Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3270DD30488711ECA8398D38D8A014CE.roa
File:                     3270DD30488711ECA8398D38D8A014CE.roa (raw, json)
Hash identifier:          NNGpqBp9hYSiMKQ4egvQcznqMzIWdS5foEw8/ZSY7UY=
Subject key identifier:   AE:8A:C9:9A:35:DE:C3:62:2D:5B:C8:5C:4C:68:53:5C:B4:7D:18:95
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0D89
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3270DD30488711ECA8398D38D8A014CE.roa
Signing time:             Thu 18 Nov 2021 15:50:05 +0000
ROA not before:           Fri 19 Nov 2021 15:50:01 +0000
ROA not after:            Sat 19 Nov 2022 15:50:01 +0000
asID:                     139879
IP address blocks:        156.247.169.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3465 (0xd89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 19 15:50:01 2021 GMT
            Not After : Nov 19 15:50:01 2022 GMT
        Subject: CN=6196762d-05d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d2:d5:3e:b7:fb:93:76:3d:56:2c:3d:a2:dc:
                    8e:b6:08:85:2a:2a:da:5d:9f:57:ec:76:ea:95:a4:
                    1f:46:f3:ea:ca:c7:50:f3:63:da:c7:fe:b9:80:c8:
                    53:6d:2f:d0:61:3c:99:37:8a:ac:ae:b9:be:cf:64:
                    97:93:2c:84:3d:a6:d7:47:1e:d5:a3:bf:4f:33:79:
                    59:81:ab:5e:78:8f:61:16:95:d9:51:b0:25:9b:b8:
                    df:00:88:71:0b:0d:b2:30:14:5c:96:25:a2:b4:85:
                    72:a7:63:f9:84:c2:35:d0:a1:df:bb:9f:92:e6:d9:
                    fb:e6:4b:13:e7:eb:10:da:9e:68:2c:dd:ce:d6:cd:
                    a4:9c:90:c2:fe:43:23:e3:78:ab:f2:3c:83:12:06:
                    20:8d:c1:c1:b9:d4:df:2b:57:d2:72:a8:a2:f3:82:
                    a3:3b:f0:94:cc:10:1f:59:57:ba:8a:69:a1:ae:4c:
                    a2:12:70:e2:57:d0:81:7a:04:b4:c1:14:f7:59:06:
                    52:f9:85:22:f3:df:14:ed:31:6b:3d:57:ee:3b:a8:
                    71:52:43:4e:b2:df:1d:7b:62:30:0b:bc:36:0f:e8:
                    16:80:0d:50:ca:a8:1d:9d:d4:1f:e4:5e:e4:00:4b:
                    5f:6a:70:cd:6f:08:26:bd:56:80:d1:c1:fb:e4:80:
                    13:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:8A:C9:9A:35:DE:C3:62:2D:5B:C8:5C:4C:68:53:5C:B4:7D:18:95
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3270DD30488711ECA8398D38D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.247.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:a0:1e:ef:51:ee:34:de:5b:18:a8:89:90:28:3a:8f:e7:5c:
         65:cb:00:08:50:0d:26:1a:7f:41:62:84:4c:4b:ff:b6:ef:61:
         6c:4f:e6:b8:4f:83:aa:1c:70:f1:61:ba:5d:2c:42:ca:2e:26:
         ce:24:17:16:73:87:fe:51:7f:00:ad:3e:83:d0:e4:dd:b0:aa:
         1e:99:90:5f:4d:c1:bd:65:f3:d0:8b:87:99:65:52:ab:d5:c5:
         31:30:d6:fe:ea:0e:b2:3b:dc:e0:0b:bd:3b:50:7e:25:62:a1:
         ad:6b:51:77:12:03:9f:fb:46:6d:d0:41:93:f8:81:12:15:e7:
         2c:b4:82:0a:78:72:2a:45:0b:f9:fb:a4:87:a6:96:0e:f7:56:
         cd:85:80:30:69:67:17:bc:6c:cc:fb:ef:11:1b:ff:79:b4:a4:
         12:a9:22:0d:fe:1c:c4:56:bf:c6:5e:75:b0:32:df:50:89:f3:
         a3:23:94:60:c7:fb:a0:d0:04:f0:da:4f:04:cb:dd:67:a9:7c:
         f5:1e:b2:0e:1e:68:3f:b8:2d:a7:dd:d1:f9:26:1d:2b:31:41:
         58:90:50:25:0c:42:e6:cb:7a:32:58:00:6c:90:52:a8:2b:98:
         1f:64:19:77:ad:59:c8:22:2e:89:59:6b:f5:99:70:85:8c:33:
         72:b4:d9:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:18 2023 by rpki-client on console-fra.rpki-client.org