Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C535F2C488611EC9E2B7E36D8A014CE.roa
File:                     3C535F2C488611EC9E2B7E36D8A014CE.roa (raw, json)
Hash identifier:          7Scvl1ObJv92ItDPikb7PnA/oMgwXQqJjfhdtnRPjak=
Subject key identifier:   17:F2:2B:89:C1:69:AA:26:49:44:A4:1E:02:B8:C2:58:BD:89:D5:1B
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0D57
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C535F2C488611EC9E2B7E36D8A014CE.roa
Signing time:             Thu 18 Nov 2021 15:43:12 +0000
ROA not before:           Fri 19 Nov 2021 15:43:08 +0000
ROA not after:            Sat 19 Nov 2022 15:43:08 +0000
asID:                     139879
IP address blocks:        156.249.161.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3415 (0xd57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 19 15:43:08 2021 GMT
            Not After : Nov 19 15:43:08 2022 GMT
        Subject: CN=61967490-74f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f2:e9:3a:26:dc:3f:a9:bb:87:9e:4f:b3:a9:
                    71:dd:a2:78:13:93:04:78:1e:25:7a:c0:38:fd:14:
                    33:c2:28:90:5e:69:0b:95:29:5d:ef:1b:ce:0d:3e:
                    39:4b:69:d4:3c:7b:b3:41:89:d3:78:0b:5e:a0:1e:
                    68:92:d1:4b:d5:db:ea:52:cc:50:e6:64:60:f7:dc:
                    15:3d:84:ac:af:c3:92:82:28:61:42:3d:97:63:39:
                    f7:6b:34:f4:96:f7:77:94:33:18:3d:3a:e4:f4:c1:
                    90:1e:21:02:17:eb:2f:cd:97:14:99:ee:8c:bc:7e:
                    f0:61:cf:51:b1:42:ad:fc:c0:c4:3e:21:2a:0c:bf:
                    76:a6:d2:8a:33:88:c7:87:e8:f3:69:63:51:77:86:
                    63:b0:23:0a:ba:20:33:82:40:c5:cb:7d:5c:6f:6f:
                    b1:6e:30:b6:00:06:93:d2:2a:ae:e5:4a:d6:bc:33:
                    7b:d4:53:25:fe:9a:9f:55:ad:60:e5:60:8a:9f:ab:
                    3a:14:f1:56:24:a6:0c:d0:31:b4:6d:af:a4:85:bf:
                    b9:95:eb:f1:36:29:64:5c:34:eb:1f:3e:02:02:54:
                    a6:c6:51:37:b7:06:e4:e3:05:4c:c5:b2:63:86:fc:
                    b8:43:6a:19:1d:40:48:bb:72:5f:24:a8:f1:95:77:
                    79:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:F2:2B:89:C1:69:AA:26:49:44:A4:1E:02:B8:C2:58:BD:89:D5:1B
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C535F2C488611EC9E2B7E36D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.249.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:30:7e:08:8f:bd:82:fb:a0:5c:27:83:12:ae:bf:62:2a:b6:
         32:62:91:89:fc:c4:8b:7e:31:49:80:a9:4c:ac:74:b5:30:76:
         95:98:71:d8:48:07:bc:8f:50:02:85:4c:20:34:f5:57:07:b9:
         86:fb:ed:e6:61:89:fd:db:d2:91:bd:a8:07:f0:ef:23:01:99:
         74:45:7b:84:de:64:f5:4a:22:ca:0a:01:bd:51:56:12:df:3e:
         55:2f:3e:2a:78:11:4e:a8:85:f3:4f:7b:68:23:5e:08:46:f7:
         b6:8d:7d:5b:e8:63:19:d5:e6:4c:ee:3a:3f:31:c2:f8:c0:19:
         3e:0c:89:31:5d:2b:86:22:89:6f:ee:40:d0:e6:1c:15:8d:6d:
         fd:ba:4a:eb:5a:e9:1d:ef:62:3d:07:59:7d:03:b9:f8:2a:4b:
         55:29:93:01:3e:d0:f7:fb:32:17:fe:41:29:ef:3a:1b:30:eb:
         68:95:7c:62:38:0a:b3:f2:4c:dc:10:99:ae:61:99:55:1a:26:
         c0:6b:45:e6:18:f4:d0:01:49:e5:1d:6d:3c:17:ac:6c:50:39:
         16:99:b2:76:e8:64:f1:f4:46:7b:6d:a7:a7:4c:61:ce:0b:81:
         eb:4d:42:01:b0:4e:e5:92:20:8f:22:5d:ad:76:a1:d5:11:91:
         6a:e5:52:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:17 2023 by rpki-client on console-ams.rpki-client.org