Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/50411328406311EDA5232A8AF1222468.roa
File:                     50411328406311EDA5232A8AF1222468.roa (raw, json)
Hash identifier:          JLdSeFEsizGyZ4P/lHzSl88G+oEwCrQWMn7e+LtcW00=
Subject key identifier:   30:CE:62:AA:A4:54:41:76:F1:04:0D:4C:C1:82:48:7C:39:3B:02:24
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       18C4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/50411328406311EDA5232A8AF1222468.roa
Signing time:             Fri 30 Sep 2022 01:58:01 +0000
ROA not before:           Fri 30 Sep 2022 01:57:57 +0000
ROA not after:            Thu 05 Oct 2023 01:57:57 +0000
asID:                     1239
IP address blocks:        156.255.20.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6340 (0x18c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 30 01:57:57 2022 GMT
            Not After : Oct  5 01:57:57 2023 GMT
        Subject: CN=63364d29-1957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:23:8c:d4:e0:dc:7b:75:3e:44:48:29:69:bb:
                    37:98:9e:dd:c7:92:4a:4e:53:6b:bb:fc:19:4f:b2:
                    aa:1c:af:99:18:04:18:49:e1:33:a2:d2:af:45:4c:
                    c4:42:a9:ea:bf:51:19:dd:3e:29:dd:e4:d4:f1:f0:
                    09:27:1c:ec:59:67:c7:d7:bb:2d:ec:5f:8f:a1:06:
                    d3:d7:17:7b:c1:e5:e9:2b:d5:f0:f3:f3:10:7d:14:
                    5e:92:cd:a7:17:44:10:5d:0e:0a:fb:f4:c8:3b:14:
                    0f:7e:04:0b:00:26:28:c5:2f:d2:90:43:9f:d6:4e:
                    a2:5d:7d:42:3b:8f:63:64:ef:73:10:2d:f0:9d:69:
                    e5:c4:ae:f5:94:b5:1d:a1:53:fe:be:0b:ff:cd:94:
                    9a:a4:34:d5:4d:15:9f:2e:29:f9:3b:3b:ef:80:96:
                    e6:3e:e3:20:39:75:f4:27:86:19:0a:6d:0e:17:d1:
                    86:a2:c0:38:2d:12:79:bd:a8:36:6d:30:73:c2:56:
                    39:c3:a7:c2:77:52:b9:98:8d:8e:b1:b3:4f:cc:da:
                    df:7b:33:af:64:a0:d7:2d:df:bb:ad:ba:44:13:e0:
                    f6:a1:03:67:cf:3e:07:aa:b4:46:4d:a9:51:01:05:
                    8d:fd:f2:01:48:73:3d:71:f5:92:b1:ed:da:15:2d:
                    2d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:CE:62:AA:A4:54:41:76:F1:04:0D:4C:C1:82:48:7C:39:3B:02:24
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/50411328406311EDA5232A8AF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.255.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:8f:ca:62:af:7f:35:19:a2:6a:24:49:ed:52:be:f1:e4:ef:
         53:1e:9c:d7:a0:e1:e8:62:25:a6:6e:ff:fd:7b:92:2c:47:c0:
         1e:87:20:21:72:0e:96:48:ec:d5:39:56:10:2d:fd:d7:3a:33:
         a6:2c:16:49:7f:0c:c4:48:54:a4:fc:c4:6d:54:40:2b:08:34:
         15:ad:5d:3a:1d:25:4e:de:b4:24:80:c7:f5:65:a8:c2:ab:cb:
         1d:11:4e:0d:7e:83:8a:61:85:ec:54:ff:a7:55:e1:b5:a7:32:
         ae:c8:f5:05:d4:cd:06:1f:01:5a:db:e4:7a:bb:f6:f0:a7:9d:
         f7:85:6f:77:47:e7:ec:92:86:1a:b6:df:bf:0b:fb:90:f1:70:
         84:7f:ef:13:c7:b4:50:fe:de:9f:fe:40:e0:91:cd:31:c1:5d:
         24:78:2c:92:3e:75:33:07:23:1c:fc:fa:52:75:b5:ca:39:15:
         e4:1c:09:53:d4:7d:4c:29:e5:fb:e2:1f:77:b1:f8:fc:1a:55:
         3e:9d:ef:61:ae:ee:35:55:2e:72:e7:58:23:99:2e:6a:42:46:
         73:7d:c1:e6:1b:1f:d9:c6:b5:ee:32:a2:89:54:d6:d0:7f:22:
         93:2e:91:bd:32:15:96:51:64:9c:78:7e:c4:80:f0:7b:8f:e5:
         ee:f7:d1:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 6 01:29:46 2023 by rpki-client on console-fra.rpki-client.org