Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/86C40164179411EDB1F1F29EF1222468.roa
File:                     86C40164179411EDB1F1F29EF1222468.roa (raw, json)
Hash identifier:          6156BMOEwHq5Ykg+fUX9pr1jjdQKAg5yKL8tBnd45oc=
Subject key identifier:   6E:89:8E:98:2D:B2:2F:A5:67:32:A2:35:99:02:AD:A5:D4:A8:C1:BD
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       1699
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/86C40164179411EDB1F1F29EF1222468.roa
Signing time:             Tue 09 Aug 2022 03:37:00 +0000
ROA not before:           Tue 09 Aug 2022 03:36:57 +0000
ROA not after:            Fri 30 Dec 2022 03:36:57 +0000
asID:                     328608
IP address blocks:        156.246.202.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5785 (0x1699)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug  9 03:36:57 2022 GMT
            Not After : Dec 30 03:36:57 2022 GMT
        Subject: CN=62f1d65c-3f88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9f:87:56:24:e5:85:44:fb:f1:f0:72:ea:c8:
                    77:4c:f7:5c:c6:e2:3c:61:a4:7a:eb:e3:5d:09:07:
                    22:91:d6:75:81:1a:4c:0f:ab:8a:96:bb:62:72:b7:
                    ac:55:3e:0e:a5:33:ae:ba:8f:bb:91:ef:74:8b:a0:
                    b3:cc:97:a1:c1:3f:42:04:fb:aa:72:a2:ba:70:30:
                    af:95:2f:60:46:42:ff:aa:fd:46:48:87:26:a2:ff:
                    a1:2c:75:73:ad:6a:82:da:c3:fe:fb:55:5f:49:0b:
                    0c:38:32:ad:34:db:37:10:b2:76:20:ca:19:d1:6c:
                    19:e3:25:17:f0:59:f3:be:e8:eb:6b:86:1f:28:e7:
                    e2:ea:08:9f:e1:ee:9d:89:21:d9:a3:b2:36:c3:c3:
                    9e:ba:d6:1f:71:f2:a0:fc:06:d6:4e:c0:6c:1f:32:
                    3d:d0:87:d2:67:d9:1a:cd:0e:37:11:bd:fe:d8:9c:
                    47:48:a1:58:e9:83:ee:08:37:ee:cb:d3:b1:3f:14:
                    50:4a:28:01:20:d9:3c:38:1f:90:5f:8b:32:55:95:
                    81:73:e5:25:1e:a6:ab:f1:d0:ff:a5:5d:3e:c0:0b:
                    17:06:27:80:ac:6f:82:80:03:ea:0e:0b:c7:8f:0a:
                    03:41:88:7d:88:11:fb:4c:5f:75:87:cf:91:52:46:
                    d5:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:89:8E:98:2D:B2:2F:A5:67:32:A2:35:99:02:AD:A5:D4:A8:C1:BD
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/86C40164179411EDB1F1F29EF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.246.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:eb:7a:ab:1a:7a:59:05:34:be:13:4b:c9:dc:0c:ea:5d:c5:
         73:4e:06:55:63:41:7b:b1:96:5e:90:eb:ae:cc:34:d9:11:09:
         82:79:df:a2:2c:e3:9c:bc:dc:51:6d:da:44:8e:fc:04:7e:8d:
         47:0a:ba:a5:be:e8:fc:89:11:dd:2b:72:2a:26:48:0b:dd:af:
         e9:31:aa:89:04:67:66:5d:8c:a1:b6:5c:86:b2:2f:2b:5c:7d:
         e5:49:c6:26:66:dc:d3:33:63:97:8d:83:fa:38:b3:b9:46:35:
         4d:57:96:9b:e7:10:25:d4:ee:d5:37:76:91:fb:f5:ce:d3:df:
         17:b6:78:e3:e3:86:0d:0a:6f:a4:6e:7b:2a:84:f4:2e:c6:95:
         1e:8c:20:b1:f9:6e:38:c0:f8:d4:2a:5b:2b:03:df:3c:04:b2:
         84:49:18:c1:f9:ed:bd:f2:dc:3f:c4:73:3f:ff:c6:4f:31:79:
         83:25:76:95:4c:82:c4:6b:5d:ef:13:be:ac:f8:a2:83:78:aa:
         1c:e1:e8:43:21:8c:01:ff:09:6e:28:b2:c6:64:32:02:55:38:
         70:e1:b3:e0:86:4f:a2:ac:58:9e:7d:88:de:a9:0c:c1:2d:c4:
         9e:4b:4b:a6:ed:5d:a5:4e:9c:48:2f:98:1d:14:be:7d:5b:51:
         f1:e9:45:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:21 2023 by rpki-client on console-ams.rpki-client.org