Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/30D33B76EAF411EB91927F4BD8A014CE.roa
File:                     30D33B76EAF411EB91927F4BD8A014CE.roa (raw, json)
Hash identifier:          Lt8YtENxJBDyIRk24BDvduNBrur2xMNSTUQbVYAtG14=
Subject key identifier:   A7:3A:C6:4B:46:84:1A:9F:B0:F1:8E:A2:D2:CE:3D:AC:76:E1:07:EF
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       07B2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/30D33B76EAF411EB91927F4BD8A014CE.roa
Signing time:             Thu 22 Jul 2021 13:53:39 +0000
ROA not before:           Thu 22 Jul 2021 13:53:33 +0000
ROA not after:            Thu 22 Sep 2022 13:53:33 +0000
asID:                     1239
IP address blocks:        156.236.235.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1970 (0x7b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jul 22 13:53:33 2021 GMT
            Not After : Sep 22 13:53:33 2022 GMT
        Subject: CN=60f97863-6c8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d8:78:bd:bf:1a:70:04:02:45:3f:af:43:a6:
                    80:79:cb:b2:5e:bc:d0:71:92:c0:b8:17:02:f2:b4:
                    79:0b:e8:dc:8d:81:61:bb:7b:2a:c0:3b:90:4c:34:
                    cf:7f:3c:c6:9a:24:f0:8f:a3:5e:ad:f6:51:45:ee:
                    e7:7f:6d:06:5f:5f:77:d5:8a:be:e5:ef:c5:15:d8:
                    d6:05:44:56:f5:12:b7:0a:30:43:71:25:cc:14:6b:
                    bc:dd:fb:7a:ad:0e:00:69:21:d7:2c:98:f0:55:df:
                    42:15:ae:26:39:e7:2d:42:d0:2d:eb:15:13:54:65:
                    4e:d1:4c:89:84:e2:e6:37:b9:db:e5:c6:52:4d:23:
                    fc:7a:67:3e:62:98:cd:1c:ff:17:b7:9f:01:d3:b1:
                    b8:57:cb:29:56:b4:6d:df:8e:a0:63:e5:22:82:80:
                    7b:05:12:59:ca:1c:12:3e:fa:d9:14:b9:57:38:15:
                    2d:37:b8:e4:f8:34:28:4d:43:43:3b:3f:0a:f8:8c:
                    74:2f:cc:06:13:9d:c7:6f:41:ed:4e:2d:92:84:6d:
                    d2:dc:08:40:6e:0d:f0:28:8e:68:34:dc:90:44:75:
                    5d:4d:97:22:55:21:09:e5:44:5c:76:01:87:8b:96:
                    80:4a:6d:c0:ad:44:81:5b:1c:17:78:3c:b8:62:a7:
                    0a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:3A:C6:4B:46:84:1A:9F:B0:F1:8E:A2:D2:CE:3D:AC:76:E1:07:EF
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/30D33B76EAF411EB91927F4BD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.236.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:bb:3e:a6:cc:6b:fd:20:dd:cc:23:1b:4f:27:ec:d2:4c:4c:
         f1:0a:44:c5:d2:7a:aa:ca:9a:74:84:ce:fc:8f:8e:ad:6f:17:
         0d:96:75:cc:28:d8:ed:b6:03:b3:9c:2d:7c:97:b2:7d:77:d0:
         aa:e4:1f:e0:0b:f9:9e:89:33:f9:55:c7:cd:d9:59:ad:a6:07:
         4c:c0:da:5a:ce:28:5e:18:82:15:da:c5:06:1f:56:d1:f7:25:
         8e:d8:19:fd:a4:da:58:c2:e2:58:f5:06:79:94:ba:6c:5b:c9:
         95:56:e6:d1:a8:cd:99:49:d6:c0:d0:53:f9:22:e9:4b:09:36:
         e0:68:c7:ec:b5:34:4c:60:b3:89:61:ac:68:93:54:80:93:be:
         31:56:12:a8:f6:84:32:6f:92:2f:c4:70:34:86:d9:5e:d3:f3:
         67:d0:f5:26:9a:50:b4:5a:45:6e:40:2b:ae:90:6f:66:6e:ff:
         1a:0c:b5:6e:ea:fd:40:70:1b:7a:73:84:4e:e2:b1:b6:e7:b0:
         9f:06:0f:b1:ea:fc:64:ee:39:93:9a:01:62:fc:9a:28:e3:5b:
         6a:39:6a:1b:33:bd:00:4e:8c:2a:4f:58:9a:20:aa:46:c1:21:
         c2:e9:2b:1e:ee:c0:34:02:8f:d4:28:18:89:dd:cc:2d:43:98:
         22:0c:ed:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:16 2023 by rpki-client on console-ams.rpki-client.org