Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5FE0F32A488411EC9BD15132D8A014CE.roa
File:                     5FE0F32A488411EC9BD15132D8A014CE.roa (raw, json)
Hash identifier:          kc5yage+VysFXI0I+/+NfLp6kZLMjYQWm122B4BYf+o=
Subject key identifier:   BD:46:3B:22:27:8F:C4:52:B9:F1:07:C4:46:F7:75:08:2F:B7:AE:5F
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0CE9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5FE0F32A488411EC9BD15132D8A014CE.roa
Signing time:             Thu 18 Nov 2021 15:29:53 +0000
ROA not before:           Fri 19 Nov 2021 15:29:48 +0000
ROA not after:            Sat 19 Nov 2022 15:29:48 +0000
asID:                     139879
IP address blocks:        156.247.139.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3305 (0xce9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 19 15:29:48 2021 GMT
            Not After : Nov 19 15:29:48 2022 GMT
        Subject: CN=61967171-95ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:c0:e2:b3:16:8b:b1:be:69:7d:68:e5:a5:ee:
                    61:0d:93:09:5c:00:50:c3:ec:60:1f:02:f0:f5:64:
                    18:7c:0a:d2:31:b6:60:08:47:97:15:4a:59:93:a5:
                    50:53:d9:1e:17:7e:f0:ba:89:09:f5:0e:2e:22:9e:
                    11:6e:40:98:e6:93:05:07:b7:35:c6:fb:9f:da:ef:
                    94:36:86:a7:c2:26:4f:c3:25:92:18:8b:32:c5:85:
                    31:61:6b:ee:4e:ae:b7:7c:bb:82:5c:0f:72:31:70:
                    81:c2:38:95:d4:9e:e3:9a:80:57:b5:d0:0d:1b:c4:
                    fc:1c:2a:01:0f:d7:42:9c:44:46:fa:bc:dd:dc:69:
                    74:6f:69:04:f5:da:52:7e:86:6a:87:fa:e3:6e:ab:
                    17:71:9d:c2:44:e6:2a:ea:89:43:2b:2c:48:c6:ff:
                    7e:44:20:fd:c7:18:d4:7e:55:a4:3a:16:49:96:d6:
                    ac:4c:fa:c1:9c:3c:a8:fa:6f:f4:c3:19:9a:90:06:
                    aa:68:d4:d7:cf:57:d4:7c:00:8c:bf:62:7e:88:b7:
                    bb:3e:3a:bc:ad:b6:29:f0:58:8e:59:30:d0:c9:67:
                    6b:44:cd:ac:09:2d:00:60:0f:ac:ee:40:8a:b3:5e:
                    09:94:59:9d:71:d0:95:bb:3b:72:41:89:ca:12:97:
                    ec:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:46:3B:22:27:8F:C4:52:B9:F1:07:C4:46:F7:75:08:2F:B7:AE:5F
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5FE0F32A488411EC9BD15132D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.247.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:37:3b:13:c2:b0:f9:07:ae:a2:ea:2f:43:c6:9b:91:d8:36:
         18:ec:33:34:7d:94:02:77:9a:d9:68:92:8b:67:10:e7:3c:96:
         c0:17:c5:de:d8:f3:8d:bb:aa:51:e8:40:39:99:84:d0:49:39:
         e9:63:db:94:4f:76:d9:f5:12:15:2a:b9:7c:c2:a4:21:e0:70:
         e6:4f:2e:48:08:87:55:ac:10:22:1e:da:eb:e2:e8:f9:35:f0:
         0a:d2:66:68:38:73:15:2d:0d:d4:dd:36:c8:8c:69:48:aa:a7:
         ee:2e:68:05:ce:50:e4:7c:5f:41:a3:aa:31:03:73:6c:24:68:
         a8:ec:7e:9e:a8:9a:4a:5e:ba:34:e5:07:10:4a:b7:cf:90:d8:
         9d:b2:aa:af:e9:77:c8:38:56:6a:c6:44:4b:64:73:a7:db:db:
         20:24:bc:31:4e:b1:1d:8d:30:1f:91:82:ee:ee:59:4b:c5:46:
         13:8a:f8:0a:08:74:b1:bd:6f:9e:c3:ce:51:ae:13:4f:d4:bf:
         94:89:1b:39:e5:f8:da:64:f9:4f:4b:77:02:30:87:3c:e3:e4:
         d6:7f:cf:1d:a3:84:dc:78:f4:32:e0:93:da:7d:ec:80:7b:38:
         36:76:9a:49:c6:3a:e0:17:8c:c6:96:39:4e:3b:ef:71:25:96:
         34:de:6a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:19 2023 by rpki-client on console-ams.rpki-client.org