Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0F5B700234D711EDBFEA7EB0F1222468.roa
File:                     0F5B700234D711EDBFEA7EB0F1222468.roa (raw, json)
Hash identifier:          NODCVfUPb65jHgwiLUJ7Kz+UPezdCc/Kjky65Ot4ck4=
Subject key identifier:   E5:63:69:FB:D7:B9:C7:12:BB:74:69:66:5A:6B:8C:20:42:F7:9D:B6
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       17B8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0F5B700234D711EDBFEA7EB0F1222468.roa
Signing time:             Thu 15 Sep 2022 09:16:20 +0000
ROA not before:           Thu 15 Sep 2022 09:16:14 +0000
ROA not after:            Fri 30 Dec 2022 09:16:14 +0000
asID:                     35916
IP address blocks:        156.250.32.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6072 (0x17b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 15 09:16:14 2022 GMT
            Not After : Dec 30 09:16:14 2022 GMT
        Subject: CN=6322ed64-2ede
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ce:d3:bc:db:63:e1:5f:c6:dd:c6:12:59:f0:
                    1b:93:29:98:fc:5f:55:06:a0:69:e1:d0:56:bf:95:
                    39:22:17:fe:60:eb:93:d5:37:e1:52:ce:9c:de:12:
                    43:5b:c8:65:b0:5b:5b:01:57:7b:e6:b7:4b:77:44:
                    4c:b3:04:5e:a8:e4:59:b8:b2:94:0e:bd:fb:b6:0f:
                    9b:60:d9:c4:12:a6:d8:bd:7d:9f:a0:5c:8f:a0:b4:
                    fc:58:e7:80:4a:cc:0b:f2:c2:a9:1d:f0:33:7b:ad:
                    1e:e5:9d:71:2a:c1:81:e4:bb:00:46:1a:64:ed:3f:
                    70:c4:8a:66:35:63:c4:c8:11:1f:08:3d:98:b2:18:
                    4e:2b:64:b0:96:fe:58:57:03:53:19:0f:a1:90:85:
                    4f:52:4c:22:c7:cc:30:cf:bb:e5:3e:e9:e1:39:36:
                    05:2f:04:ec:1b:96:98:6f:2e:71:3c:9a:a0:4c:c4:
                    60:12:b2:05:da:c8:e3:ea:22:14:b5:54:2a:e8:b3:
                    f3:3a:da:be:66:92:61:13:84:4b:8c:a6:aa:9e:5b:
                    62:f9:21:f8:70:4c:18:87:ce:3e:a9:d9:0c:98:fd:
                    89:6c:b1:72:1d:ed:68:5b:fc:7c:ff:b2:84:ca:9f:
                    ec:98:b0:ab:72:36:2c:53:d0:2e:11:b2:98:98:e9:
                    d6:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:63:69:FB:D7:B9:C7:12:BB:74:69:66:5A:6B:8C:20:42:F7:9D:B6
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0F5B700234D711EDBFEA7EB0F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.250.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         19:cd:da:33:8a:15:fd:b8:41:64:f1:cf:a3:5c:50:7b:a5:e2:
         56:79:d3:19:a3:5f:e8:42:d9:83:c7:d5:76:d2:92:b4:de:a2:
         59:39:99:16:2c:34:47:31:52:3c:e5:5c:e7:10:1e:c4:d9:d0:
         5a:de:6f:dd:f3:a1:c7:8f:5a:ac:1a:0d:86:e7:01:28:01:a7:
         83:7d:01:48:ad:b7:2d:b3:ef:57:05:df:4f:7f:b1:3a:c3:3c:
         3a:df:dd:c0:3a:00:4d:4a:cf:9b:c1:d1:df:2f:e6:f8:38:77:
         93:45:70:f4:1b:3c:00:92:85:81:7b:7b:88:4e:22:c9:5b:af:
         1d:a9:9c:b1:02:c2:78:c2:78:5c:71:d4:81:86:37:ce:af:1f:
         44:e8:d2:5a:0b:7a:bd:fd:1a:e8:a7:06:88:1e:90:19:a2:3e:
         0d:f4:00:40:3d:91:fa:22:39:8b:de:c4:68:b3:43:0a:0a:b0:
         4b:d5:28:b8:1d:35:59:4e:10:ed:5c:09:16:67:71:39:07:cb:
         07:23:ee:c4:0d:1d:60:81:6a:e4:27:1b:cc:fd:1a:75:5f:4c:
         c0:ec:6a:38:16:ee:31:1e:96:50:71:ed:9c:f5:db:8d:b9:07:
         96:f3:7e:84:9e:07:f5:65:34:70:30:dd:41:f1:bc:55:a4:7d:
         8e:75:ee:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:15 2023 by rpki-client on console-ams.rpki-client.org