Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1C13A5CCC47E11EC937BBF8CF1222468.roa
File:                     1C13A5CCC47E11EC937BBF8CF1222468.roa (raw, json)
Hash identifier:          3TL5Jql5LqnF0cQczj/Qk9MeFM9Mh2+s+KWvEmyJ41M=
Subject key identifier:   25:1A:EC:0E:E5:AD:09:17:16:4B:DE:18:0E:4E:C0:0A:7A:0D:1B:1F
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       138C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1C13A5CCC47E11EC937BBF8CF1222468.roa
Signing time:             Mon 25 Apr 2022 09:57:26 +0000
ROA not before:           Mon 25 Apr 2022 09:57:22 +0000
ROA not after:            Mon 30 Jan 2023 09:57:22 +0000
asID:                     139057
IP address blocks:        156.251.76.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5004 (0x138c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Apr 25 09:57:22 2022 GMT
            Not After : Jan 30 09:57:22 2023 GMT
        Subject: CN=62667086-c69e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:30:69:31:72:ae:8a:59:71:3e:6f:95:95:db:
                    fc:e5:f1:6b:1b:b8:67:e3:16:fa:39:ca:13:7e:ba:
                    cb:69:e3:ea:f7:cc:f6:50:54:12:85:29:0a:b5:f6:
                    a8:29:ee:e6:07:f6:e7:c1:08:8d:d5:41:c8:c6:cc:
                    30:7d:06:e5:fb:49:56:b7:1f:13:c5:b6:eb:f9:a7:
                    da:f6:10:f3:c2:e7:16:9f:6a:f4:86:ff:c8:80:90:
                    4c:8f:0f:8f:a6:85:6d:38:b4:92:f9:70:e6:61:c6:
                    cc:8b:5d:4d:ed:50:c5:e4:5e:fb:59:e6:23:35:3e:
                    2d:83:9b:53:44:52:10:a0:42:58:ff:d7:77:10:f3:
                    89:9f:3c:28:4b:a3:2e:a6:3c:6b:e1:17:20:6b:68:
                    c6:fc:85:2d:01:1a:6d:0b:23:26:38:00:9c:16:47:
                    b6:02:e4:32:53:9c:3e:c7:dc:25:92:73:ed:55:2f:
                    0b:2c:9f:9f:e1:ab:52:5d:6b:f2:95:02:a6:f2:2e:
                    85:7f:ad:2a:14:76:d4:0d:7c:d8:04:62:83:ff:91:
                    45:53:b9:9b:ca:c7:49:f9:06:de:e8:d4:03:22:77:
                    1f:ff:e9:21:b2:f5:d7:9c:92:f4:12:df:c5:da:1d:
                    4c:b0:e8:27:59:c9:01:ef:79:1f:82:19:31:14:f0:
                    31:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:1A:EC:0E:E5:AD:09:17:16:4B:DE:18:0E:4E:C0:0A:7A:0D:1B:1F
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1C13A5CCC47E11EC937BBF8CF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.251.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:18:25:94:59:d6:b0:38:19:9f:b4:c4:24:db:0d:1f:8d:46:
         f0:66:5d:18:a3:52:e8:be:6e:53:69:ed:8c:01:8d:95:be:34:
         a7:09:b8:da:3b:d4:f7:4a:2c:33:2a:05:72:fe:9e:cc:ae:69:
         13:56:e6:17:03:08:aa:7c:d5:d4:76:23:a3:e2:07:87:b6:58:
         b1:94:87:b0:7e:09:98:91:4b:b0:56:13:77:b9:2d:21:f9:8e:
         54:b8:01:5b:80:6c:b2:7e:01:d0:fc:6b:7e:37:d6:08:a9:a7:
         5c:fe:24:e7:18:1d:29:e6:50:96:65:b5:9a:77:f2:80:d3:11:
         20:13:8c:41:cc:cb:7f:f4:bc:a6:2d:2f:34:57:fa:4d:96:25:
         90:b0:b2:c0:19:27:f1:55:0a:75:5a:85:8c:77:ef:13:2b:af:
         f4:ac:19:2e:fe:4a:64:c0:5d:df:4d:50:aa:3e:29:2b:3d:f9:
         c3:9a:6a:d2:8a:bc:6c:26:6e:64:c4:94:99:9e:a6:f8:1f:cf:
         9b:1a:2f:1d:be:dd:c8:9d:b7:a3:ac:f0:f4:5f:38:a5:36:ef:
         04:8b:aa:d0:73:b6:67:44:63:1b:78:67:cc:f9:9d:7a:a4:15:
         e1:9b:65:50:73:c3:60:2d:ef:ab:1a:81:6e:9b:76:0f:45:b7:
         b4:9e:ff:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:15 2023 by rpki-client on console-ams.rpki-client.org