Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/156282AAE7C111ECA58021A0F1222468.roa
File:                     156282AAE7C111ECA58021A0F1222468.roa (raw, json)
Hash identifier:          XCTdh/hdvDKfScHxZfMDgMsg/LCRqKz2xcH0MdbJ5Uk=
Subject key identifier:   65:83:15:2A:4E:76:AD:EA:EC:54:25:E9:BB:22:97:FC:38:43:EA:B7
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       1452
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/156282AAE7C111ECA58021A0F1222468.roa
Signing time:             Thu 09 Jun 2022 06:55:02 +0000
ROA not before:           Thu 09 Jun 2022 06:54:58 +0000
ROA not after:            Fri 30 Jun 2023 06:54:58 +0000
asID:                     133199
IP address blocks:        156.224.3.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5202 (0x1452)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jun  9 06:54:58 2022 GMT
            Not After : Jun 30 06:54:58 2023 GMT
        Subject: CN=62a19945-05f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3f:31:c5:b3:6a:d6:38:63:47:a1:1c:91:87:
                    9b:a6:36:f8:5f:7b:6c:15:dc:bb:57:71:ff:1f:ab:
                    30:7e:76:d5:4d:c7:43:68:28:8e:84:4e:3a:a7:1f:
                    49:14:44:35:c8:67:8c:c0:52:31:4a:c9:c2:0d:76:
                    30:5c:9f:ab:38:a4:a6:98:7d:84:35:b4:70:63:33:
                    bf:57:b9:44:99:75:4d:74:f1:35:c1:e1:12:46:bf:
                    89:6e:6e:63:3f:82:87:2b:3b:cf:9b:85:7f:45:62:
                    c3:08:d3:25:ae:3e:11:4f:66:00:d6:86:b5:b8:74:
                    28:93:65:47:e0:6d:bb:00:99:72:9e:2e:ed:9f:8c:
                    ad:89:3a:33:ac:d3:54:10:bd:8d:48:93:e3:6a:2f:
                    b9:84:92:3c:26:07:b2:a2:09:57:b6:bf:5f:35:4a:
                    32:24:74:7c:6a:4e:78:ef:c5:f4:a9:a6:fb:31:2d:
                    1c:f4:5e:b4:c3:48:b3:19:36:3b:46:4d:49:f2:73:
                    4d:c2:73:2c:07:d7:51:1d:1f:5c:2a:88:27:68:38:
                    e9:05:de:f2:41:42:fc:3e:93:86:d8:c4:c3:1a:36:
                    35:c6:36:36:c2:d3:cf:d2:3a:ee:ff:8a:41:99:40:
                    92:aa:e6:be:75:74:68:5a:02:d3:6e:c7:bc:3b:ca:
                    81:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:83:15:2A:4E:76:AD:EA:EC:54:25:E9:BB:22:97:FC:38:43:EA:B7
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/156282AAE7C111ECA58021A0F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.224.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:34:73:0a:79:e9:69:dd:15:6a:5a:02:d7:92:f1:6b:1b:1a:
         87:68:71:89:11:48:25:f5:ad:ec:94:ee:3a:32:76:91:3c:1a:
         85:8e:39:d1:a5:05:9a:6b:4d:42:62:ca:14:8b:81:53:82:8a:
         f1:90:97:f0:f3:8d:b5:92:cc:f9:04:f7:1e:03:37:00:8f:86:
         c8:36:60:95:fd:e7:fd:9b:5b:c8:7b:0e:dd:3b:f6:f3:db:cb:
         b3:25:51:02:36:76:0e:64:ab:89:a4:ff:72:2e:de:01:b9:77:
         80:70:e5:5e:c9:cb:26:0e:f9:84:16:db:22:51:70:6f:5b:b0:
         02:b0:48:bc:85:27:89:91:b3:36:ca:ce:78:c5:2b:ce:f9:85:
         05:f4:62:d1:0e:4f:e9:7b:55:e3:a6:16:35:f9:45:86:dc:c3:
         e4:23:06:cb:54:b2:6c:c6:77:04:79:14:22:61:ce:fa:1f:a1:
         cd:82:7f:5a:c5:17:fe:e5:a3:63:2c:92:6e:d2:ae:c8:84:d4:
         a5:4f:4c:bd:cb:cf:99:6f:56:12:ce:86:a0:3b:93:20:d8:5a:
         68:57:59:a8:d4:91:9a:1f:60:71:15:fb:0c:10:d9:1d:5e:fd:
         fa:1f:b1:12:5f:bc:d3:47:4c:2b:98:10:88:9c:fc:36:47:c4:
         08:c8:26:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:17 2023 by rpki-client on console-fra.rpki-client.org