Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7CF180C244E111EFA8078AB2762E951A.roa
File:                     7CF180C244E111EFA8078AB2762E951A.roa (raw, json)
Hash identifier:          FqaElGJ8P5et+zAoq8prPCqbbtqQFZMCLf8N0XdQpXA=
Subject key identifier:   0D:4F:92:E3:97:E9:C1:F0:0B:AA:B4:1A:28:B8:E1:F8:B7:43:15:6F
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       9D5F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7CF180C244E111EFA8078AB2762E951A.roa
Signing time:             Thu 18 Jul 2024 08:41:13 +0000
ROA not before:           Thu 18 Jul 2024 08:41:09 +0000
ROA not after:            Sun 28 Jul 2024 08:41:09 +0000
asID:                     5065
IP address blocks:        156.249.56.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40287 (0x9d5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jul 18 08:41:09 2024 GMT
            Not After : Jul 28 08:41:09 2024 GMT
        Subject: CN=6698d529-5db5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:99:d8:cb:61:e8:59:50:8e:7d:87:74:22:75:
                    98:5b:f9:93:9c:5f:b0:04:d6:e5:dc:a1:11:45:36:
                    5b:1f:dd:0b:b4:5d:ab:18:d2:27:55:ba:7d:c8:c0:
                    8c:e4:aa:de:84:45:d4:e3:05:37:f3:57:37:72:ec:
                    f5:16:ba:d8:9b:be:85:2e:ae:35:eb:18:19:f9:f9:
                    f3:8a:f2:d0:04:e0:84:e7:a4:3f:0c:44:82:0c:ab:
                    5d:43:4b:9f:10:39:8d:2e:26:6b:63:be:4d:05:66:
                    7a:f7:33:fc:df:30:70:85:f8:e2:1c:75:c5:ad:c3:
                    b4:74:f8:11:7e:64:3b:79:44:a2:dd:bb:43:fe:2a:
                    1a:68:64:c0:72:e9:3f:89:30:7d:2d:4a:32:15:62:
                    eb:2a:38:6e:2e:c8:c3:6f:da:be:65:e4:37:fe:a3:
                    92:dc:94:8e:c2:cd:7b:1c:31:0a:fd:b8:6b:5f:6f:
                    39:f5:50:0d:2c:d7:7a:7c:03:a6:b1:67:89:fe:69:
                    1e:ba:17:50:5c:dd:d6:70:9f:23:af:2b:88:bd:c5:
                    2e:02:c5:51:ac:cb:73:c3:22:a4:6d:59:e6:0e:5c:
                    cb:5f:08:48:06:46:e9:2d:8e:ce:db:df:57:21:fe:
                    41:4c:0e:d9:7d:bd:0a:0f:58:e8:64:f3:5b:40:04:
                    8d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:4F:92:E3:97:E9:C1:F0:0B:AA:B4:1A:28:B8:E1:F8:B7:43:15:6F
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7CF180C244E111EFA8078AB2762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.249.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:3e:69:a3:01:14:b0:4e:e3:eb:95:38:ec:27:b9:0c:e5:64:
         a8:96:b4:4c:e0:59:f3:55:65:c6:8b:fe:88:e7:d6:63:6d:cc:
         5b:56:b3:b3:25:1e:e0:df:70:12:f3:dc:de:10:7f:98:b3:cb:
         c0:87:29:2a:6b:02:a3:79:09:65:b0:14:0d:5a:c9:a1:94:5d:
         27:67:14:e2:87:22:19:03:a9:21:00:c9:fa:8e:63:1d:cc:0d:
         e7:4d:c5:97:06:4c:1d:6d:db:3b:fa:1f:40:f0:0e:fb:4b:fd:
         9e:3e:d1:0a:ce:8d:61:b3:19:33:88:0a:a4:3f:02:7f:34:18:
         d8:eb:50:ef:24:65:13:33:63:ec:21:9d:87:a9:76:b5:55:fd:
         14:b0:a5:28:aa:11:ce:1f:ac:c9:6d:94:58:90:eb:a3:b6:53:
         fb:cd:34:9b:0f:42:19:1c:ef:d2:9a:3a:ce:53:3c:a4:58:5a:
         52:09:e0:6f:29:b9:6b:c0:d3:3e:4e:5c:ac:5d:5c:7e:d1:64:
         3b:47:3d:46:dc:c7:a2:26:77:32:02:0b:ee:17:d0:59:b7:c0:
         cf:6f:ac:43:01:a9:d2:88:d5:0b:66:b9:17:45:20:40:3b:05:
         fb:fe:35:c0:4a:66:92:ac:20:83:34:f9:55:2a:49:3a:f0:81:
         4e:65:97:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----