ba:68:f1:48:
                    8d:d4:45:29:67:f0:d1:3f:dc:40:0a:a1:cd:75:88:
                    c3:40:6f:c9:6b:79:c3:fa:51:96:74:2e:ab:62:61:
                    22:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:E6:CA:38:88:5D:5C:4E:C8:5B:B0:A9:9F:A5:89:B5:D9:01:80:6B
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/A6E88DA2F16011EC930693AEF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:32:20:d1:45:9e:b7:85:b6:44:ec:11:ff:ed:b9:f1:ab:d6:
         35:b6:62:58:cd:a2:af:69:ad:52:ae:2a:81:93:d4:76:d5:53:
         e5:27:90:73:29:08:8f:47:95:14:81:d1:4d:bc:db:c1:d6:25:
         e0:3c:b3:e2:d3:77:6c:09:d6:2b:b9:06:0e:a0:f2:65:44:fd:
         3e:e4:24:dd:3f:00:df:91:b7:e4:a5:df:89:52:e1:c5:74:2d:
         f6:2b:65:21:79:40:56:78:75:34:1c:b7:65:c2:97:87:98:c9:
         d3:47:bf:eb:7b:c8:01:fd:55:f8:ae:cd:81:0d:2f:43:3f:fc:
         38:09:b2:fa:2f:dd:a0:5b:3c:18:c8:22:bb:62:df:c3:63:8e:
         fc:66:cc:93:b3:57:21:f6:30:0a:91:d4:08:37:e5:2e:cd:65:
         64:de:01:b2:be:fb:53:5f:25:98:0e:1e:f0:f5:1a:62:57:23:
         72:70:31:8e:47:45:9f:83:fb:36:50:a8:62:d2:5f:8e:42:80:
         fe:3a:b7:c3:a4:83:c2:cb:dc:ad:eb:1a:44:51:86:f3:10:70:
         17:b9:9d:30:eb:e4:80:70:15:d0:85:30:ac:43:de:12:1d:ad:
         6f:6a:1d:e8:66:4d:69:e7:98:01:d2:90:8d:1e:c0:74:d4:0d:
         74:22:b4:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:34 2023 by rpki-client on console-fra.rpki-client.org