Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C8158DA251611EDBB4DA58BF1222468.roa
File:                     6C8158DA251611EDBB4DA58BF1222468.roa (raw, json)
Hash identifier:          210hr710B8SRkT4wgqsYMO2u5BnSISpIv1aA4j97Qfw=
Subject key identifier:   66:E8:AA:35:4D:9F:FF:63:78:BE:46:FD:A5:91:16:CD:D9:35:A0:4F
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       1865
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C8158DA251611EDBB4DA58BF1222468.roa
Signing time:             Fri 26 Aug 2022 08:09:36 +0000
ROA not before:           Mon 29 Aug 2022 08:09:32 +0000
ROA not after:            Sat 15 Jul 2023 08:09:32 +0000
asID:                     38638
IP address blocks:        154.91.169.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6245 (0x1865)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 29 08:09:32 2022 GMT
            Not After : Jul 15 08:09:32 2023 GMT
        Subject: CN=63087fc0-7c2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:56:93:de:83:f3:8d:d6:8d:84:47:1b:38:91:
                    00:96:f9:51:89:95:7b:96:dd:2a:c4:1e:3d:ad:41:
                    79:17:e1:c5:7d:53:91:d6:ad:4f:35:cd:10:a2:a4:
                    71:5b:cc:7e:ce:93:70:ff:a0:2e:c0:16:79:48:17:
                    2d:fe:8a:cf:7f:ba:74:32:20:d0:ba:9d:c8:a6:e7:
                    d1:99:60:d8:b9:9c:e4:e7:19:47:44:f3:33:b9:fa:
                    48:b6:6c:d3:d1:6b:0d:97:2d:b4:47:9e:91:ed:ef:
                    27:ee:79:3a:a6:75:62:66:36:40:52:1a:2c:d5:ee:
                    6c:e6:1d:72:1e:5f:d6:21:8d:31:2d:34:82:3b:0e:
                    6e:b4:74:c5:25:78:be:c5:c4:c7:9f:f8:8b:17:d8:
                    08:dd:ba:1f:2a:42:9c:92:53:2e:7f:9a:ac:1c:bf:
                    38:36:55:0b:c9:61:93:7c:21:ef:1e:9e:1c:1f:4c:
                    17:a7:3a:e6:38:af:af:ef:68:b2:91:c9:c5:cd:88:
                    4a:38:9f:0a:70:9e:d2:8f:69:19:9a:1e:5d:fe:51:
                    d5:a7:81:66:b9:20:10:67:fc:f4:1f:ff:b8:cc:8e:
                    03:4d:99:88:5f:b8:9a:35:9a:bd:c7:23:31:cd:48:
                    40:ee:de:b2:80:48:fd:7a:2a:6a:5c:04:db:ad:86:
                    3d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:E8:AA:35:4D:9F:FF:63:78:BE:46:FD:A5:91:16:CD:D9:35:A0:4F
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C8158DA251611EDBB4DA58BF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.91.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:aa:e2:e2:b4:ad:59:08:1c:02:a1:48:a4:a4:09:18:53:e3:
         25:93:b1:b6:49:b4:46:66:64:ed:6c:96:dd:cf:2f:d8:42:ca:
         c3:9f:51:23:1b:ee:3c:0a:ee:a1:2a:f4:75:19:79:1a:e0:76:
         7f:8b:7c:5c:c0:5a:7f:1f:78:0c:b5:40:58:22:16:38:32:ff:
         de:c6:2b:36:47:fc:08:96:23:13:18:ad:5c:7f:d0:27:db:a8:
         20:f5:c2:1a:09:6f:21:a5:2d:a2:53:0f:81:ca:18:7c:95:e8:
         aa:2b:92:7a:df:01:d6:3e:06:95:03:ad:55:1c:34:76:22:d1:
         eb:49:07:c9:c9:79:92:ff:e7:04:ec:e3:03:68:8e:d6:72:50:
         75:fc:e3:8b:ae:e2:f6:f8:86:e7:fd:76:d9:1e:85:ba:fb:47:
         43:12:be:c9:25:3d:52:83:ea:8d:eb:71:0b:83:b4:ae:b4:06:
         00:0d:47:4c:49:96:ac:01:78:e1:00:1d:07:a3:b9:51:97:e4:
         f8:85:3d:26:7f:f9:e5:43:e3:03:5d:45:f8:19:16:ac:a7:c8:
         f9:0f:37:ba:7a:5c:6a:8e:cf:b1:a6:5c:d7:d5:b5:7f:fb:4a:
         b6:75:ef:b6:a3:e1:99:a5:10:e7:9b:69:86:a6:a0:58:a6:da:
         f8:85:7f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:07 2023 by rpki-client on console-ams.rpki-client.org