Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ED8E94EA4C3D11ECBF4F731FD8A014CE.roa
File:                     ED8E94EA4C3D11ECBF4F731FD8A014CE.roa (raw, json)
Hash identifier:          mGajd7WZF3ZpzgQtY62YJmQX8K2heD4Ur65pQpNrC8c=
Subject key identifier:   CC:8E:77:A7:EA:B3:DA:31:61:1E:CE:E7:5F:23:64:95:CA:3A:4B:2D
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       1260
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ED8E94EA4C3D11ECBF4F731FD8A014CE.roa
Signing time:             Tue 23 Nov 2021 09:15:41 +0000
ROA not before:           Tue 23 Nov 2021 09:15:37 +0000
ROA not after:            Wed 23 Nov 2022 09:15:37 +0000
asID:                     54600
IP address blocks:        154.210.97.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4704 (0x1260)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov 23 09:15:37 2021 GMT
            Not After : Nov 23 09:15:37 2022 GMT
        Subject: CN=619cb13c-1201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f9:4f:51:aa:2e:e3:8f:6a:00:2a:a5:64:36:
                    d3:55:84:91:d1:0b:61:fa:09:01:06:ba:09:2c:2f:
                    69:69:4b:e2:90:c7:21:bf:fe:03:c3:fe:09:01:7f:
                    2f:de:c5:00:12:46:33:ac:05:7e:e2:27:d8:b5:4f:
                    ae:9d:81:2c:28:05:f9:9c:a3:f9:ef:e3:9e:39:bf:
                    6e:57:6b:32:12:3f:f9:e9:52:31:2e:f5:92:75:d5:
                    7f:cf:40:c0:7d:1f:e4:f5:8f:f1:bb:b4:68:36:42:
                    f2:81:1f:1d:c4:c0:17:d9:0b:75:58:6b:7c:96:44:
                    2d:e6:27:13:28:61:38:45:42:99:7d:ca:5f:61:2e:
                    15:b6:d3:9b:f3:ad:fb:c8:69:8b:e3:aa:f8:90:ca:
                    02:19:d7:27:94:b2:62:59:ab:b2:57:78:cc:d7:a7:
                    8a:bf:bd:e9:47:27:82:38:fb:62:c2:2b:e0:12:e4:
                    67:67:17:fd:33:fa:52:eb:a6:da:3d:13:96:11:04:
                    ff:d6:84:11:91:85:a8:97:ca:5d:ca:57:bd:80:f7:
                    d1:d9:99:76:41:19:6f:f4:53:00:75:00:52:1f:a9:
                    99:03:a5:d2:11:0b:69:fc:fa:7d:cf:f6:e9:b7:ee:
                    4c:29:d5:ba:c4:65:d7:d0:d5:b9:2b:3b:ee:b4:44:
                    23:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:8E:77:A7:EA:B3:DA:31:61:1E:CE:E7:5F:23:64:95:CA:3A:4B:2D
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ED8E94EA4C3D11ECBF4F731FD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.210.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:96:e3:a9:5c:b2:b2:cd:8f:24:46:6a:6a:44:4e:ae:e4:c6:
         30:e3:fa:3d:66:b7:ca:fc:2c:51:e0:8f:fc:6c:23:20:bc:76:
         62:e9:3d:03:33:d6:22:4c:cf:2b:85:81:a4:76:be:02:a7:38:
         fa:3e:23:21:06:05:0e:30:3e:16:fb:bc:71:e4:a0:96:cf:fd:
         b6:e2:64:25:25:72:2d:b6:33:42:ce:8e:9f:cd:2f:6d:5f:43:
         fe:6a:c1:98:ef:82:97:a8:5d:b0:36:b4:00:4c:5e:c6:db:58:
         fa:bf:76:3b:7e:18:d2:b4:9b:71:54:6f:d5:fd:96:b7:af:5b:
         59:16:3f:73:e5:b4:4e:fa:83:1c:4c:73:ef:17:0a:fb:6b:fe:
         96:49:4a:a4:4e:3e:42:a2:05:18:4e:a6:54:66:8b:31:19:00:
         7a:b3:b2:74:3c:4c:bd:df:50:bd:97:32:b0:4f:fd:a8:81:1c:
         33:0e:15:cd:91:d0:7d:f5:ee:97:49:de:cd:3e:94:27:bc:ce:
         b6:3e:86:75:3e:d9:ff:69:15:ec:19:30:c0:f9:2c:f4:eb:78:
         84:1b:b8:4b:58:7b:da:50:54:5b:d1:9a:c7:56:3f:7b:77:33:
         9e:1b:5e:aa:53:84:d8:1e:e6:c6:82:bf:b7:c9:e2:85:19:7f:
         2c:18:70:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:13 2023 by rpki-client on console-ams.rpki-client.org