Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/60E5E632C21311EC901888F2F1222468.roa
File:                     60E5E632C21311EC901888F2F1222468.roa (raw, json)
Hash identifier:          RRpeH58BtgEvmSm+GBBBeGueCKQNwTw46xgzcTZz8Y0=
Subject key identifier:   27:B0:38:9E:F2:A6:39:A7:8B:08:88:F3:F5:DB:04:17:EB:02:9C:A8
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       1347
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/60E5E632C21311EC901888F2F1222468.roa
Signing time:             Fri 22 Apr 2022 08:08:23 +0000
ROA not before:           Fri 22 Apr 2022 08:08:19 +0000
ROA not after:            Fri 30 Dec 2022 08:08:19 +0000
asID:                     35916
IP address blocks:        156.248.3.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4935 (0x1347)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Apr 22 08:08:19 2022 GMT
            Not After : Dec 30 08:08:19 2022 GMT
        Subject: CN=62626277-112c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:99:6a:78:a1:f6:d3:02:01:f3:1b:58:78:a5:
                    80:2e:fb:68:78:2c:43:46:5e:a0:bf:dd:9e:db:4c:
                    2e:d5:06:31:ec:fa:93:71:0a:88:fc:86:c8:d9:df:
                    44:04:d0:89:c9:c5:cb:cb:4e:1c:dc:3d:47:cf:f4:
                    74:fd:7e:76:8d:3f:d1:47:db:20:ef:99:cc:ab:b3:
                    d2:52:9b:3e:ec:fe:2e:6c:c9:47:88:24:d6:76:aa:
                    e2:3a:9f:0b:10:ec:5f:0d:80:fb:7c:ed:82:1f:e3:
                    5f:66:8e:e5:17:72:7f:f4:cd:ac:bf:0e:05:f7:a7:
                    d4:cb:73:68:cf:e2:64:4a:c0:42:a8:98:67:71:d5:
                    ac:65:63:88:5a:67:a3:b2:ea:80:8a:fa:92:e9:ed:
                    35:4a:69:fb:a2:1c:ab:0c:d8:a7:9d:a6:ad:6d:89:
                    f4:ff:7e:e2:44:72:13:41:0d:84:d0:bf:d6:2d:af:
                    95:28:83:65:50:cb:28:71:78:66:e7:b0:59:39:74:
                    29:b2:3b:d7:2c:ad:5b:fe:6d:78:b5:2a:46:59:10:
                    d8:71:f4:1e:7f:1d:6e:48:cf:c0:18:72:b7:1c:84:
                    c1:08:93:7a:c7:c5:1a:c1:fc:23:56:43:dc:69:57:
                    fb:03:4e:6c:b8:c2:55:1b:65:b0:22:86:c8:7e:a0:
                    97:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:B0:38:9E:F2:A6:39:A7:8B:08:88:F3:F5:DB:04:17:EB:02:9C:A8
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/60E5E632C21311EC901888F2F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.248.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:0c:4b:02:06:44:fa:4e:c4:19:9b:67:d7:ab:98:a6:ce:1b:
         bb:2d:90:31:f2:05:75:c8:6e:ef:cd:16:ee:45:96:af:94:a5:
         d7:05:a3:75:fb:c8:eb:cf:73:d0:3d:90:f8:08:4b:46:19:ff:
         81:f7:3f:8b:c2:a4:0b:72:8f:cf:64:db:cd:f7:de:d1:0f:fb:
         6c:52:15:a1:ad:dd:9e:02:4a:05:3d:28:7d:ce:97:35:a2:a8:
         0e:ec:6c:24:4f:34:0f:a0:8d:57:18:13:2b:1f:aa:9a:e9:77:
         e4:95:85:6a:3c:04:4c:bf:8e:1a:fa:b4:8a:ee:d1:0d:03:96:
         d1:b0:fd:22:bd:22:f2:84:ce:47:38:37:e6:fd:9a:30:3e:a4:
         13:e4:70:85:91:1f:76:21:02:7b:d3:a9:6c:4f:4d:68:1b:b0:
         39:55:8b:32:42:f5:66:8c:aa:96:7f:67:65:8f:5e:9e:1c:66:
         0c:c9:a7:2c:fb:1f:bb:93:2b:0d:83:0d:48:96:f1:4c:c6:03:
         6e:1d:26:7a:43:d6:8a:80:40:61:62:c2:5f:0b:fb:38:b9:ac:
         9b:96:bf:83:c0:b7:ae:40:66:d8:0f:bc:cd:eb:3a:c5:33:91:
         16:7b:46:1c:e6:9a:e2:42:82:c4:99:2d:a9:d7:b1:27:13:0a:
         d8:6d:28:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:21 2023 by rpki-client on console-fra.rpki-client.org