Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/114F54DE16D111EC8C305B05D8A014CE.roa
File:                     114F54DE16D111EC8C305B05D8A014CE.roa (raw, json)
Hash identifier:          fAIHslg37t+YkmGKCy6Zm+uNPPg1Ue2wtlF8pCNl+0I=
Subject key identifier:   6F:F3:7B:B3:3E:82:1E:59:F4:8A:4C:8D:A8:02:96:B4:B7:44:B3:5D
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       0C57
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/114F54DE16D111EC8C305B05D8A014CE.roa
Signing time:             Thu 16 Sep 2021 09:32:54 +0000
ROA not before:           Thu 16 Sep 2021 09:32:47 +0000
ROA not after:            Sun 16 Oct 2022 09:32:47 +0000
asID:                     136744
IP address blocks:        154.81.52.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3159 (0xc57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 16 09:32:47 2021 GMT
            Not After : Oct 16 09:32:47 2022 GMT
        Subject: CN=61430f45-6a40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f8:91:d6:70:d8:4d:f7:95:a2:a6:a8:b3:e1:
                    30:29:f9:36:e5:c2:cb:0e:cd:3c:f9:98:6d:8a:ab:
                    cc:ef:9a:f5:1c:f6:b8:6e:9a:a5:06:07:60:52:1f:
                    e8:39:b0:2d:6e:93:0d:07:c2:0e:11:aa:f9:3f:77:
                    f0:27:11:62:cd:a3:e1:1f:87:a7:ca:50:6e:38:32:
                    d2:25:19:f1:ea:3f:0d:92:dc:5b:4f:02:05:34:9d:
                    18:4d:84:6f:bf:f5:fe:d6:ee:61:1a:95:44:1d:b5:
                    1c:30:ac:07:e6:3c:7a:29:9a:46:ae:5b:66:68:b4:
                    63:da:9d:ff:7e:aa:57:4a:eb:9f:b1:f7:b7:00:90:
                    6b:75:d6:9b:fe:e8:33:e5:45:92:22:62:f3:45:10:
                    40:83:58:9f:b3:e3:ec:a2:be:a5:b6:e7:e9:c0:d4:
                    40:65:4c:95:61:65:c0:43:13:bd:1d:98:05:49:55:
                    9a:7b:45:ad:c4:0d:02:f4:a8:b2:19:87:9c:86:38:
                    70:45:7c:f2:91:98:b2:b2:1c:8e:03:e7:3b:57:93:
                    21:aa:88:e8:fa:53:b2:10:7b:ce:8a:63:52:3a:7b:
                    a4:17:4f:81:bf:40:2d:57:6c:97:f5:63:3d:6c:aa:
                    a3:81:6f:f3:2b:87:a9:7c:64:f0:d7:67:74:d0:96:
                    ca:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:F3:7B:B3:3E:82:1E:59:F4:8A:4C:8D:A8:02:96:B4:B7:44:B3:5D
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/114F54DE16D111EC8C305B05D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.81.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:7f:f7:9b:84:fe:6f:28:e2:85:7e:61:9a:a9:55:1b:27:c3:
         1c:b2:f2:2b:6d:10:d1:1a:51:82:e3:88:be:6c:c9:a9:9d:9b:
         f7:e6:6c:b7:7b:70:c5:a4:8e:07:cb:a2:eb:c3:56:40:bf:22:
         75:e1:45:ee:1e:ca:7c:6c:08:9f:91:9d:85:60:87:17:31:4b:
         4b:7e:c8:c0:2c:0e:09:79:46:7d:47:7c:21:58:5b:2d:42:93:
         5d:f2:60:a3:4e:8c:f0:a8:9f:94:c0:60:b1:3b:c0:08:f0:4a:
         cd:12:7c:af:18:77:88:19:37:7e:a9:0e:09:e8:43:00:a0:d1:
         49:b7:ad:38:95:82:da:45:b1:80:c4:ea:e2:07:88:2b:dd:65:
         a9:6f:fc:08:6e:54:ab:98:b2:bf:b3:8f:0a:8b:2e:cf:53:40:
         38:db:9f:18:da:29:0f:07:9e:da:9b:7d:a7:6f:88:9e:eb:8a:
         39:97:67:9f:d8:dd:b5:73:4e:17:ac:c2:ea:f8:a8:1f:36:c9:
         ca:27:78:b5:23:38:ab:9e:20:a6:9c:0b:94:85:46:ad:79:1d:
         a8:ef:e4:9d:f2:6a:ed:56:bb:7e:32:5c:52:43:0f:62:65:8c:
         1b:94:33:0c:fb:28:ec:93:bc:a7:44:31:61:3f:f3:7f:bf:73:
         7a:ca:0b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:04 2023 by rpki-client on console-ams.rpki-client.org