Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9C60269E488511EC83AE1035D8A014CE.roa
File:                     9C60269E488511EC83AE1035D8A014CE.roa (raw, json)
Hash identifier:          7iM61Sivim4jBOLL19Z3nLm6SDC+7aowPatCvEkLHtI=
Subject key identifier:   49:87:37:7D:E9:7E:6C:98:4C:B3:8F:4D:B5:8C:C6:1F:71:BB:5F:3A
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0D32
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9C60269E488511EC83AE1035D8A014CE.roa
Signing time:             Thu 18 Nov 2021 15:38:43 +0000
ROA not before:           Fri 19 Nov 2021 15:38:40 +0000
ROA not after:            Sat 19 Nov 2022 15:38:40 +0000
asID:                     139879
IP address blocks:        156.231.153.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3378 (0xd32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 19 15:38:40 2021 GMT
            Not After : Nov 19 15:38:40 2022 GMT
        Subject: CN=61967383-3022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:77:b4:d2:10:4a:ae:b4:0d:7c:d8:19:d4:18:
                    5e:45:92:b0:04:32:04:f0:89:16:12:07:c4:ba:25:
                    eb:c4:b6:ef:42:38:cd:df:71:87:5e:fd:28:eb:e0:
                    bd:f8:a6:1b:31:81:7f:92:cc:a6:32:ec:68:ad:eb:
                    f7:c5:5a:21:e9:bf:d2:5a:cd:19:2d:46:07:64:36:
                    8d:46:a5:77:d4:64:77:62:42:c6:4d:6b:7a:1f:23:
                    03:28:55:80:b1:17:0d:c4:af:7e:45:4b:15:20:f9:
                    d8:ea:e7:05:68:c5:53:06:99:5f:99:5b:5e:83:e0:
                    0c:34:5a:9d:af:be:38:ba:29:97:1b:23:ba:11:01:
                    96:88:9a:d3:4b:58:f6:d9:eb:2f:e5:6f:55:90:4b:
                    2c:7f:b7:b0:d3:04:0c:d4:ec:d2:a4:26:93:4a:e5:
                    1d:89:c7:03:e0:e0:7e:b4:e9:fc:1a:7e:a7:a9:3c:
                    ae:f0:ae:9b:af:61:75:e6:bf:a5:d9:f7:e2:05:69:
                    77:0d:67:6d:f0:cf:07:55:04:87:49:ef:52:de:6f:
                    f7:36:fd:61:dc:a6:b8:c8:e9:3c:61:c6:fb:07:3f:
                    23:a6:24:84:39:97:65:45:9d:2e:65:49:88:fb:91:
                    a0:91:49:05:6a:82:4e:17:3a:dc:ad:aa:74:32:8a:
                    82:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:87:37:7D:E9:7E:6C:98:4C:B3:8F:4D:B5:8C:C6:1F:71:BB:5F:3A
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9C60269E488511EC83AE1035D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.231.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:bf:85:a4:a1:c5:a0:9c:fc:86:b7:e4:6e:8a:3b:77:8f:3c:
         76:24:39:8d:11:d6:62:d8:97:9f:b5:94:2f:71:88:02:a9:bb:
         4c:81:7f:7c:93:1d:fb:4b:60:74:d0:02:09:b9:c2:b7:42:9f:
         f9:cd:3c:a8:d8:9b:19:bb:19:4b:0e:db:e8:5a:44:e1:1a:fe:
         89:3a:bd:7c:fe:6f:99:40:67:c1:84:3f:6b:86:09:35:0f:2d:
         31:7d:9f:10:d1:0e:a0:9b:38:79:f7:f3:46:b7:60:00:94:bb:
         dd:2d:9a:b1:81:91:36:cd:f5:5d:52:d7:38:fa:ad:d1:8b:e5:
         a9:d4:fe:9c:5c:51:56:a3:2f:9f:41:76:d8:ed:cc:1d:4e:21:
         75:b2:a7:40:be:ee:ca:59:63:25:4c:13:ba:0d:42:07:2b:3f:
         b0:a6:5a:90:b6:d3:d7:4d:62:15:2f:91:67:06:bb:29:93:f1:
         11:00:9e:8d:51:a1:9c:b7:a7:02:07:90:93:a4:11:c7:5a:b2:
         45:bf:0e:3a:e9:26:1f:be:2b:1d:45:19:21:01:c6:96:7e:dd:
         c9:92:18:40:4c:c2:51:12:ae:79:eb:18:19:2c:31:d8:0d:b2:
         e4:1d:fd:be:68:8f:56:6d:5c:79:93:12:9f:a1:00:d8:2e:7c:
         95:2a:5c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:24 2023 by rpki-client on console-fra.rpki-client.org