Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ABB011544B9111ECB4D1110ED8A014CE.roa
File:                     ABB011544B9111ECB4D1110ED8A014CE.roa (raw, json)
Hash identifier:          k+xi7e0euZ3F0lLaRL45HN6O5B3gdhc0ayFEn747VNg=
Subject key identifier:   6F:7C:3E:6E:A1:9C:CC:3B:2B:C2:48:36:B5:FB:53:4A:30:E8:EA:C0
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       1218
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ABB011544B9111ECB4D1110ED8A014CE.roa
Signing time:             Mon 22 Nov 2021 12:42:36 +0000
ROA not before:           Mon 22 Nov 2021 12:42:33 +0000
ROA not after:            Sat 19 Nov 2022 12:42:33 +0000
asID:                     9009
IP address blocks:        154.92.114.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4632 (0x1218)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov 22 12:42:33 2021 GMT
            Not After : Nov 19 12:42:33 2022 GMT
        Subject: CN=619b903c-a3ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:81:9b:a9:82:fc:f5:d7:d4:4a:54:56:a0:98:
                    5f:17:0d:cf:e5:8a:af:91:11:36:bc:c0:92:d7:8e:
                    7a:ef:5f:21:1f:77:eb:ff:c1:6c:0f:b3:71:ca:fb:
                    16:a3:81:6a:3d:e4:b1:77:07:2a:31:ff:b4:8d:f7:
                    b0:e6:8a:be:05:fa:52:82:c6:64:ad:47:5c:53:df:
                    26:38:22:4b:9a:2d:bd:32:4a:ec:92:3d:ad:72:4d:
                    19:9b:10:bb:1e:c9:37:7b:d1:f0:19:f9:56:34:b2:
                    e1:73:00:a1:5d:68:ee:99:4d:7e:11:38:52:f0:a2:
                    6a:df:01:d4:2f:49:b5:4a:3f:c1:67:9b:e1:79:77:
                    62:45:17:c3:9a:ae:27:f4:fc:8a:ed:24:3f:1f:f4:
                    04:91:9c:bb:2f:c2:31:a0:7a:c4:4a:9f:ce:4f:f9:
                    74:2e:10:71:2e:a3:d5:af:a6:02:f9:50:60:90:e9:
                    11:7b:a4:bd:60:3e:c9:d9:88:3e:ac:64:51:28:42:
                    c9:cc:f4:da:78:88:6d:e1:4e:2d:d0:01:34:3b:f6:
                    89:f3:af:ff:ed:4c:92:8f:d5:e2:91:05:f8:5e:b8:
                    30:5e:e0:8f:35:eb:a7:29:d1:41:b2:88:cc:17:d1:
                    0b:e8:77:2a:df:08:9d:c4:0d:e1:37:3f:a8:49:a0:
                    4f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:7C:3E:6E:A1:9C:CC:3B:2B:C2:48:36:B5:FB:53:4A:30:E8:EA:C0
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ABB011544B9111ECB4D1110ED8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.92.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d8:28:35:c4:09:7b:f2:0b:44:20:ff:f1:6b:54:55:4e:13:5c:
         e4:56:cb:34:9f:c4:4b:c5:75:27:cb:2f:cc:a1:52:f9:00:59:
         03:19:e7:8c:61:39:d9:f3:32:a8:00:eb:6a:d7:92:57:78:d5:
         c6:ef:e8:c3:22:c0:8f:a2:9f:42:bc:1a:d4:5d:ef:c1:69:1e:
         25:c7:8d:24:1f:46:29:ad:8c:dd:89:bf:c6:94:49:26:ce:1d:
         8a:19:2c:d3:8e:cc:7a:c4:4b:cd:64:4d:a0:22:a2:cf:08:e2:
         4f:4b:a5:ff:34:b2:0b:ba:fe:95:f9:90:13:9a:7e:e7:af:da:
         1f:ea:f7:90:aa:70:fd:f0:75:53:dc:0e:f7:dd:69:ef:08:88:
         15:34:e3:4a:af:d4:df:8b:68:63:39:87:b2:c3:10:06:b0:21:
         d4:62:0c:34:24:31:73:da:cc:31:a7:93:40:56:96:9a:62:91:
         ad:c0:2d:c0:81:3e:d9:5c:90:c0:37:f0:e2:a9:a1:a0:41:c5:
         99:39:77:fd:d0:8d:7a:b0:9d:14:6e:62:1e:6d:ae:3c:fb:5a:
         1d:b9:2e:74:39:81:3b:7a:5c:6b:d4:d6:06:c7:01:be:98:81:
         69:e6:d0:4b:4c:56:55:89:56:74:9f:14:fc:78:86:7d:f4:3e:
         31:03:e7:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:10 2023 by rpki-client on console-ams.rpki-client.org