Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6A904A06360911ECAD966A16D8A014CE.roa
File:                     6A904A06360911ECAD966A16D8A014CE.roa (raw, json)
Hash identifier:          409rcPgunqyGXWIpHI2LuK2kZuMKR3qkilINty4nQbo=
Subject key identifier:   BF:C4:4D:55:1C:4A:7B:D7:FB:D4:F8:46:16:5E:6D:6C:6C:C0:18:A9
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0A4F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6A904A06360911ECAD966A16D8A014CE.roa
Signing time:             Tue 26 Oct 2021 03:04:21 +0000
ROA not before:           Tue 26 Oct 2021 03:04:18 +0000
ROA not after:            Wed 26 Oct 2022 03:04:18 +0000
asID:                     7018
IP address blocks:        156.248.104.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2639 (0xa4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 26 03:04:18 2021 GMT
            Not After : Oct 26 03:04:18 2022 GMT
        Subject: CN=61777035-e87b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d0:0c:5a:ec:44:06:18:a0:8d:3a:8f:b2:58:
                    c7:65:be:87:03:58:9b:c0:d5:a6:db:a8:e7:4a:b4:
                    1a:be:68:ff:08:43:18:f9:2e:50:b1:3a:59:9c:11:
                    3a:32:9d:11:3c:ae:22:9f:3d:6b:58:75:bc:26:de:
                    f0:f0:89:8d:59:9d:d9:3f:48:3d:7a:f0:1f:ba:74:
                    56:25:c1:24:4a:40:74:3a:4a:a8:a6:6f:ad:d8:36:
                    31:8e:4f:3e:5c:40:30:2f:ed:a2:e8:fe:e1:7e:a1:
                    16:24:73:c0:41:a4:b3:12:2c:ca:4f:b1:7b:28:ba:
                    b4:08:5b:b2:70:39:4a:b2:67:fc:50:6e:29:32:c5:
                    f3:22:31:d1:02:78:db:5d:63:fc:77:85:ff:d9:e9:
                    03:c2:39:01:dc:36:24:42:d1:34:d1:c3:a5:3c:e1:
                    3d:da:54:ef:79:d5:50:1b:ae:31:71:2b:3b:bd:8f:
                    9d:02:94:68:db:16:aa:3f:2c:ff:ad:14:9d:31:ff:
                    a5:81:dc:35:b4:92:1c:cf:3d:ea:64:3f:ea:70:85:
                    6d:03:50:07:b9:e1:f1:f7:ef:c3:ed:97:34:c9:d3:
                    66:da:76:3c:7e:ea:ff:bf:2f:63:06:c5:14:0b:3b:
                    7e:9a:4f:d4:9b:72:9a:87:97:66:22:8d:ae:45:1e:
                    a8:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:C4:4D:55:1C:4A:7B:D7:FB:D4:F8:46:16:5E:6D:6C:6C:C0:18:A9
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6A904A06360911ECAD966A16D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.248.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:2c:18:3c:10:ed:5b:46:6c:d1:4e:9a:00:37:ec:88:56:65:
         57:fb:ab:3a:4f:6b:e6:59:b9:75:61:77:fd:a3:e9:ef:cd:d8:
         81:45:44:ff:ff:12:b3:f6:82:b4:70:89:18:09:f7:f5:b4:e6:
         2e:d1:5d:8b:2c:d3:27:f6:f4:ca:2e:8b:de:be:c8:00:88:18:
         fd:77:1d:a5:47:02:06:b6:8d:8f:18:ef:86:9b:4d:9b:df:a7:
         20:7b:c7:66:f2:a9:4b:9c:ad:53:12:36:25:cc:89:93:f3:03:
         a9:b8:37:44:3d:e4:12:71:1b:b0:9b:3a:5b:11:96:51:d8:96:
         03:e4:86:64:83:dc:7a:e4:c9:8f:cc:83:d1:e3:4e:d8:db:ea:
         de:8e:45:58:90:27:c6:3d:03:7f:ef:44:87:c2:f3:bd:c1:b9:
         4d:d0:ce:5e:5b:74:6d:ff:54:fc:9e:32:be:ce:10:52:16:7a:
         bc:c8:f8:99:df:cc:25:0b:d0:d7:13:0f:74:be:b7:15:c2:f7:
         d2:35:a3:8a:0c:fb:f8:00:54:d9:50:54:ca:21:18:07:34:fd:
         24:49:61:f4:ee:8c:86:d4:f3:96:05:c0:ec:4c:54:62:af:49:
         2c:5d:78:1c:47:d0:14:59:57:63:70:86:b4:24:c6:92:fb:5b:
         26:0b:b2:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:20 2023 by rpki-client on console-ams.rpki-client.org