Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A3086280E58011EBBAF8322FF8AEA228.roa
File:                     A3086280E58011EBBAF8322FF8AEA228.roa (raw, json)
Hash identifier:          PoS16kmLIaKWk3BdS9KrqP/WcPuJ3ckbmdZTRYTmzWo=
Subject key identifier:   29:28:2D:65:A1:51:4C:1A:D3:2C:DE:29:C7:9D:E6:BA:EF:4C:DD:B7
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       0808
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A3086280E58011EBBAF8322FF8AEA228.roa
Signing time:             Thu 15 Jul 2021 15:23:42 +0000
ROA not before:           Thu 15 Jul 2021 15:23:38 +0000
ROA not after:            Sat 09 Jul 2022 15:23:38 +0000
asID:                     397630
IP address blocks:        154.83.9.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2056 (0x808)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jul 15 15:23:38 2021 GMT
            Not After : Jul  9 15:23:38 2022 GMT
        Subject: CN=60f052fe-65f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b3:a3:e7:5e:41:45:c1:4f:4b:bd:0b:a6:8c:
                    2e:67:6b:50:a2:7f:fc:46:6a:f0:77:cf:d8:f1:87:
                    1d:01:fe:02:d7:f9:e3:fa:c7:70:a5:c8:d8:22:cb:
                    6e:31:af:dd:13:5e:13:33:60:e8:d3:a8:89:d1:3c:
                    4d:99:ca:37:e9:0d:88:f6:43:4d:62:26:1e:ad:9b:
                    d7:e1:89:b8:67:48:01:41:10:40:05:35:a8:7f:2d:
                    e7:be:38:2a:af:b3:bb:04:cd:a3:bd:d6:61:e4:c4:
                    c6:31:04:86:05:9e:b2:d5:b3:73:29:3f:6c:01:cc:
                    d7:d4:09:46:b8:ef:5d:43:28:b1:10:bf:5d:f4:b9:
                    2d:7b:57:bf:72:ee:ce:8c:f8:ab:10:cc:13:be:3c:
                    08:0f:c2:05:ad:58:32:8a:20:31:7e:b7:c0:cb:fe:
                    6c:0b:ed:30:a8:fb:bf:95:2f:31:de:7a:18:be:4e:
                    cc:23:28:33:8e:5b:88:22:2f:13:67:ce:9a:37:73:
                    53:89:cb:12:44:ca:cc:51:08:59:33:53:57:0e:ea:
                    ba:4e:8f:29:a1:14:19:39:83:1a:c8:5c:d9:63:06:
                    4f:b2:27:cb:42:c7:d5:2c:ed:72:9f:d6:d2:c6:d2:
                    34:fd:c9:25:12:fe:9a:53:dd:25:70:e2:bf:b9:f6:
                    fe:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:28:2D:65:A1:51:4C:1A:D3:2C:DE:29:C7:9D:E6:BA:EF:4C:DD:B7
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A3086280E58011EBBAF8322FF8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.83.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:28:e9:7c:7a:3b:5d:f3:0b:0e:01:6b:39:0e:72:cf:78:70:
         4c:73:a9:a4:64:0e:d0:bb:78:bc:4c:17:7b:71:33:a3:82:4d:
         08:81:2f:35:7f:84:a0:9c:33:80:45:36:ef:30:c3:e7:49:2e:
         a8:43:ea:45:67:ef:6b:90:97:4c:3e:f0:c4:47:ca:28:2b:2d:
         35:64:e8:da:b2:c6:64:b0:3a:a6:96:95:23:f5:25:b1:c4:e9:
         6d:3e:41:a2:a1:63:a2:b8:ef:df:01:a5:07:f8:54:e5:06:49:
         15:86:a3:02:fa:ba:c7:c9:8c:02:d3:07:7a:bd:53:a7:36:ae:
         13:a8:39:9f:f6:e5:13:9a:fe:1f:6f:88:c6:6e:e7:79:18:8e:
         68:dc:00:b5:e9:85:0b:44:88:35:09:2d:42:23:34:2c:dd:35:
         59:08:be:dc:ba:4b:60:f4:97:ab:18:87:74:ad:2a:f0:64:78:
         5d:ad:84:56:22:da:95:98:01:58:9b:36:1b:ce:03:10:95:8d:
         42:8e:c0:64:56:6b:f6:34:9d:a1:9a:b0:bc:f1:c9:c0:7b:11:
         ae:db:96:51:93:9d:7a:95:a6:dd:2d:86:ad:9c:d6:de:cb:fa:
         e6:d2:45:41:44:48:99:81:2c:8c:28:ba:8e:6f:42:b7:3e:8a:
         d8:b3:9b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:10 2023 by rpki-client on console-ams.rpki-client.org