Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C3BEB3A3A4911EE8857C5134AD9E6FC.roa
File:                     6C3BEB3A3A4911EE8857C5134AD9E6FC.roa (raw, json)
Hash identifier:          Cc5bjO+kPx+pIjvovTm6048eTnicJCG+OrUzbG9y5ds=
Subject key identifier:   47:1C:9D:51:CA:78:0F:EA:CE:E8:6A:5C:02:47:09:0B:8C:FC:87:55
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       3530
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C3BEB3A3A4911EE8857C5134AD9E6FC.roa
Signing time:             Mon 14 Aug 2023 02:22:32 +0000
ROA not before:           Mon 14 Aug 2023 02:22:29 +0000
ROA not after:            Sat 13 Jan 2024 02:22:29 +0000
asID:                     139057
IP address blocks:        156.251.78.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13616 (0x3530)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 14 02:22:29 2023 GMT
            Not After : Jan 13 02:22:29 2024 GMT
        Subject: CN=64d98fe8-d558
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a4:09:22:b0:86:4c:3c:eb:71:f9:40:78:5d:
                    0a:c1:a1:25:f8:b3:f4:29:e3:c2:d8:33:98:aa:5e:
                    0a:51:c3:1d:7c:8e:94:9e:ad:2e:22:b7:ff:16:31:
                    da:4d:53:c1:ac:07:df:a3:db:8c:e5:63:61:77:3b:
                    60:ab:f6:99:fc:7e:62:05:3f:c4:85:5b:41:d6:af:
                    50:60:71:85:12:0a:01:59:60:db:e3:cc:4b:eb:4d:
                    3c:f9:0b:c4:ca:8a:97:38:60:2e:89:f7:60:72:1a:
                    bf:01:1a:e6:f3:05:ae:d6:ab:42:dc:5a:39:80:4a:
                    4b:ec:85:60:c0:b7:bf:de:b7:c9:30:53:99:9d:4a:
                    71:f5:12:1f:1d:33:66:dc:9a:72:21:17:5f:3b:68:
                    f3:61:a2:cd:0c:68:aa:3a:0f:c2:2d:3f:4c:26:e0:
                    0a:1d:b5:ca:bd:50:fd:73:c8:fb:86:38:82:f8:e7:
                    aa:30:23:00:58:e8:dd:87:e2:36:47:cf:04:6a:03:
                    9b:7b:4e:33:80:63:f4:a8:80:ce:8a:53:41:1c:d4:
                    7d:88:52:08:6c:88:36:43:40:f7:bf:52:17:4e:50:
                    c2:86:68:b2:11:e2:d0:bc:05:9a:7c:37:4c:b8:e8:
                    ec:72:64:e4:bc:ba:8a:30:e1:58:10:66:96:d3:03:
                    ed:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:1C:9D:51:CA:78:0F:EA:CE:E8:6A:5C:02:47:09:0B:8C:FC:87:55
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C3BEB3A3A4911EE8857C5134AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.251.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:86:8f:2d:0f:bd:09:2a:65:ba:e4:bb:d0:c0:9b:47:d1:b0:
         3a:0c:9a:cb:6d:17:ea:39:41:ef:dd:b9:66:58:d5:88:c1:75:
         6d:1d:09:cc:30:f3:89:1e:20:2d:07:31:38:e5:5c:38:fd:0f:
         ac:3b:9a:48:ad:f3:a8:4d:ce:ad:ae:97:8e:8a:d5:f2:b4:0c:
         2f:c2:ce:74:8c:35:6e:f9:52:a1:79:fb:50:0d:f5:ca:dd:21:
         d8:a4:bb:dd:21:4a:0e:a0:5e:a9:5e:4a:e6:02:80:15:dc:18:
         05:7f:d1:04:1b:ca:c3:c8:b2:1f:27:6b:64:ec:2e:38:db:ea:
         20:cc:08:99:29:b4:4e:76:66:74:c2:7d:b5:4f:d3:b3:99:e4:
         cc:42:ea:a9:dd:21:35:f7:1e:8b:d6:3f:76:4f:19:5e:20:d3:
         b0:11:d5:13:61:e8:ae:5e:b8:b3:e4:72:57:5e:c5:42:f9:2d:
         c8:1f:88:a8:6d:b1:95:6b:a3:02:e8:08:b1:49:98:2b:8e:2c:
         88:9c:9c:b4:12:02:2e:dc:55:46:35:16:55:3a:13:6b:6b:75:
         6b:99:29:49:7c:c6:a0:20:da:3d:be:2f:1f:b4:0b:d6:94:8d:
         e0:6e:1b:2d:fd:78:48:25:c6:b6:28:c9:a5:62:5b:2e:7b:9b:
         d0:87:7b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 13 19:48:20 2024 by rpki-client on console-ams.rpki-client.org