Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44F32A3E488311EC8BF6F02FD8A014CE.roa
File:                     44F32A3E488311EC8BF6F02FD8A014CE.roa (raw, json)
Hash identifier:          Z0ExO0rrzYC1eEcHitvAMP1F1MvTkh5RG+3xDWnAm/c=
Subject key identifier:   7F:7F:D8:89:E7:3A:6F:DE:54:69:C8:93:CF:08:A7:82:04:6A:C0:80
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0CB2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44F32A3E488311EC8BF6F02FD8A014CE.roa
Signing time:             Thu 18 Nov 2021 15:21:58 +0000
ROA not before:           Fri 19 Nov 2021 15:21:54 +0000
ROA not after:            Sat 19 Nov 2022 15:21:54 +0000
asID:                     139879
IP address blocks:        156.231.131.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3250 (0xcb2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 19 15:21:54 2021 GMT
            Not After : Nov 19 15:21:54 2022 GMT
        Subject: CN=61966f96-266e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:dd:cd:22:7a:ae:be:72:86:e3:d3:81:6a:77:
                    1d:39:65:0c:8a:00:6f:ed:b9:90:47:d0:6c:93:f7:
                    43:3c:27:61:bd:10:20:d6:8e:2b:8b:ba:38:70:9d:
                    09:1e:0f:f4:37:46:9e:3a:f0:bc:5b:10:2b:d3:29:
                    85:17:69:27:65:4e:65:09:09:55:c3:22:20:ac:9b:
                    3a:b8:48:a7:88:82:ba:58:78:ba:41:b1:81:93:30:
                    4a:c9:24:54:30:fb:5f:49:41:8f:84:b1:9c:2e:4d:
                    6f:95:2c:93:d9:5d:f2:3d:d0:db:80:26:66:a4:4b:
                    98:06:7c:0e:10:3f:fe:6e:2b:f8:a6:19:4c:99:72:
                    bf:3a:2f:f1:ce:0f:c9:d0:72:2c:00:9f:95:80:29:
                    46:b2:4f:9c:31:a4:46:7f:eb:cc:83:94:06:a8:f3:
                    c1:c1:0f:84:51:97:dd:c1:20:34:0d:a6:20:56:ea:
                    a2:a2:41:8a:21:61:69:17:27:3a:22:cb:8d:fa:d3:
                    ba:e5:82:0b:36:92:ce:7e:6c:9a:63:bb:36:a1:e4:
                    92:89:17:c0:8e:5b:6f:7c:fb:89:06:3e:08:c3:88:
                    9f:c3:98:ea:99:92:96:4c:e6:ea:5e:55:d1:9e:f9:
                    63:c1:2a:18:fa:f0:72:0b:09:c3:80:00:9a:84:57:
                    44:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:7F:D8:89:E7:3A:6F:DE:54:69:C8:93:CF:08:A7:82:04:6A:C0:80
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44F32A3E488311EC8BF6F02FD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.231.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:f6:12:57:f5:e0:44:ab:2e:39:4c:fc:a9:d4:b9:05:c7:c7:
         b3:9b:52:ce:58:8e:ac:b4:cd:db:61:3c:79:aa:eb:2d:10:ca:
         77:ef:96:ca:14:50:20:5a:de:c9:b6:ba:6f:f8:a2:a9:c7:26:
         b2:db:36:ce:0b:61:27:70:58:66:cb:8a:fb:a0:ea:01:44:e2:
         df:c3:2f:c6:2d:ff:23:a1:f9:04:26:30:53:e5:4c:30:a6:7b:
         68:35:0b:dd:8c:fa:97:9f:f0:50:e4:d5:ab:e4:d0:26:e3:55:
         5e:b6:3f:17:e9:66:56:2b:b1:f2:bd:4a:65:07:8c:e7:75:40:
         7f:2c:42:36:cc:3f:41:c4:d4:37:b6:b5:c2:a2:24:77:2f:82:
         8c:b7:e3:8b:b9:55:c1:ac:f3:12:b3:2f:ab:ee:fe:ff:c1:05:
         36:3e:85:30:a9:27:46:e4:1f:e3:64:a1:00:a1:90:75:ec:66:
         f2:13:27:ae:37:f1:0e:1f:27:99:ca:75:5d:e4:15:51:6a:f3:
         f3:f1:07:bd:de:ea:b7:6b:a4:f9:16:79:3c:79:c2:e7:00:ac:
         f6:fe:ce:d7:6e:33:81:36:0e:44:6c:78:c6:21:bc:d6:27:37:
         00:af:0c:31:5f:ac:20:89:36:bf:da:10:b4:bd:94:db:76:02:
         5e:fd:3e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:19 2023 by rpki-client on console-fra.rpki-client.org