Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9803AD20441111EF8D0707AC762E951A.roa
File:                     9803AD20441111EF8D0707AC762E951A.roa (raw, json)
Hash identifier:          n9wPZQGOqjw2azw20Z7LYsH4fPUR1Jj89m4ZItvU09A=
Subject key identifier:   83:48:99:92:15:05:4A:BE:45:8A:AC:44:1F:3D:29:68:5A:7C:C6:AD
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       9D04
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9803AD20441111EF8D0707AC762E951A.roa
Signing time:             Wed 17 Jul 2024 07:53:03 +0000
ROA not before:           Wed 17 Jul 2024 07:52:59 +0000
ROA not after:            Sat 27 Jul 2024 07:52:59 +0000
asID:                     22773
IP address blocks:        156.237.6.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40196 (0x9d04)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jul 17 07:52:59 2024 GMT
            Not After : Jul 27 07:52:59 2024 GMT
        Subject: CN=6697785f-24af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:72:96:6b:11:87:b6:19:2a:15:bd:f0:75:a3:
                    e3:3e:76:12:90:2d:b2:7f:d1:d5:5f:8b:78:d7:ec:
                    46:6d:73:66:c6:b6:69:7d:cc:14:94:2a:9b:fd:ab:
                    2f:eb:ed:1b:23:bb:97:0f:01:3e:28:28:71:39:61:
                    04:32:e9:7e:10:61:fe:c2:0d:c0:2e:e8:9d:0c:a9:
                    5d:a9:d5:6e:e6:29:e6:1d:b4:b4:48:e9:aa:c0:b0:
                    97:bf:33:18:20:c3:2f:fd:00:c6:2a:15:1a:1e:01:
                    46:e4:c4:4c:73:0a:20:fe:74:f4:e8:57:b8:e9:72:
                    da:4b:2e:22:8e:6a:72:90:8d:63:63:94:6a:9c:fd:
                    f3:e7:74:77:7a:75:15:ba:be:a8:2d:88:a6:11:40:
                    f4:4d:cf:40:51:5b:6f:a7:42:65:48:25:5f:8a:f0:
                    fe:68:45:4f:c7:bc:0e:21:84:22:b7:5e:89:d3:bf:
                    8a:26:d5:3b:9e:ed:1c:85:a1:ad:5d:cd:c3:0a:cf:
                    22:50:5f:e1:a7:b8:64:fe:c8:38:03:b1:b4:20:39:
                    28:d4:79:6f:69:ee:f4:99:1e:1c:c1:0e:10:87:d4:
                    02:c5:ff:2a:b4:f1:10:5a:16:a0:aa:2a:a8:56:b6:
                    bc:20:2d:6b:db:b5:d0:ef:6f:d3:64:1b:e1:07:cd:
                    28:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:48:99:92:15:05:4A:BE:45:8A:AC:44:1F:3D:29:68:5A:7C:C6:AD
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9803AD20441111EF8D0707AC762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.237.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:14:74:dc:7b:63:01:84:cd:7e:2b:95:93:78:9c:09:a7:2f:
         fc:7c:99:f1:73:10:b4:b7:78:57:de:c4:0c:6a:d3:e4:f4:f6:
         29:bd:be:93:11:e9:84:cf:55:ed:b5:04:04:e1:d1:99:77:60:
         ec:92:88:e4:4e:01:62:68:a6:0a:6c:c9:01:a4:c9:c2:12:a7:
         72:b0:ee:e0:ad:77:16:57:e0:d1:b7:82:95:33:08:a0:a7:59:
         29:00:c5:cb:c8:a7:c2:1c:b4:58:c3:9c:a6:14:8b:b8:28:46:
         59:03:1f:0b:ef:94:56:07:78:66:48:58:5b:73:25:c7:87:18:
         17:66:8b:0d:6f:6d:de:5a:44:24:e5:65:c3:91:b3:1e:d7:ad:
         44:56:e7:a2:69:95:e8:ea:52:b0:17:e5:2e:1a:41:4d:4a:71:
         96:2b:71:63:e3:a6:29:e6:56:1d:36:d8:05:9f:0e:ae:b5:a3:
         e6:a5:bf:9f:d5:68:4c:44:02:4a:3d:72:9d:60:9b:2d:77:7a:
         f3:0a:47:41:ae:be:97:6c:71:48:36:21:8f:ca:39:29:c5:33:
         e4:4f:94:42:f6:7e:9b:97:22:65:9a:4b:36:09:9f:bc:5c:2c:
         85:9c:28:d6:74:51:2a:ca:53:c5:c8:f4:9f:e7:b4:56:d3:e6:
         ec:f9:32:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 28 03:03:27 2024 by rpki-client on console-ams.rpki-client.org