Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/03D1BE803B0311EDA3C2648BF1222468.roa
File:                     03D1BE803B0311EDA3C2648BF1222468.roa (raw, json)
Hash identifier:          StAjm+ANjvvsZCMl+avyoNFYMaRUZ0PehVweywQDQv4=
Subject key identifier:   23:37:9A:20:82:23:07:CF:03:15:78:DD:7A:14:A0:38:A8:20:52:38
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       184E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/03D1BE803B0311EDA3C2648BF1222468.roa
Signing time:             Fri 23 Sep 2022 05:46:05 +0000
ROA not before:           Fri 23 Sep 2022 05:46:02 +0000
ROA not after:            Mon 27 Feb 2023 05:46:02 +0000
asID:                     7018
IP address blocks:        156.243.192.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6222 (0x184e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 23 05:46:02 2022 GMT
            Not After : Feb 27 05:46:02 2023 GMT
        Subject: CN=632d481d-caf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d4:6b:f5:9c:51:44:82:4c:2b:8f:cb:97:32:
                    03:bf:aa:6e:3f:bd:a3:e9:c3:ae:c8:9b:46:71:f8:
                    0e:e4:86:f6:92:dd:a9:59:52:1e:15:04:bc:8e:97:
                    2a:25:5b:55:d7:62:0d:8d:42:42:02:15:fd:73:d5:
                    b0:42:4d:83:97:f7:f6:59:83:25:12:86:b0:e2:e1:
                    10:1e:0c:75:5a:f0:13:b3:db:b0:fb:8d:3a:d9:e8:
                    a7:86:09:b9:c7:80:19:c7:a9:98:a0:d1:e2:72:e4:
                    a9:1c:9e:5c:bd:3d:e9:67:11:57:f7:89:ba:f0:56:
                    90:49:c7:fb:ac:ae:be:0f:a9:d3:c0:34:05:36:ce:
                    cf:96:1a:48:63:8c:95:16:35:f0:e7:31:09:63:2b:
                    b7:1e:54:69:a7:13:28:c1:42:a3:68:f9:db:e8:d1:
                    ab:6e:06:1a:9e:91:7d:10:f7:cb:05:26:ae:6d:bc:
                    eb:8e:cb:c7:01:7b:86:b7:86:de:3a:49:22:f9:88:
                    8e:9a:c6:25:9b:c6:86:25:3f:0c:34:78:b2:b6:5a:
                    71:2e:b8:f4:df:f3:f6:98:30:81:6d:5e:34:ec:15:
                    a5:59:98:1a:16:3c:62:f9:a2:68:6b:e4:fd:9a:6b:
                    ed:b3:43:66:3f:77:d5:6d:e2:6a:19:8e:df:d6:1a:
                    42:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:37:9A:20:82:23:07:CF:03:15:78:DD:7A:14:A0:38:A8:20:52:38
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/03D1BE803B0311EDA3C2648BF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.243.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         99:58:01:0c:eb:22:60:03:b7:ef:45:00:30:1e:4a:3a:bb:17:
         3b:cc:81:b9:9a:3f:ff:b9:7a:fe:79:a5:40:a3:e7:dd:6d:36:
         af:00:5a:ce:dc:83:a8:49:7d:00:fc:6a:97:3a:c6:ce:a2:c9:
         58:a1:84:01:19:a7:5b:94:3b:23:a3:62:6b:09:a8:bc:c9:02:
         3d:86:d7:00:ee:01:7c:c3:49:2f:24:2a:d1:6b:92:75:de:ed:
         b0:99:05:c9:55:c9:90:0f:a7:1b:15:05:42:53:ef:0a:33:73:
         4b:18:3c:de:6c:4d:39:45:bc:84:bd:07:7e:e5:85:e2:ef:76:
         51:f2:04:02:4b:f2:73:4f:e2:7b:03:b0:96:c7:f5:63:c8:2d:
         9d:e6:de:25:e6:db:54:0c:48:46:fc:4e:19:27:c6:21:68:ff:
         38:f5:19:27:8b:06:cb:62:d6:24:94:d8:26:07:ef:d9:3d:87:
         c2:d2:6e:09:a1:1a:61:c1:ac:1a:b7:93:07:cb:79:c2:c4:4d:
         a2:a0:49:cb:7c:ef:9b:27:e0:4f:c9:09:41:98:e2:ed:ef:9a:
         0d:73:07:55:70:4d:93:4b:8e:5a:33:18:6b:a1:a9:b6:4b:03:
         6f:0b:44:ae:44:53:5d:91:56:33:bd:79:31:c5:92:06:e1:c5:
         eb:45:09:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:16 2023 by rpki-client on console-fra.rpki-client.org