Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7B81359CCCF911EB8D0C6D43F8AEA228.roa
File:                     7B81359CCCF911EB8D0C6D43F8AEA228.roa (raw, json)
Hash identifier:          kf8yQo9aTtXIs5vF1nzYxCrWn4Vb7xcY9uU1jnD/pPk=
Subject key identifier:   40:77:25:6E:B6:A2:B7:8A:90:5C:9A:91:82:81:12:A4:F0:36:20:11
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0663
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7B81359CCCF911EB8D0C6D43F8AEA228.roa
Signing time:             Mon 14 Jun 2021 10:15:46 +0000
ROA not before:           Mon 14 Jun 2021 10:15:41 +0000
ROA not after:            Tue 19 Jul 2022 10:15:41 +0000
asID:                     5065
IP address blocks:        156.233.20.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1635 (0x663)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jun 14 10:15:41 2021 GMT
            Not After : Jul 19 10:15:41 2022 GMT
        Subject: CN=60c72c51-0ca3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:99:2f:4e:6f:a0:dc:44:b9:41:81:e9:68:0a:
                    40:4b:47:77:49:6f:35:04:78:77:2f:b7:d7:4f:e3:
                    2a:7d:a1:a4:54:08:8c:47:e9:f1:bb:66:e3:8a:35:
                    d3:e0:1a:3f:8e:f2:a0:e3:ba:7f:06:91:25:85:72:
                    e6:1e:38:8e:c4:4e:d0:91:ad:b7:62:5e:4a:b9:5d:
                    92:dd:77:51:e2:3e:78:be:68:5f:86:12:45:8b:75:
                    7e:90:1e:8f:1d:2f:49:82:5b:26:cc:ac:48:86:1b:
                    7e:07:8a:bc:18:42:59:97:29:32:99:dd:1a:e0:e0:
                    fd:1e:31:4d:6e:44:db:19:23:da:bd:bf:a8:71:a8:
                    c6:00:ac:05:45:88:28:c5:92:8b:dd:c5:1d:d3:a5:
                    fc:bd:5e:3b:29:20:bc:38:05:b6:a5:07:40:51:7e:
                    46:61:1d:7f:4f:49:08:77:5b:e3:05:94:b6:d0:dc:
                    86:52:d2:ea:b0:e2:b9:a3:53:5d:81:fb:bb:12:d7:
                    e5:c1:64:ea:0c:b4:1e:14:b5:a0:41:59:e2:c8:b4:
                    c1:c0:ba:25:16:74:d5:8e:28:b0:f2:29:75:95:fd:
                    3f:7f:56:3c:ed:e1:22:db:b4:25:29:5e:9b:d9:5d:
                    81:6f:c9:d4:fa:59:38:7e:70:c0:9a:f9:12:c8:de:
                    89:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:77:25:6E:B6:A2:B7:8A:90:5C:9A:91:82:81:12:A4:F0:36:20:11
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7B81359CCCF911EB8D0C6D43F8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.233.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:3f:6b:2a:9e:9d:47:c2:c4:ae:af:ac:e3:ce:dd:95:30:07:
         cf:85:a4:2b:14:76:98:56:ea:a4:22:13:0e:0c:62:30:3e:76:
         f3:f2:9b:f9:9f:12:68:d4:ef:e9:a5:5d:43:11:3c:cf:ad:27:
         6e:91:94:7f:21:db:62:99:b9:fd:3c:e9:f9:03:b7:52:fd:81:
         04:90:ac:b4:c9:c6:70:3a:5f:42:41:e2:78:0d:82:81:f5:1e:
         1a:03:79:62:d2:70:64:ba:25:ba:af:90:ed:cd:f9:da:7d:dd:
         e8:5f:7d:55:4b:8f:d5:91:52:75:ae:9d:d3:1a:8e:5f:bd:4b:
         ef:4b:83:c3:28:b1:73:2b:40:40:e0:d9:fd:e0:e2:be:dc:cf:
         9f:44:06:ff:c4:3f:67:31:2c:f8:ef:d9:30:96:a4:22:7e:0d:
         a4:d0:c4:c4:37:09:ea:6f:6e:78:68:d5:55:99:a4:46:a3:7f:
         cd:0f:2c:7b:1a:7d:4a:26:8e:73:1b:81:e6:f2:67:4c:65:12:
         b1:bf:01:8e:1e:6a:7e:e2:93:c2:12:74:11:7c:a4:5d:a6:1d:
         79:57:f8:e7:84:22:bf:de:75:94:dd:c9:d1:e9:45:2b:0e:c2:
         50:7d:bb:a2:9d:3f:07:2f:4a:21:60:a1:c2:02:37:0b:79:da:
         af:39:9d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:21 2023 by rpki-client on console-ams.rpki-client.org