Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FEDC4F6A17B411ED81281984F1222468.roa
File:                     FEDC4F6A17B411ED81281984F1222468.roa (raw, json)
Hash identifier:          T18t+v4vOehMXArhj4Y22IFuNMUXXt3cdapuPmq+bkA=
Subject key identifier:   31:5A:19:90:A7:8F:B0:29:7F:B5:47:5B:C1:F3:9B:EB:49:63:A3:2F
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       182E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FEDC4F6A17B411ED81281984F1222468.roa
Signing time:             Tue 09 Aug 2022 07:29:26 +0000
ROA not before:           Tue 09 Aug 2022 07:29:22 +0000
ROA not after:            Thu 15 Jun 2023 07:29:22 +0000
asID:                     139811
IP address blocks:        154.210.3.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6190 (0x182e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug  9 07:29:22 2022 GMT
            Not After : Jun 15 07:29:22 2023 GMT
        Subject: CN=62f20cd5-9705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:13:e6:08:5c:3e:e4:bf:27:b7:89:ee:04:ef:
                    50:38:96:4d:03:7f:8f:23:80:6c:60:09:e1:98:95:
                    25:3b:80:73:a1:4e:4a:24:c8:23:36:16:54:82:99:
                    cc:aa:89:eb:0a:47:88:93:14:e8:79:30:dc:cf:3c:
                    a6:56:c3:b1:9b:32:20:a6:e0:81:62:8c:26:9e:22:
                    16:53:82:1a:13:27:49:6e:4e:15:a1:ae:73:0c:7d:
                    21:31:d7:5b:00:f6:43:77:c7:6a:12:3b:52:05:90:
                    fb:40:e2:a3:95:56:a0:22:2b:8f:d7:b2:fd:66:f7:
                    43:d7:df:3c:d7:48:1c:61:04:8c:b2:48:bf:ca:b9:
                    93:6f:58:0c:96:76:a4:ab:e5:af:e3:b4:49:ee:54:
                    41:7e:ee:2c:67:12:ad:97:79:74:92:8c:9b:25:5b:
                    63:75:35:39:69:a2:38:83:fe:6f:bf:fa:4b:ce:f4:
                    f1:03:23:16:b5:0e:04:94:d7:19:04:0a:7a:c9:76:
                    4f:1c:94:07:bb:93:5b:62:1b:5f:b8:a2:99:60:2b:
                    42:57:97:8c:6b:dd:eb:f7:6a:da:c7:03:69:06:df:
                    ea:e8:50:7a:08:a4:81:29:19:90:bf:06:78:47:cc:
                    00:2e:9a:9d:76:f1:2d:31:72:20:a1:93:1a:26:41:
                    e3:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:5A:19:90:A7:8F:B0:29:7F:B5:47:5B:C1:F3:9B:EB:49:63:A3:2F
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FEDC4F6A17B411ED81281984F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.210.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:41:f0:8d:22:68:72:9f:55:02:9c:a1:93:fb:ea:20:f8:46:
         de:29:62:12:18:17:8e:52:1c:a5:d5:72:f6:cd:53:be:f0:a8:
         78:d2:a9:86:db:b6:6c:ec:06:06:26:9a:ec:02:dd:f4:55:b4:
         40:0c:d2:9d:56:44:99:85:72:b1:d3:da:15:5a:e0:78:41:87:
         a1:17:e4:43:fa:dd:0e:46:34:eb:cb:9d:82:40:8c:83:f8:ed:
         01:24:14:41:9f:72:df:e8:b1:e9:fc:be:62:c8:52:76:97:d7:
         23:f0:c8:ad:35:0a:2d:b1:46:52:a5:49:6f:59:ee:f4:ce:ae:
         ab:c1:42:29:db:71:c1:43:f3:b1:89:f7:23:d7:c6:25:d7:86:
         f6:fd:57:d1:61:fb:29:86:33:1c:a7:9c:96:db:d0:48:86:ce:
         6b:6c:46:66:21:a3:cf:c8:53:58:49:94:63:08:74:9f:bd:62:
         70:cf:d2:2a:64:a3:c2:32:6c:31:6a:79:a6:39:d8:cf:7c:bf:
         60:e3:cd:ac:26:8c:63:bb:08:0b:01:df:65:3c:25:39:bc:a4:
         46:7b:89:4a:8f:52:eb:b4:b5:8c:3c:c2:fd:88:36:a4:47:02:
         9a:da:66:97:70:da:24:d9:55:99:fa:89:d8:29:81:7f:98:28:
         ae:56:22:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:14 2023 by rpki-client on console-ams.rpki-client.org