Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D5BE5D2179411EDAFD9F99DF1222468.roa
File:                     3D5BE5D2179411EDAFD9F99DF1222468.roa (raw, json)
Hash identifier:          6rBTcxN7+zxj1A3LY3/W9B21BAYCdkURyQSyad1Er7c=
Subject key identifier:   2B:11:5F:52:A2:F7:BC:A2:91:8E:22:EF:63:69:B4:F6:F9:7B:89:DF
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       168F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D5BE5D2179411EDAFD9F99DF1222468.roa
Signing time:             Tue 09 Aug 2022 03:34:57 +0000
ROA not before:           Tue 09 Aug 2022 03:34:54 +0000
ROA not after:            Fri 30 Dec 2022 03:34:54 +0000
asID:                     328608
IP address blocks:        156.246.193.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5775 (0x168f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug  9 03:34:54 2022 GMT
            Not After : Dec 30 03:34:54 2022 GMT
        Subject: CN=62f1d5e1-3586
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:05:9e:4e:8a:fb:e0:b2:0f:5a:15:51:f3:41:
                    8b:27:eb:ad:29:e2:58:e9:14:9b:3e:7a:74:65:c0:
                    a8:7d:82:b2:57:ec:9e:f2:1b:ae:4c:4e:4f:30:c1:
                    4c:16:0c:d1:f1:5b:0c:82:12:5a:37:e8:a9:bf:e6:
                    e6:67:77:d1:f0:3e:c4:ff:9b:6f:84:c6:da:03:42:
                    95:11:30:83:18:c2:2d:e1:43:b6:3c:21:ac:ea:54:
                    70:1c:f6:b8:b5:68:8c:fc:4f:32:7b:17:b4:d6:26:
                    e5:6c:a5:6e:29:df:cc:42:17:4a:18:d2:e4:9b:07:
                    51:45:af:00:4a:06:3b:d4:ff:f7:ad:80:49:4d:aa:
                    9d:6f:8b:b4:04:90:82:11:d5:02:3d:e0:78:52:08:
                    53:65:db:29:51:52:3a:29:4e:05:79:42:1e:94:e8:
                    41:c1:e2:52:f3:17:aa:ba:1f:83:75:7a:a1:36:4d:
                    f8:fe:4a:f4:3c:35:f9:ea:7a:08:d1:2d:0e:a0:ba:
                    bd:01:ff:0f:61:02:1b:d0:11:55:85:b9:75:44:91:
                    4c:53:ea:9a:bc:bb:8c:3b:7b:0d:58:9d:86:23:3f:
                    45:d7:28:17:86:07:d4:2b:18:b4:0c:62:7e:08:7b:
                    f0:5c:64:52:9b:df:37:55:bd:2e:49:eb:0b:95:16:
                    55:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:11:5F:52:A2:F7:BC:A2:91:8E:22:EF:63:69:B4:F6:F9:7B:89:DF
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D5BE5D2179411EDAFD9F99DF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.246.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:a9:87:cb:6c:2f:d3:1a:78:cc:df:68:df:8e:a1:87:04:93:
         93:a7:2c:17:cb:f4:24:90:91:73:02:0d:28:82:e4:0a:fe:ce:
         d5:25:d6:45:da:ac:c0:5d:28:b2:bd:62:c0:3d:07:a3:e8:2c:
         d2:e9:2f:32:2a:db:49:7f:6f:fc:22:4f:34:7b:a7:8e:43:73:
         67:a9:f8:f1:28:17:d8:8d:d9:fb:60:c4:66:12:25:21:d1:5f:
         51:14:05:45:8a:aa:36:58:8e:21:3a:89:97:98:00:57:50:5e:
         dd:c4:b6:b1:dd:69:74:e5:08:4e:15:08:a9:50:66:2e:65:0c:
         b4:8a:81:e2:8d:6c:20:62:90:76:17:23:71:ea:67:db:8a:75:
         f8:aa:b8:fe:7e:75:5b:6d:83:e2:1f:78:c4:8a:7f:3d:14:e7:
         d4:dd:e9:6e:60:f6:71:cf:0b:f0:42:ab:83:75:e3:22:0f:3a:
         69:6c:48:07:24:5f:49:ef:f5:98:f8:11:b8:67:8c:5b:fe:86:
         cf:44:09:78:7b:5f:0f:3e:51:ad:30:a4:04:81:a9:bc:02:0d:
         e0:fa:a0:c5:6d:6b:41:2e:be:5f:5a:69:df:ec:39:b1:f6:fb:
         8c:2a:bc:b3:c3:3c:9e:48:1c:24:b0:6b:f6:79:01:2c:7a:ff:
         10:6b:a2:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:19 2023 by rpki-client on console-fra.rpki-client.org