Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B9B3CE2EAF511EB80321B4DD8A014CE.roa
File:                     3B9B3CE2EAF511EB80321B4DD8A014CE.roa (raw, json)
Hash identifier:          21cqsf1kkadnxHAYK8Fz76w0x+XsANVZBvNxtrhVkEw=
Subject key identifier:   0B:95:98:65:A5:E5:6E:0B:61:90:EB:15:88:04:9D:F7:8F:0F:6B:B0
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       07CA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B9B3CE2EAF511EB80321B4DD8A014CE.roa
Signing time:             Thu 22 Jul 2021 14:01:07 +0000
ROA not before:           Thu 22 Jul 2021 14:01:02 +0000
ROA not after:            Thu 22 Sep 2022 14:01:02 +0000
asID:                     1239
IP address blocks:        156.236.238.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1994 (0x7ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jul 22 14:01:02 2021 GMT
            Not After : Sep 22 14:01:02 2022 GMT
        Subject: CN=60f97a23-25f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:53:c6:00:14:79:33:b5:b5:ba:11:3a:f6:44:
                    db:c9:69:01:05:39:66:66:e1:ef:e8:42:df:ae:96:
                    81:75:10:08:b3:3d:b2:f5:be:af:61:bf:c1:d1:6e:
                    5d:1e:0a:94:61:e7:aa:3b:a1:cd:7e:30:49:c4:ed:
                    f6:1e:c0:b8:c5:4b:d6:8a:67:65:92:ea:e9:57:ad:
                    b4:41:de:18:1a:b6:0e:fe:8d:a7:e2:44:9a:63:2b:
                    c6:52:e9:c5:1e:57:14:68:bc:9c:e9:a2:65:72:39:
                    6b:51:3f:1c:bf:83:bc:dd:b8:fc:62:22:0c:5c:c1:
                    9c:74:86:f3:1f:f7:19:80:25:31:2e:0d:5a:38:36:
                    e9:1d:38:3f:54:c0:1d:e3:d6:9d:c4:dd:c6:24:d3:
                    ae:90:c1:ee:db:e1:a7:c6:85:e6:d0:4e:f2:52:4d:
                    81:64:18:ca:49:f3:4c:06:38:30:eb:67:13:a4:7a:
                    a5:3f:68:f8:fd:23:aa:0f:86:d9:5b:9c:65:17:51:
                    12:f6:96:05:21:99:dc:6f:b8:25:dd:17:f2:92:7c:
                    7e:b8:01:5b:57:be:3d:21:8e:7b:48:63:89:b6:2e:
                    ba:c0:a1:3b:59:6e:03:00:a8:b4:fa:1c:3a:ad:37:
                    e6:62:6e:3c:19:3c:00:25:bb:61:a6:96:9e:71:42:
                    11:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:95:98:65:A5:E5:6E:0B:61:90:EB:15:88:04:9D:F7:8F:0F:6B:B0
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B9B3CE2EAF511EB80321B4DD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.236.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:1e:1d:21:0c:39:eb:25:2a:91:31:88:ab:64:27:e3:ed:7e:
         a2:ea:9b:08:7d:b3:e2:75:25:3b:16:d2:78:20:e3:57:2a:ad:
         b2:45:14:f1:bc:ec:75:14:5b:92:ed:81:04:da:3c:11:33:bd:
         5e:81:d3:19:cb:3f:a7:43:c4:50:ee:1b:56:a6:f9:9c:9d:17:
         76:4a:da:d1:71:55:6b:ac:90:07:f6:c8:fd:e3:43:85:f3:84:
         da:a4:ae:70:ed:7e:e8:fb:4e:7b:1c:bc:31:8a:f5:42:88:8b:
         db:1a:c6:8e:2a:cd:3a:2d:d0:b9:88:9a:2f:10:17:1d:2e:ac:
         51:72:d6:76:29:bd:9f:d1:13:43:96:e0:2d:59:2c:48:eb:36:
         1b:23:b3:b6:a7:e2:7b:27:81:91:92:73:ae:eb:e8:ef:9f:57:
         22:c8:12:61:c3:e6:b5:db:eb:4a:c0:9e:68:ba:b1:2e:e6:a3:
         3e:25:1e:b3:a4:bc:1c:f4:cf:8e:a2:e5:85:bb:32:12:bd:e8:
         66:51:39:a3:28:99:c4:12:8b:9a:cd:09:e1:98:4a:1d:92:10:
         6e:69:13:7b:b8:53:c2:25:1e:cb:d2:7b:7e:8a:6b:c0:f5:b7:
         21:62:47:87:35:42:c1:68:25:03:d9:a5:7d:b3:3f:fd:6b:c6:
         89:7b:71:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:19 2023 by rpki-client on console-fra.rpki-client.org