Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8B49BF0E34DA11ED811F7FB9F1222468.roa
File:                     8B49BF0E34DA11ED811F7FB9F1222468.roa (raw, json)
Hash identifier:          0b72n+rY9X3PjD22IUoMATf82hXj7jRF80gYvMAW3uc=
Subject key identifier:   2F:5B:96:E6:DC:85:C0:BC:94:20:BC:11:74:0F:C0:40:A7:6C:9C:69
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       17BE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8B49BF0E34DA11ED811F7FB9F1222468.roa
Signing time:             Thu 15 Sep 2022 09:41:16 +0000
ROA not before:           Thu 15 Sep 2022 09:41:13 +0000
ROA not after:            Wed 31 May 2023 09:41:13 +0000
asID:                     1239
IP address blocks:        156.225.64.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6078 (0x17be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 15 09:41:13 2022 GMT
            Not After : May 31 09:41:13 2023 GMT
        Subject: CN=6322f33c-9c74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:21:ef:45:20:59:29:fa:c7:1e:34:3b:78:62:
                    aa:80:2c:d3:07:df:82:64:9d:d2:88:46:34:8b:a8:
                    d9:9a:8f:96:6c:2b:99:a4:a6:10:97:67:74:b6:8f:
                    44:42:5c:d4:e0:0c:e5:38:6f:09:17:f8:e6:2f:b5:
                    81:d0:91:64:55:a0:5f:19:6b:c8:9e:45:cc:be:76:
                    25:37:b2:70:05:69:15:6c:7f:8b:b5:69:df:de:e0:
                    d8:60:6b:87:10:80:36:88:64:8a:4c:d4:de:18:53:
                    e7:2d:5a:3f:ad:50:a6:12:74:55:0d:86:3a:c6:90:
                    f0:24:b3:10:12:b9:45:c0:7b:d3:5b:cf:b6:ca:7c:
                    e7:45:c0:6f:50:9b:83:4b:bf:ae:0d:b2:9d:4f:e8:
                    8f:9a:5f:7c:62:da:4d:8d:9e:73:a8:82:fd:e3:d5:
                    b0:2c:be:71:ff:6e:41:53:f5:d7:2f:fb:43:e2:de:
                    46:9c:79:0f:61:1c:b2:d6:7d:48:0c:e5:90:12:10:
                    66:af:ea:ee:79:00:f1:e4:42:fa:a2:5b:30:6a:72:
                    af:d8:8c:e0:94:cb:3d:6e:d9:bc:0e:5b:19:a4:cc:
                    7a:55:e3:6f:5f:92:ba:c1:c1:fc:fa:b5:08:12:ba:
                    37:fe:50:03:f7:28:b0:b0:9c:0c:20:b5:ab:6e:2c:
                    24:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:5B:96:E6:DC:85:C0:BC:94:20:BC:11:74:0F:C0:40:A7:6C:9C:69
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8B49BF0E34DA11ED811F7FB9F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.225.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:95:c8:05:a5:9c:f4:1d:58:86:67:5e:87:75:2f:d6:50:f9:
         a6:6f:8e:05:6e:11:e8:0a:8d:36:65:3e:a7:22:21:63:24:d0:
         2f:2d:77:31:80:4e:a6:8c:71:80:7a:e2:95:7a:04:b9:68:53:
         b5:7e:e7:6a:ac:76:cc:d0:ef:3a:3a:9d:19:27:de:d1:2d:ca:
         d4:04:c3:22:68:27:73:f2:66:95:67:3c:96:0a:07:ac:18:b1:
         b4:1d:31:00:f1:1f:9a:d0:79:1d:ff:83:68:22:e2:9e:f6:cf:
         94:97:f2:20:8f:af:bd:23:38:be:69:a3:bd:5c:3a:bc:03:95:
         c9:ac:aa:5d:4c:09:ad:01:ab:51:e1:58:2a:e2:ae:85:99:69:
         e5:97:c6:47:f0:15:08:17:35:a4:d1:8c:3b:a0:c1:0e:37:f3:
         78:60:f5:3d:a5:56:56:6b:3a:cd:a5:0a:53:7e:ae:4b:5b:76:
         c7:7c:e8:98:75:76:b4:da:66:2b:8f:13:d8:e2:db:8e:0f:50:
         a6:8d:f9:54:d5:54:6a:3a:8e:57:37:53:d1:0d:57:2f:3d:60:
         98:9e:7a:f6:2d:da:43:c9:ae:e5:45:84:c6:8f:8a:a0:84:c3:
         60:2e:c1:5c:81:4a:a7:14:d6:d3:b9:27:cb:6a:4f:12:ee:fe:
         3a:88:3d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:24 2023 by rpki-client on console-fra.rpki-client.org