Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2129C6F6391C11EC9A282D6AD8A014CE.roa
File:                     2129C6F6391C11EC9A282D6AD8A014CE.roa (raw, json)
Hash identifier:          xHqfSwXUHy6skelOFQgHHsWOALUfWnvW3kaJ1fooIqg=
Subject key identifier:   64:87:34:2F:92:FE:7C:D5:D1:65:8D:22:F1:85:25:8B:20:F9:54:A6
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0C65
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2129C6F6391C11EC9A282D6AD8A014CE.roa
Signing time:             Sat 30 Oct 2021 00:55:52 +0000
ROA not before:           Sat 30 Oct 2021 00:00:49 +0000
ROA not after:            Sun 30 Oct 2022 00:00:49 +0000
asID:                     139879
IP address blocks:        156.249.128.0/17 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3173 (0xc65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 30 00:00:49 2021 GMT
            Not After : Oct 30 00:00:49 2022 GMT
        Subject: CN=617c9818-21f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b7:86:2b:73:16:55:4a:33:c0:da:15:7d:9b:
                    e1:f1:c0:5b:55:fc:de:ce:36:01:d0:fb:ec:84:fe:
                    8d:11:02:88:12:ef:db:0a:28:16:7b:b5:d9:e6:23:
                    4a:ec:68:81:83:72:85:88:91:8b:bc:9d:ba:19:9b:
                    cb:4a:0e:6e:83:25:3b:77:39:96:d9:b4:25:e9:c6:
                    2a:e7:7f:6c:c9:33:6d:e0:a5:29:45:d6:47:c3:3f:
                    94:08:37:03:15:90:1a:58:7e:00:56:b4:eb:16:ae:
                    84:f6:b4:78:fb:0e:ff:fc:5c:47:39:48:cb:da:6c:
                    c6:3f:11:db:36:b5:59:a2:c7:30:cc:ea:38:2e:86:
                    37:3a:cf:23:ea:88:69:04:0c:b0:fb:a9:ff:15:de:
                    64:89:e2:fa:8a:a4:aa:d1:6e:6b:48:87:4a:ff:a2:
                    7c:59:48:db:03:c9:70:1f:b8:ec:35:39:64:cb:40:
                    55:33:bf:dc:cf:72:af:25:25:b9:3d:eb:9a:36:2b:
                    e4:d9:02:ec:80:fe:2e:2b:11:77:1f:e8:ce:60:ae:
                    d9:da:72:e3:34:e9:e0:4e:4c:59:f8:19:b7:14:17:
                    a4:27:24:5e:b8:1e:92:d4:0f:94:74:22:5d:b6:8a:
                    5f:dd:75:9f:a3:0e:62:12:7c:2a:ae:0e:d2:88:8c:
                    e4:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:87:34:2F:92:FE:7C:D5:D1:65:8D:22:F1:85:25:8B:20:F9:54:A6
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2129C6F6391C11EC9A282D6AD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.249.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         4c:f6:71:1a:a4:6e:59:86:33:67:29:8b:7e:de:f0:aa:52:86:
         95:7f:db:63:84:54:47:06:43:a4:2c:bf:ab:d8:51:22:da:3e:
         49:82:e0:ae:67:63:ac:7a:fb:f1:97:ed:3d:f4:b9:ba:ec:85:
         1d:6b:26:17:7c:c9:d9:ed:6d:57:f6:b7:4d:8c:db:c5:19:b8:
         0d:1c:d9:c6:ce:43:ee:6b:c4:25:bd:56:62:b2:f4:d2:24:05:
         c7:dd:db:8c:3c:a3:96:6c:09:01:1f:4e:8d:df:cd:c2:1e:22:
         15:6b:ed:6e:fa:b0:05:3c:69:1e:4a:14:31:92:2b:3a:b8:c8:
         cf:a0:56:8a:73:52:2c:41:f8:80:98:43:24:6b:d1:57:db:f3:
         c0:4c:51:f2:65:d0:71:b2:39:89:cd:1c:1f:a5:8b:e5:1c:ae:
         06:92:1d:7a:f3:5d:54:b5:5f:27:04:66:20:2c:84:c1:79:49:
         98:dc:90:5d:d2:da:c7:bc:a1:82:29:42:4f:83:8c:d3:9a:41:
         94:25:30:59:dd:4b:a7:69:21:10:09:7e:24:63:1f:35:37:a8:
         ce:ee:0b:b0:ff:69:03:f5:51:f5:36:20:d3:ac:8a:e4:84:18:
         57:0a:bb:13:06:31:f1:64:6a:9b:26:42:6a:7a:52:f8:1b:7c:
         79:d2:08:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:15 2023 by rpki-client on console-ams.rpki-client.org