Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/47C5B6869B9511ECA02B6BCF5A40D577.roa
File:                     47C5B6869B9511ECA02B6BCF5A40D577.roa (raw, json)
Hash identifier:          tIMZfy87Rxj7Y7b2fd/G2/sOSkvRzdaUFAcV6HZ/xOw=
Subject key identifier:   F7:D5:77:5D:61:62:E2:D7:91:43:03:5F:A8:30:FF:13:7A:B4:50:A7
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       1242
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/47C5B6869B9511ECA02B6BCF5A40D577.roa
Signing time:             Fri 04 Mar 2022 08:30:00 +0000
ROA not before:           Fri 04 Mar 2022 08:29:56 +0000
ROA not after:            Fri 31 Mar 2023 08:29:56 +0000
asID:                     399928
IP address blocks:        156.243.208.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4674 (0x1242)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Mar  4 08:29:56 2022 GMT
            Not After : Mar 31 08:29:56 2023 GMT
        Subject: CN=6221ce08-8cd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:76:9d:cb:ad:0d:32:42:b3:1a:d0:37:4f:ae:
                    73:c6:bd:b6:4d:47:12:64:82:54:60:37:47:d7:a1:
                    79:22:4e:3f:da:df:ac:d3:9f:a0:1f:1e:8e:81:3e:
                    5b:63:d6:1a:70:39:0a:c7:19:94:5e:c3:79:6d:40:
                    5d:49:0e:a4:81:67:ef:58:3b:75:67:9c:df:87:c3:
                    36:0a:ae:1d:9a:a9:be:0d:d8:0e:3a:a8:ca:37:e0:
                    7d:d0:f9:18:5c:f9:4b:47:61:1f:1f:39:5c:6e:b4:
                    d0:2f:f8:66:e9:82:69:6d:83:20:ef:c4:70:e3:02:
                    68:40:3c:23:cf:7b:97:15:34:55:8c:7e:d5:d5:8e:
                    22:c9:ab:8c:b1:f5:65:b9:53:01:cb:60:9c:88:3c:
                    e1:e6:a2:81:c2:2f:6f:de:f4:d6:ba:0d:c6:be:d4:
                    13:41:b1:15:b5:33:26:c7:45:fa:5a:fa:4d:2c:3e:
                    c6:21:99:cd:3c:ff:05:fb:1e:7f:7e:ff:a9:0e:f1:
                    34:79:ff:aa:8f:0e:82:7a:6f:0e:7a:49:22:e3:64:
                    b1:9a:27:01:6f:b2:37:a2:2f:bc:ca:ab:3f:28:38:
                    53:c0:90:fa:14:94:c9:f7:34:69:49:51:00:36:e6:
                    d5:29:8e:d7:9c:51:a4:d9:d2:61:ce:c6:af:c7:64:
                    8f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:D5:77:5D:61:62:E2:D7:91:43:03:5F:A8:30:FF:13:7A:B4:50:A7
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/47C5B6869B9511ECA02B6BCF5A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.243.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         67:93:1b:f8:a2:28:70:d5:04:21:e0:b5:56:13:c2:c6:e5:cf:
         51:58:c1:c8:16:a5:89:6f:49:fa:8f:67:4a:90:26:02:e2:22:
         f2:95:e1:d4:57:52:ff:76:7c:61:9c:1e:cf:1e:05:9a:1f:75:
         d1:d0:14:d6:37:90:55:5d:4a:65:6f:f5:14:0e:8a:38:21:ba:
         55:b0:48:8f:4d:7e:42:98:12:25:49:61:d0:aa:22:06:db:85:
         f6:bf:34:20:9d:74:89:a9:1b:d0:d1:b6:5b:78:fa:39:31:2b:
         50:9f:2a:74:58:37:98:c2:92:88:0a:91:ab:82:b8:8f:ab:5e:
         24:51:05:6a:3c:39:17:2f:33:07:02:17:cf:27:76:73:32:a1:
         3d:6a:49:ed:4b:37:c1:d3:2d:96:11:59:02:81:9d:d9:d3:58:
         2b:23:69:13:0b:4a:6a:fa:03:9d:3c:28:3e:7c:3f:77:c8:bd:
         ad:b0:e1:31:90:1a:f1:b0:54:16:b2:79:8a:76:dd:4d:45:57:
         f5:88:c1:6d:31:9b:ff:37:05:c0:00:64:a6:10:2b:f1:1f:e6:
         c1:c7:04:a7:28:30:84:21:a6:a7:d8:ae:ad:5c:fe:02:8b:19:
         15:f4:35:20:27:b5:bf:2a:3e:40:c8:06:1b:16:27:2c:ee:61:
         2f:b9:5f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:19 2023 by rpki-client on console-fra.rpki-client.org