Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/50A2871E261011EE85B842694AD9E6FC.roa
File:                     50A2871E261011EE85B842694AD9E6FC.roa (raw, json)
Hash identifier:          lU2whYwKZsWWA+5dJKuVbaoUd0iPERkBa24JAhQbwRI=
Subject key identifier:   39:17:BB:0E:05:9F:8C:E5:99:E0:16:EB:C1:90:AA:55:1C:99:17:25
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       30ED
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/50A2871E261011EE85B842694AD9E6FC.roa
Signing time:             Wed 19 Jul 2023 08:43:21 +0000
ROA not before:           Wed 19 Jul 2023 08:43:17 +0000
ROA not after:            Wed 03 Jan 2024 08:43:17 +0000
asID:                     139057
IP address blocks:        156.246.18.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12525 (0x30ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jul 19 08:43:17 2023 GMT
            Not After : Jan  3 08:43:17 2024 GMT
        Subject: CN=64b7a229-258f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:af:d9:76:70:78:6f:42:63:98:0f:b4:34:ab:
                    3e:e9:5f:7a:58:09:20:1d:ee:fa:77:30:66:96:61:
                    8d:7f:cb:1c:db:ba:41:79:5a:31:d8:30:66:fd:ed:
                    fc:28:ed:e0:58:ab:4d:76:cf:48:85:af:00:bf:88:
                    95:12:11:b3:a6:14:46:79:3d:71:ac:b7:7f:21:99:
                    45:96:f9:1f:bd:c6:29:d5:c1:b4:73:2e:a6:90:2e:
                    7f:90:f0:10:f4:51:11:0f:f9:2b:72:25:da:3b:62:
                    e5:91:2a:3c:1c:41:66:49:a9:7b:d1:f2:de:a3:f2:
                    e0:cf:f7:a9:e1:c3:12:64:75:16:5c:66:12:a1:3f:
                    70:3a:d0:6b:b5:e3:dd:18:3c:5f:cb:e5:6c:13:84:
                    85:95:0e:69:22:de:20:c7:0e:2d:f2:0a:1a:60:5c:
                    0d:20:a3:84:85:5a:e2:49:af:ad:f6:e8:21:d8:95:
                    07:f5:22:aa:ff:cc:67:64:fd:cc:00:4f:bf:40:45:
                    dc:e7:19:59:88:99:62:05:82:4f:fd:dc:4c:fa:53:
                    e3:72:ac:0f:10:d6:29:81:a4:d7:8d:41:78:2b:ae:
                    fa:e3:f0:c4:fe:bc:95:8d:fa:fa:4a:fc:51:c8:2c:
                    5a:32:9d:d1:00:d1:55:f7:22:f5:bf:0d:27:f2:ff:
                    2b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:17:BB:0E:05:9F:8C:E5:99:E0:16:EB:C1:90:AA:55:1C:99:17:25
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/50A2871E261011EE85B842694AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.246.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:3f:21:62:b6:7b:53:cc:3e:ee:94:03:35:b6:5b:b2:64:7a:
         8a:50:d1:f6:f0:db:c7:b2:01:1b:cf:d0:16:7a:33:7c:9e:9d:
         25:fa:3b:8e:f3:02:dc:34:f3:f0:25:e0:f8:62:a9:94:c6:1f:
         2b:31:8d:da:79:65:62:93:91:c6:c8:e2:b2:b0:af:7b:94:28:
         b8:4b:e9:13:e3:3c:15:c2:0c:89:a6:4f:ff:ab:75:4f:79:cd:
         8c:0e:f2:ff:81:3b:22:98:d0:44:8a:89:d9:dc:3b:f6:25:2e:
         37:9b:85:65:bf:84:eb:51:7a:25:c8:7f:da:1e:27:d9:1b:80:
         e1:a2:e6:36:67:78:63:7a:95:64:c3:23:f7:f4:96:dc:3f:1a:
         51:df:59:9a:fc:cb:8c:08:83:8d:69:c8:e1:ad:ff:4d:dc:26:
         a9:40:db:ca:ce:c2:3a:eb:6f:f6:7c:d7:27:4a:87:5b:64:d8:
         03:e9:3f:3c:af:d9:98:02:4a:56:e6:bf:e1:97:80:7c:4b:05:
         79:ef:3c:ff:87:85:8b:c4:c7:3e:a5:91:0e:56:10:20:ba:8d:
         93:60:06:df:dd:40:c4:c9:35:50:87:e4:19:59:21:7f:59:f8:
         93:2e:e3:ba:09:f0:7b:83:9e:83:b6:c4:8d:83:4e:df:25:43:
         bd:7a:d8:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 3 13:03:12 2024 by rpki-client on console-ams.rpki-client.org