Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B41AAC8F21111EC80A1B2E2F1222468.roa
File:                     8B41AAC8F21111EC80A1B2E2F1222468.roa (raw, json)
Hash identifier:          rdJqxMi5qqN4Mwuldf0NwhRs1mEzJWxaF7jnvDPmSg4=
Subject key identifier:   63:3F:69:AB:1F:70:76:58:F5:15:14:37:D5:63:CB:31:96:55:B8:85
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       16F3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B41AAC8F21111EC80A1B2E2F1222468.roa
Signing time:             Wed 22 Jun 2022 09:56:11 +0000
ROA not before:           Wed 22 Jun 2022 09:56:06 +0000
ROA not after:            Fri 30 Jun 2023 09:56:06 +0000
asID:                     23674
IP address blocks:        154.192.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5875 (0x16f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jun 22 09:56:06 2022 GMT
            Not After : Jun 30 09:56:06 2023 GMT
        Subject: CN=62b2e73b-c7bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5d:01:7f:f5:cf:f8:92:43:e1:1c:13:05:de:
                    d6:bc:cc:8b:09:37:7f:e6:14:ee:08:84:4b:60:56:
                    24:fe:68:8e:eb:89:d3:4c:63:59:dc:61:98:0f:07:
                    e1:fb:e7:73:c8:32:ec:8d:48:27:09:40:08:9a:c4:
                    df:26:bd:82:6d:d4:a2:f3:15:4d:44:d6:92:49:03:
                    32:c3:1d:57:74:1d:cb:b0:1e:a7:97:36:eb:6b:ec:
                    d4:91:44:80:48:47:f7:f9:d0:9f:1a:a3:da:79:eb:
                    e8:df:ae:62:16:00:e7:74:e7:98:24:6a:03:b9:4f:
                    de:ba:ab:6f:62:d8:e9:16:c0:71:8d:fb:82:e8:64:
                    65:df:60:c2:81:7e:43:e6:3f:07:c8:0f:05:12:1b:
                    15:e5:9e:46:07:c8:e9:02:f7:e3:be:6f:9b:42:26:
                    33:e7:bf:00:e1:83:00:78:67:84:d1:6c:e0:30:75:
                    88:22:27:7c:85:f7:b7:72:97:6f:7b:73:85:5d:67:
                    ab:16:7f:33:8d:ed:7f:29:7d:54:64:dd:25:eb:ba:
                    08:2f:3c:8d:bb:e4:72:0d:cc:2e:92:52:b0:34:3f:
                    e3:93:b9:ac:fc:f7:da:86:29:67:d1:f7:5a:89:88:
                    7c:af:92:9c:26:de:47:d1:2a:53:b8:fb:83:7b:d7:
                    95:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:3F:69:AB:1F:70:76:58:F5:15:14:37:D5:63:CB:31:96:55:B8:85
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B41AAC8F21111EC80A1B2E2F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.192.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         70:32:50:d1:7d:14:39:c3:be:9c:04:09:34:f4:6a:19:e2:29:
         d3:00:29:a6:78:68:f9:30:ae:d4:71:e7:fd:41:91:6e:15:84:
         d7:6a:74:b9:bc:ee:9f:b0:87:85:d2:b3:71:fc:cc:fd:f5:ce:
         96:ad:b0:1b:8c:73:06:dd:09:35:83:69:9e:9c:4d:21:f4:a0:
         67:72:cb:69:b2:49:d9:81:f0:d3:bb:cc:16:2f:3d:f2:94:15:
         c5:02:68:11:b5:66:11:24:7c:b7:81:7a:b3:28:83:84:7e:c5:
         a3:fa:18:d9:be:b5:5d:13:e8:dc:87:01:94:58:1c:c4:f6:c6:
         0d:cb:a7:ef:42:fd:ce:45:5e:25:98:23:04:3c:ce:46:42:e8:
         ec:02:3b:20:fa:e1:5a:c1:52:b2:d1:de:d8:d6:cc:08:c4:fb:
         c1:68:ef:0c:e8:81:ea:07:48:d8:29:4f:99:3a:29:1f:7c:1d:
         9f:ac:ac:f4:88:c3:e1:79:e9:aa:f1:bf:f1:40:89:8d:06:90:
         4a:9a:0d:27:be:aa:b3:b8:a2:a2:62:2b:ea:a2:8f:fe:bc:dc:
         62:4d:43:64:f0:c6:7b:b3:3d:a4:a8:aa:37:6b:c8:ef:0a:b9:
         cc:4a:dd:61:ea:a2:79:ca:49:a1:f5:97:1e:44:fe:a1:d8:fe:
         e7:34:1a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:09 2023 by rpki-client on console-ams.rpki-client.org