Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7EDDA7722CFA11EDB196E0B4F1222468.roa
File:                     7EDDA7722CFA11EDB196E0B4F1222468.roa (raw, json)
Hash identifier:          4EPxvZKVfsQW0EvzfDnwPT/iPeiYkGcogxI4FICdqls=
Subject key identifier:   EB:BF:0D:50:F5:3B:68:E9:30:20:75:78:1C:17:1D:8E:C0:A7:CB:8D
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       175F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7EDDA7722CFA11EDB196E0B4F1222468.roa
Signing time:             Mon 05 Sep 2022 09:09:50 +0000
ROA not before:           Mon 05 Sep 2022 09:09:46 +0000
ROA not after:            Wed 05 Jul 2023 09:09:46 +0000
asID:                     22773
IP address blocks:        156.239.128.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5983 (0x175f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  5 09:09:46 2022 GMT
            Not After : Jul  5 09:09:46 2023 GMT
        Subject: CN=6315bcde-c50a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:74:5a:a0:c9:69:21:87:19:37:8e:a0:65:e0:
                    2b:c5:d1:97:c2:c9:c9:3d:eb:ec:0b:b1:bc:07:65:
                    eb:46:b8:e5:13:e9:59:f3:cf:28:39:6d:10:fc:be:
                    ea:23:d3:3c:b1:17:cb:8d:e0:3c:27:90:ec:e6:28:
                    be:b5:d8:bc:54:4f:ad:c9:9c:de:a9:e6:6a:5e:24:
                    ac:ef:8b:31:ad:ae:2e:22:7e:b6:a2:77:4a:1e:58:
                    b6:d2:1f:9c:9e:24:e1:fe:7e:da:5a:59:28:06:42:
                    ff:12:28:6a:3d:e0:4e:b1:b0:f4:1c:9c:51:c5:0d:
                    c0:cf:3a:6c:0d:3b:aa:f3:44:cd:37:42:ea:20:da:
                    aa:d6:f4:3e:d1:50:0d:5e:ff:75:03:6c:d9:b3:46:
                    78:9d:6e:0d:c6:75:c8:3c:18:1f:d4:2f:24:76:3a:
                    b6:bc:be:1a:22:4f:6c:cf:67:ba:fc:90:9a:fd:b0:
                    88:5d:01:b0:de:0a:53:8d:c6:9b:02:60:3f:44:fe:
                    1a:81:d1:a5:52:f3:2a:b4:3f:f3:3b:ef:e6:ef:ae:
                    82:17:23:6b:67:de:e2:59:0d:2d:31:ba:fd:90:45:
                    cb:92:5b:25:07:4e:94:86:ea:9e:2e:bf:1a:22:fd:
                    9b:c3:6e:dd:a1:f4:71:e8:e3:b5:31:78:9d:ff:ce:
                    67:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:BF:0D:50:F5:3B:68:E9:30:20:75:78:1C:17:1D:8E:C0:A7:CB:8D
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7EDDA7722CFA11EDB196E0B4F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.239.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7a:7e:2b:0a:76:c5:32:98:a7:dc:9c:00:af:d9:88:3c:12:a2:
         30:79:11:39:ce:0d:aa:95:f8:f6:d7:1e:ad:4a:91:b6:3a:4e:
         92:7d:f2:71:aa:a9:e1:04:5d:eb:a5:d2:35:dc:11:10:50:e7:
         e2:0a:b7:da:51:31:b4:ec:35:06:00:9d:08:d4:36:60:dd:04:
         d5:45:dd:aa:22:15:ff:b7:7e:fa:75:03:dd:80:74:1b:25:65:
         b7:49:e5:a3:34:11:2f:ed:23:43:73:f9:27:13:a1:be:af:72:
         8b:00:b3:c1:18:70:df:04:c7:5a:0b:f7:52:8e:ed:cf:f4:db:
         6e:e2:57:c8:7f:35:0d:55:fd:11:dd:63:6a:fc:95:bb:a8:d5:
         fc:c7:ca:de:21:96:37:37:b9:82:3d:46:b5:69:72:52:23:f3:
         85:23:ed:f6:12:b3:91:1a:af:49:3a:97:a3:24:f7:be:63:f7:
         a2:89:32:86:06:05:0d:90:05:4a:58:91:89:15:b1:48:df:16:
         83:b4:b8:89:89:69:79:f9:a7:bf:16:88:83:3c:14:7b:3b:50:
         59:ff:07:e4:a7:43:e6:49:c8:dd:5b:af:c7:e7:0b:60:a0:e4:
         f2:4d:d7:99:61:52:b9:6b:f1:d9:4b:54:4f:2c:94:1d:9b:40:
         c1:a0:da:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:21 2023 by rpki-client on console-ams.rpki-client.org