Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/C60006DCF16211EC9C6335B5F1222468.roa
File:                     C60006DCF16211EC9C6335B5F1222468.roa (raw, json)
Hash identifier:          R4w8NS72/bUjrQwQWD4ujTjY4Khrenrn3FE/NXquBPE=
Subject key identifier:   27:65:D9:F8:F5:A4:B6:88:6F:61:C1:34:17:B0:21:9F:86:24:2E:9A
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       076D
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/C60006DCF16211EC9C6335B5F1222468.roa
Signing time:             Tue 21 Jun 2022 13:05:07 +0000
ROA not before:           Tue 21 Jun 2022 13:05:04 +0000
ROA not after:            Wed 21 Jun 2023 13:05:04 +0000
asID:                     203999
IP address blocks:        161.123.48.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1901 (0x76d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Jun 21 13:05:04 2022 GMT
            Not After : Jun 21 13:05:04 2023 GMT
        Subject: CN=62b1c203-e453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8f:c9:a7:23:c4:18:a6:f0:2e:27:d1:65:7e:
                    bb:42:8e:55:25:ad:c5:5a:1b:65:ef:a5:b3:11:6a:
                    03:19:f7:72:60:12:69:a0:e3:3d:e8:88:05:52:3e:
                    7f:56:cf:4d:c6:92:3b:f6:08:b6:62:3a:3b:29:ca:
                    17:60:76:00:53:da:26:a4:35:ef:35:56:bc:3b:0b:
                    24:86:06:c8:e3:61:15:ee:a6:ae:ac:71:67:1f:a2:
                    cb:19:c9:e0:7f:61:30:29:fb:35:d6:43:2c:1f:ba:
                    49:1b:33:df:66:3d:6c:ba:f4:7f:ea:49:ad:4a:93:
                    43:28:1f:06:7e:34:52:cc:aa:62:91:d4:01:bd:24:
                    7f:d9:ba:26:a3:cb:77:ef:24:ab:1f:0f:d8:de:b1:
                    37:e5:8d:40:83:e1:39:0c:24:67:7e:52:25:f2:19:
                    18:0d:b4:33:0e:68:61:32:ac:37:6f:9b:6a:9e:a9:
                    69:42:a4:0f:29:66:f6:f5:de:b4:28:7e:7f:1d:03:
                    d8:be:f2:0d:02:95:c6:51:51:37:51:f3:69:9c:85:
                    9b:35:9f:85:b5:fd:a7:48:e9:10:18:ed:ba:79:69:
                    13:d0:c0:30:aa:50:42:a1:2e:e5:4b:e6:a2:ff:ab:
                    23:df:25:61:66:6e:c8:4f:b9:8f:76:68:9d:31:f6:
                    fb:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:65:D9:F8:F5:A4:B6:88:6F:61:C1:34:17:B0:21:9F:86:24:2E:9A
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/C60006DCF16211EC9C6335B5F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:a8:d9:d5:4f:d8:0f:ba:63:03:5a:6f:63:d9:b9:73:f2:bf:
         c6:6c:b0:a9:af:73:16:36:5e:43:26:9a:20:69:47:98:a6:00:
         bf:77:90:c3:53:36:f3:ee:5a:6c:80:22:a9:a7:b3:08:8c:73:
         ff:c7:32:70:13:3c:b1:da:c5:bd:67:b4:ec:4c:e7:af:a0:64:
         14:98:c0:90:eb:62:16:a5:c6:1d:95:1e:72:5b:2e:af:3d:db:
         6b:a3:5a:21:2e:d6:bf:0e:aa:c3:79:50:4c:3b:00:68:9a:83:
         47:e3:00:46:ab:e4:27:a3:b0:c4:e6:b0:94:14:19:43:47:33:
         47:0b:bf:95:0d:bb:d6:ac:28:63:8c:85:df:32:55:7a:d3:ea:
         2f:14:99:c4:ee:2a:33:64:63:b7:d1:c7:ac:fd:73:e1:73:96:
         78:a9:4e:c0:ed:41:49:90:f4:b8:fb:2a:35:8a:2d:8c:bf:bb:
         d2:f9:72:8a:cc:14:35:37:e1:69:08:d3:80:57:b1:25:43:cc:
         93:7a:ba:66:38:5f:a7:80:b5:7b:9c:de:7b:f0:2d:6f:55:e0:
         e7:af:9e:f8:d3:47:69:9f:1a:55:d7:78:95:a1:18:2d:36:43:
         31:09:05:d2:9a:42:6f:3c:d1:56:23:23:8c:20:1b:48:4b:75:
         c3:fa:47:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:34 2023 by rpki-client on console-fra.rpki-client.org