Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7D97A644395F11ED870221ADF1222468.roa
File:                     7D97A644395F11ED870221ADF1222468.roa (raw, json)
Hash identifier:          rXQVLEnkjy8hT9SSBqyK7c8WRFbxxsUKc7AcGxBZc/4=
Subject key identifier:   C5:5C:46:91:9E:EB:DB:57:9D:5D:3F:D0:57:AE:79:DF:FB:DC:1A:C8
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       182B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7D97A644395F11ED870221ADF1222468.roa
Signing time:             Wed 21 Sep 2022 03:43:01 +0000
ROA not before:           Wed 21 Sep 2022 03:42:57 +0000
ROA not after:            Fri 30 Dec 2022 03:42:57 +0000
asID:                     35916
IP address blocks:        156.233.48.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6187 (0x182b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 21 03:42:57 2022 GMT
            Not After : Dec 30 03:42:57 2022 GMT
        Subject: CN=632a8845-f7e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8a:16:7e:0c:da:f5:26:97:d8:8c:08:21:78:
                    07:7a:99:56:cb:fa:de:51:27:37:88:5a:c1:f2:25:
                    13:33:28:4a:51:db:69:1b:41:fa:fa:25:9c:50:25:
                    d2:97:b4:8c:e3:55:98:a7:a6:56:8c:b8:7f:c1:45:
                    0e:02:37:47:24:aa:62:71:cd:d6:3e:e6:da:37:f7:
                    99:f2:ae:b4:40:5c:bf:29:9d:79:ae:78:39:f7:2d:
                    22:8e:bc:ad:23:7b:9e:47:5a:b2:01:d9:90:c5:74:
                    7a:f1:e6:b3:0a:79:98:98:39:7f:80:c9:d0:76:41:
                    9e:eb:94:3b:2f:b2:c4:ac:26:2e:13:b4:09:ab:54:
                    89:47:e3:b1:a1:54:58:ac:2a:d6:0b:28:68:9c:10:
                    f4:cf:a6:5e:d0:ae:54:40:4e:12:16:5e:a9:c6:ac:
                    13:33:34:0d:91:24:59:d1:a6:73:a3:54:b4:ec:91:
                    f7:ea:56:15:35:06:d1:b7:6e:c6:99:15:75:d9:4e:
                    a7:82:08:72:17:dd:68:d5:da:17:50:91:38:80:d9:
                    39:9c:39:fc:ac:19:d0:3f:60:a7:eb:df:59:b6:75:
                    df:fd:25:08:43:91:89:0c:af:9d:e0:5d:96:0c:3c:
                    52:6a:fb:43:92:d3:02:cf:eb:e8:68:92:e8:02:be:
                    2c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:5C:46:91:9E:EB:DB:57:9D:5D:3F:D0:57:AE:79:DF:FB:DC:1A:C8
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7D97A644395F11ED870221ADF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.233.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3c:8e:1f:f8:c5:53:1c:39:15:b9:6d:c4:ed:48:63:5d:f7:c5:
         6f:4c:ba:7b:07:32:6c:71:be:d7:9e:c8:c0:87:45:92:ba:45:
         32:b8:c1:e5:2b:30:10:7b:d8:b9:ba:04:31:b2:99:89:7f:1b:
         23:ff:00:45:d8:fa:36:42:07:44:ed:5c:36:30:3b:31:e2:cb:
         02:77:cf:3a:ee:ce:9a:35:d9:f1:dc:72:02:74:71:d0:e6:c9:
         a3:4f:8c:5d:ff:b3:f9:70:db:24:5b:52:b4:c5:94:b5:9f:ef:
         e3:45:07:15:97:c1:d7:4a:e0:f2:c6:c5:ba:47:2d:45:27:aa:
         e7:e4:71:72:d3:28:33:c1:70:69:05:88:5d:03:66:9e:73:07:
         7c:6e:b6:aa:8b:0e:35:9c:5f:4a:51:2c:c6:f8:59:95:41:a4:
         1e:e8:8f:13:eb:a9:10:cf:b1:6c:47:06:3d:59:43:93:43:1b:
         14:58:72:fd:d6:06:ee:f8:51:a3:ac:bd:0a:e3:32:b8:a7:d0:
         48:6f:ea:4e:ed:4c:51:7b:d1:6a:73:41:7b:0c:9f:e8:c1:ca:
         29:b9:70:b9:c4:f2:c1:a8:a5:ed:b4:98:fd:80:a5:e3:d3:32:
         9f:87:9f:f4:ac:03:b0:4b:ef:78:27:f7:b7:be:0c:9d:bf:a2:
         73:2f:12:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:23 2023 by rpki-client on console-fra.rpki-client.org