Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/477538C4278011EDB51B33B7F1222468.roa
File:                     477538C4278011EDB51B33B7F1222468.roa (raw, json)
Hash identifier:          AXsoxm1muPVIl+/LGOwJNlAxhjWS9W3WOB4a4d7MbsA=
Subject key identifier:   BF:83:89:5F:BC:97:C6:02:F2:62:62:A2:1E:1D:C4:88:AB:97:83:C9
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       173D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/477538C4278011EDB51B33B7F1222468.roa
Signing time:             Mon 29 Aug 2022 09:52:23 +0000
ROA not before:           Tue 30 Aug 2022 09:52:19 +0000
ROA not after:            Wed 07 Sep 2022 09:52:19 +0000
asID:                     1239
IP address blocks:        156.251.96.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5949 (0x173d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 30 09:52:19 2022 GMT
            Not After : Sep  7 09:52:19 2022 GMT
        Subject: CN=630c8c57-72e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1c:55:19:ed:60:98:af:24:de:b4:6c:f1:8f:
                    4e:13:99:c0:82:82:fb:2a:a5:14:73:2c:b0:10:03:
                    56:bc:3a:46:8f:ec:10:45:b6:c2:9c:04:1d:a7:2d:
                    42:40:c6:80:8f:54:57:16:f9:1a:c6:8e:cb:76:10:
                    db:08:d8:2b:38:e1:67:e0:8a:61:b0:af:4b:15:fb:
                    1c:1b:97:a4:a8:1c:53:a7:b2:0e:b3:65:48:ab:34:
                    c7:17:14:ce:c4:50:bb:03:f6:91:61:f3:00:31:02:
                    ac:10:de:a2:71:78:d3:ab:7d:87:58:ec:c7:78:f9:
                    00:bc:ad:f8:31:33:8f:58:d8:61:72:42:15:cd:b7:
                    54:be:e6:53:cd:a1:a2:07:4b:5e:e7:84:28:0a:46:
                    f2:2c:7c:3e:79:4e:2c:ca:c5:cc:76:79:4c:0f:a2:
                    38:ed:85:eb:b7:a8:76:bd:a7:ba:06:7d:d7:fa:9d:
                    68:d8:47:25:b8:81:be:05:cd:e5:18:28:a7:d0:ad:
                    5a:e1:7e:7f:78:64:5a:c3:90:37:0f:c3:bd:dc:26:
                    86:9c:83:e1:f2:c3:1b:08:62:cd:46:71:a7:92:d5:
                    5f:cc:f2:1f:dc:49:c8:75:24:d5:18:8c:2e:3b:bf:
                    55:95:3c:b1:25:6f:0b:4a:47:19:f6:67:60:a9:c2:
                    d2:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:83:89:5F:BC:97:C6:02:F2:62:62:A2:1E:1D:C4:88:AB:97:83:C9
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/477538C4278011EDB51B33B7F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.251.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         16:15:3f:76:71:25:2f:1e:21:6d:2c:7b:3d:93:f0:67:91:1f:
         48:fe:3b:26:fb:2e:13:f5:65:ea:1d:a1:a7:c3:8e:3f:83:a4:
         08:e9:68:6c:72:60:d3:93:f4:0d:ed:9a:69:a3:a6:c9:0c:b0:
         f7:b0:ec:49:48:98:71:8f:c7:28:9a:fa:64:b1:a7:ef:d2:12:
         53:2b:2a:c4:22:8c:3d:3d:a8:ec:15:fc:82:e5:ce:48:3b:7b:
         89:f3:52:0f:7f:c7:e1:26:b0:ea:ac:39:c2:74:7e:bd:fb:65:
         bc:83:8e:85:cb:e0:35:72:60:9d:36:dc:9a:ce:ab:31:01:24:
         e2:21:32:a7:03:e5:07:f2:a1:1a:1d:23:d4:5e:04:72:d3:e6:
         06:0d:19:9d:40:28:89:a9:69:ef:d9:51:4e:31:0b:c4:58:67:
         d1:7a:4e:43:36:03:bf:fa:61:cc:19:89:27:a1:0a:2c:f5:19:
         43:ac:e1:71:1f:4c:a9:47:4e:09:db:0d:81:14:14:90:f1:cc:
         45:bf:ac:08:c1:71:17:6b:52:63:fb:b7:97:18:c5:27:d1:72:
         12:22:c5:6a:18:da:3e:0e:ca:3c:45:5f:3a:5a:92:a8:3b:e9:
         be:d0:22:aa:37:b9:01:7d:d1:94:71:86:7c:c8:93:8d:4c:1b:
         8b:1d:81:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:18 2023 by rpki-client on console-ams.rpki-client.org