Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/FCADA426F15F11ECBB828FACF1222468.roa
File:                     FCADA426F15F11ECBB828FACF1222468.roa (raw, json)
Hash identifier:          nfipnotfCYg1Y64FUq7s6fcJ5uqlXLxcM9cbPUP0u4Q=
Subject key identifier:   73:FF:BF:07:18:BD:6F:B9:A7:DF:99:DB:9A:32:70:75:02:4B:B4:8C
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       075F
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/FCADA426F15F11ECBB828FACF1222468.roa
Signing time:             Tue 21 Jun 2022 12:45:11 +0000
ROA not before:           Tue 21 Jun 2022 12:45:07 +0000
ROA not after:            Wed 21 Jun 2023 12:45:07 +0000
asID:                     203999
IP address blocks:        161.123.8.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1887 (0x75f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Jun 21 12:45:07 2022 GMT
            Not After : Jun 21 12:45:07 2023 GMT
        Subject: CN=62b1bd56-3f9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c4:64:b5:1b:85:cb:fb:af:82:f4:c2:4d:7e:
                    31:7e:41:e6:21:52:cd:ca:f6:f5:c3:ca:aa:bf:34:
                    21:46:fd:7b:64:bb:d6:4d:d7:fd:a9:45:60:8e:60:
                    bb:22:7e:bd:59:63:0a:75:7f:22:23:7d:c4:b5:6d:
                    2d:4c:15:eb:86:1c:d0:56:53:ed:3c:a5:d5:66:a4:
                    ec:25:66:63:91:3b:72:e5:fb:7a:6c:44:42:a8:a1:
                    f1:37:c7:c6:d9:38:d3:20:fa:22:76:6d:3b:30:f6:
                    35:91:a8:51:3b:34:71:e3:da:e1:bd:f7:c0:ab:ef:
                    9f:13:1b:42:4e:90:61:7f:70:96:e1:2d:28:2a:3f:
                    50:2d:59:f0:d3:f5:f5:d0:b7:9f:61:65:b8:f2:ad:
                    fc:2c:65:95:75:f6:a9:e0:b0:8f:4c:88:6b:b5:ab:
                    ae:33:a1:7d:33:ad:47:ed:49:94:bb:d3:01:21:81:
                    e9:ac:e7:ba:d9:30:a2:35:81:36:c6:ec:1f:20:29:
                    fe:ff:ce:c6:a3:23:d7:a2:56:99:87:dc:5d:7b:2c:
                    fd:08:1a:69:c6:6a:18:eb:39:53:b6:93:6e:2b:ca:
                    de:58:a3:d0:e6:7d:a2:1d:91:00:8d:c9:6d:be:a6:
                    0d:73:7d:61:35:73:6b:4f:ff:3b:19:f5:c9:c3:7c:
                    1b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:FF:BF:07:18:BD:6F:B9:A7:DF:99:DB:9A:32:70:75:02:4B:B4:8C
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/FCADA426F15F11ECBB828FACF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:87:26:55:53:11:48:e7:f8:5f:29:b8:4b:a0:ab:1c:79:14:
         1a:93:90:1b:1c:70:61:67:df:93:e3:53:1b:dd:4a:f9:12:13:
         90:96:12:65:f5:03:25:5c:c1:96:c0:5b:d3:cc:4e:fb:74:34:
         bc:e1:80:e7:c2:c6:ff:90:cf:96:91:25:09:9c:33:2c:d6:21:
         61:23:73:87:fc:4b:13:e9:72:10:be:cd:4d:90:fb:d0:c9:f1:
         db:56:48:ab:6a:b2:f8:f3:34:b1:90:25:87:f9:05:1e:4a:37:
         7c:18:8a:dc:f1:7b:6f:5a:79:22:a9:ee:0e:fa:3a:87:19:29:
         d3:94:fb:52:5c:96:8f:96:31:cf:57:e5:12:8e:ac:6f:51:43:
         06:16:1b:04:57:47:6f:6b:0a:e3:a9:01:ab:c6:e1:de:92:92:
         3c:0d:6b:38:72:99:a3:4c:29:d5:ad:fb:37:07:b3:4c:26:61:
         8d:1a:97:cb:ca:d8:b8:55:53:0b:07:e3:40:be:2f:33:0b:c4:
         11:03:cc:a9:ca:20:ff:eb:0d:70:cc:e5:ba:60:7b:19:c9:99:
         92:02:92:22:b1:08:5d:d7:33:a3:2d:73:3e:ac:4e:6b:d6:cd:
         68:32:d0:25:e9:a2:d4:84:26:98:f4:a6:cd:ba:59:15:b8:41:
         7f:eb:d9:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:33 2023 by rpki-client on console-ams.rpki-client.org