Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/15E6B79C599A11EC96045C835A40D577.roa
File:                     15E6B79C599A11EC96045C835A40D577.roa (raw, json)
Hash identifier:          u+x2JVY0N+KtVw9bbX8eS5UlSi3yIEpJ9gK2XMiev+o=
Subject key identifier:   1C:D7:A6:77:0A:86:EA:19:FB:AC:06:2F:91:CE:86:70:9E:EB:1C:1C
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       10CE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/15E6B79C599A11EC96045C835A40D577.roa
Signing time:             Fri 10 Dec 2021 09:18:07 +0000
ROA not before:           Fri 10 Dec 2021 09:18:03 +0000
ROA not after:            Fri 30 Dec 2022 09:18:03 +0000
asID:                     133201
IP address blocks:        156.253.64.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4302 (0x10ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 10 09:18:03 2021 GMT
            Not After : Dec 30 09:18:03 2022 GMT
        Subject: CN=61b31b4f-e9da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b0:ee:46:4c:94:9a:6b:31:4a:62:07:48:f6:
                    f5:32:da:23:0e:52:f1:10:b6:39:a0:01:9d:bd:5a:
                    85:f9:91:c7:fc:ab:12:a5:7c:ca:d0:de:9d:80:41:
                    33:e4:f5:6a:d0:a7:e1:b3:a2:30:d0:2c:8c:03:f3:
                    2b:09:f4:13:1e:e0:8b:5a:60:d6:23:5d:4b:03:c1:
                    27:68:fe:a1:73:d4:82:6d:86:4d:59:16:a4:91:74:
                    3b:11:c0:a5:8e:de:76:b9:8b:b1:59:93:f9:62:a9:
                    7a:47:4b:15:de:e3:6f:13:d6:6e:3d:2b:e6:af:2e:
                    e2:6e:82:6a:f4:4c:b1:14:86:8a:b2:50:6d:fd:42:
                    8d:64:0c:8e:b1:40:1e:00:18:f2:a8:93:5b:3e:da:
                    98:38:48:aa:20:a6:8d:ef:b0:27:5d:52:d2:2a:40:
                    e7:72:c7:7c:b2:c7:5f:0e:1c:90:56:4e:b5:42:76:
                    cb:62:bb:77:ae:fa:df:ff:5c:2e:4b:de:1a:80:14:
                    60:54:c2:c2:bf:e8:e4:c3:0d:5c:f5:8a:f3:52:04:
                    e9:02:8c:e8:33:66:e1:e5:b3:0f:1c:fc:e6:fa:45:
                    38:2c:c0:22:72:07:54:c0:cb:bb:e2:67:0f:d4:2a:
                    a4:94:29:19:f6:70:9e:ce:f8:c8:2b:f3:36:83:ea:
                    52:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:D7:A6:77:0A:86:EA:19:FB:AC:06:2F:91:CE:86:70:9E:EB:1C:1C
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/15E6B79C599A11EC96045C835A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.253.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         37:8d:73:a2:36:8c:76:67:bc:66:1e:b0:58:d7:01:7e:44:17:
         41:2d:0c:e7:41:d5:16:cf:73:cc:41:42:8f:32:d1:bb:1c:ad:
         3d:32:ec:00:81:28:44:6d:7c:1f:72:c6:ae:f1:c9:36:00:1e:
         ab:dd:e5:28:d7:8e:d6:94:b5:f4:87:d4:5f:4d:57:c5:59:2c:
         0a:76:92:8f:11:07:25:be:06:09:16:ad:91:b4:97:86:59:f8:
         7d:b1:e7:5a:55:12:8e:8e:fd:60:6e:92:a3:5b:9e:52:be:a2:
         1e:ef:55:3f:cd:f5:c5:cc:f3:e0:48:ef:d7:9a:79:ac:33:a6:
         63:5f:b8:93:9f:f4:22:6c:8b:cc:92:8f:b2:64:61:13:70:93:
         e3:b9:f5:82:e7:d4:1c:b4:7a:5b:9b:cf:96:96:84:d6:a8:ae:
         c2:89:08:7b:20:c7:16:8c:e2:1d:23:26:64:d0:1f:85:de:59:
         b3:dc:1e:53:13:42:81:00:37:22:10:6f:d6:3b:4a:fe:57:f2:
         a9:ea:32:25:13:87:af:3e:04:5a:a9:13:e3:bd:43:62:5e:74:
         4a:a7:77:2f:54:85:72:00:7b:96:22:59:e1:e0:10:b7:d8:a5:
         a4:f9:e4:a4:c3:9b:6d:7a:1f:a5:21:cd:a9:90:7f:35:fc:9b:
         bd:1d:f5:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:17 2023 by rpki-client on console-fra.rpki-client.org