Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/D606203C7DFB11EC9BB958D85A40D577.roa
File:                     D606203C7DFB11EC9BB958D85A40D577.roa (raw, json)
Hash identifier:          1fJdC779/EhyFNK2gM55kWIWKHPANGJdqKnHkrYJe8I=
Subject key identifier:   83:23:BB:B1:00:74:20:B6:D4:27:6F:DC:BD:57:AE:F1:69:A1:66:CE
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       0536
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/D606203C7DFB11EC9BB958D85A40D577.roa
Signing time:             Tue 25 Jan 2022 16:28:32 +0000
ROA not before:           Tue 25 Jan 2022 16:28:29 +0000
ROA not after:            Wed 25 Jan 2023 16:28:29 +0000
asID:                     327790
IP address blocks:        161.123.140.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1334 (0x536)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Jan 25 16:28:29 2022 GMT
            Not After : Jan 25 16:28:29 2023 GMT
        Subject: CN=61f02530-5929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b1:ad:44:e3:4e:ab:4d:00:1c:c9:bd:e0:94:
                    03:37:51:31:93:e3:8a:19:67:f4:13:e4:7d:74:2d:
                    be:ee:2c:91:24:57:11:c6:61:bf:71:78:0b:5e:47:
                    87:66:ab:39:5f:db:9a:b5:9c:6f:b2:ae:fe:4e:49:
                    f6:d3:7d:a0:e1:30:8b:12:5b:01:03:79:47:60:cd:
                    9f:d4:33:d4:a8:5a:58:eb:ed:c7:81:35:99:48:9a:
                    5d:d6:5a:a7:82:4a:a0:75:fd:2a:aa:e4:04:1e:16:
                    f2:bb:db:8f:4d:df:b0:6c:ad:96:41:a0:76:4d:29:
                    09:ab:3f:b7:e4:ea:98:d5:70:60:c2:02:59:0c:cc:
                    02:2c:f3:2d:f9:15:e2:02:d0:d8:29:1e:b2:47:b1:
                    28:24:5a:3d:ff:3f:b2:45:ec:2c:6b:26:23:56:b3:
                    5b:97:8f:3e:20:f9:60:10:41:fb:34:89:dc:34:ab:
                    62:63:68:21:2d:84:5e:58:d0:c6:29:80:6d:80:ee:
                    f1:80:9f:56:15:fc:11:8f:a1:0b:87:d2:72:fe:80:
                    77:14:42:22:db:a0:13:4b:52:af:43:2b:45:8a:a3:
                    f4:41:6b:19:d9:d4:0f:83:8f:df:cd:f1:3a:11:6d:
                    42:7e:fd:38:58:73:cd:22:f1:38:32:18:bb:2e:09:
                    62:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:23:BB:B1:00:74:20:B6:D4:27:6F:DC:BD:57:AE:F1:69:A1:66:CE
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/D606203C7DFB11EC9BB958D85A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:b5:b5:8a:c4:ff:29:9d:91:8a:5b:b9:ea:89:52:d8:f1:66:
         cd:0e:4d:30:ad:be:89:74:34:7c:81:13:2e:22:ef:88:ad:0c:
         c0:d6:01:9b:8c:73:ae:10:9e:96:7c:b8:ee:0f:dd:b6:3e:35:
         d4:92:cf:28:15:e0:6f:6c:e1:92:5d:01:41:f5:c7:3f:97:17:
         19:fd:55:7d:0c:73:76:86:71:c4:7f:4d:24:ba:25:d7:a6:31:
         4e:9f:36:f9:a4:c0:28:35:ea:7e:a4:10:ed:ac:67:d8:3a:83:
         b3:72:aa:94:b4:44:2a:6d:93:0c:c2:a5:5e:45:35:11:d2:d2:
         74:04:17:7e:c0:df:6b:7f:c2:db:cc:7e:3a:3e:8a:39:e6:21:
         2f:04:69:84:28:cf:c4:3f:e0:58:d3:be:31:97:50:50:b8:5e:
         31:4f:dc:83:a4:00:e6:e5:10:53:6a:24:19:33:2d:f3:e3:28:
         b8:d3:04:58:ed:cc:8e:c9:18:25:bc:80:87:8c:b8:0a:1e:78:
         b5:b7:29:2d:2b:f8:38:cc:46:d0:d3:06:aa:67:e4:60:ec:87:
         7a:e0:b6:84:f9:02:80:d5:0a:73:a3:18:bf:61:33:5d:7d:94:
         8b:d7:fa:48:26:ff:a8:24:ca:54:99:5c:84:5c:d8:9a:ba:2b:
         ff:b9:b3:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:35 2023 by rpki-client on console-fra.rpki-client.org