Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/81A7FF643B0711EDA88BE496F1222468.roa
File:                     81A7FF643B0711EDA88BE496F1222468.roa (raw, json)
Hash identifier:          L/i5i+VceF6LZPE6E3UXYgRvd7S4NwBHRm2IDoAjrjE=
Subject key identifier:   7E:B4:7B:00:CB:CF:31:A7:EA:3B:90:A8:5F:2A:ED:87:A3:0B:87:88
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       1856
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/81A7FF643B0711EDA88BE496F1222468.roa
Signing time:             Fri 23 Sep 2022 06:18:14 +0000
ROA not before:           Fri 23 Sep 2022 06:18:11 +0000
ROA not after:            Fri 30 Dec 2022 06:18:11 +0000
asID:                     328608
IP address blocks:        156.250.0.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6230 (0x1856)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 23 06:18:11 2022 GMT
            Not After : Dec 30 06:18:11 2022 GMT
        Subject: CN=632d4fa6-171e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f5:6f:fb:74:cb:13:c6:6a:dc:2f:32:7f:da:
                    de:e6:4d:96:22:25:53:61:1a:53:cc:f1:3e:a2:ee:
                    12:05:a7:0b:32:6a:b3:95:6f:99:94:31:71:ef:65:
                    a9:da:7a:01:ca:10:17:bd:5d:fb:2f:35:ba:26:aa:
                    72:03:91:88:7d:3e:9f:06:4a:ca:1f:fa:ec:12:b7:
                    02:f4:fd:e6:50:27:0b:32:2c:23:57:43:b0:cf:ff:
                    82:f1:f8:60:34:5f:6f:6c:f4:23:a8:90:23:a0:53:
                    11:45:8d:c6:c8:10:1b:f8:c2:74:35:d8:e3:17:fe:
                    00:67:c2:c7:fe:4e:af:cb:58:06:c8:bb:17:36:40:
                    f7:e0:12:44:4e:63:53:24:b8:0d:20:89:b9:45:87:
                    4d:cb:52:b3:ab:99:d5:17:2b:69:98:d3:e2:ab:5f:
                    46:5c:a5:0a:4c:bc:49:e3:a5:28:96:e2:cc:73:ce:
                    bc:5b:69:35:98:08:82:37:ae:7e:67:8a:64:e2:ee:
                    aa:69:9c:b7:f4:90:86:8c:0b:da:95:ce:d0:6b:61:
                    29:7f:83:4a:a2:9e:9a:e8:51:3e:d3:90:ec:81:80:
                    8a:ef:80:4f:06:d3:c4:2a:f5:68:c8:6f:7b:ff:64:
                    76:eb:c4:79:34:78:b8:e0:a9:05:2f:8f:be:c8:86:
                    e6:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:B4:7B:00:CB:CF:31:A7:EA:3B:90:A8:5F:2A:ED:87:A3:0B:87:88
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/81A7FF643B0711EDA88BE496F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.250.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:c9:c1:ee:b9:99:b5:d1:c2:b3:19:a9:a1:25:32:b5:02:f6:
         7d:09:df:3f:d9:4c:ed:78:b8:7a:d9:f6:22:14:be:9d:54:b1:
         3f:77:cc:b3:ef:7e:05:1c:f0:58:85:9a:d8:8a:eb:6e:a2:e0:
         cd:85:9b:26:45:0c:61:41:80:52:84:d3:75:0f:07:74:ee:fc:
         68:94:0b:a3:82:01:7c:71:98:ad:d4:b8:d4:5e:6e:fe:51:31:
         02:86:0f:75:a5:f0:97:a2:e6:28:08:ba:33:b0:df:f4:3d:13:
         38:aa:47:5c:f1:4e:93:aa:59:32:eb:76:f8:69:40:19:f0:41:
         dc:41:46:cf:5a:1c:91:1e:38:5a:04:aa:14:9a:45:06:69:dd:
         de:1f:f4:81:34:42:bc:ab:bd:b8:68:b1:7c:1c:ed:b7:fe:d8:
         bb:88:a0:88:ca:9c:fa:9b:97:bc:8d:06:fc:18:2a:d4:51:d7:
         0f:4b:07:42:1f:1e:ac:e7:17:db:48:54:48:9f:58:84:7c:87:
         e8:dd:3a:57:cf:15:6e:25:53:0d:36:5f:26:0b:a4:54:b4:b4:
         5f:31:e0:da:9b:88:1b:b8:84:9e:a8:21:92:1c:ad:02:ae:00:
         64:4d:18:73:3e:e5:91:b3:a1:d5:22:a7:03:28:ec:16:0b:f0:
         23:89:50:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:21 2023 by rpki-client on console-ams.rpki-client.org