Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A01B9B7A250B11ED8C0D59E8F1222468.roa
File:                     A01B9B7A250B11ED8C0D59E8F1222468.roa (raw, json)
Hash identifier:          jd1F36HQph6Lr+D1vRVpqxcPlUAbzX1ul5Azq3KpBn4=
Subject key identifier:   72:EB:BF:69:28:EB:E3:75:57:43:80:89:BB:2D:19:D1:58:21:95:10
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       16FF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A01B9B7A250B11ED8C0D59E8F1222468.roa
Signing time:             Fri 26 Aug 2022 06:52:18 +0000
ROA not before:           Fri 26 Aug 2022 06:52:15 +0000
ROA not after:            Sun 15 Jan 2023 06:52:15 +0000
asID:                     139057
IP address blocks:        156.225.102.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5887 (0x16ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 26 06:52:15 2022 GMT
            Not After : Jan 15 06:52:15 2023 GMT
        Subject: CN=63086da2-c5d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:12:75:6a:3f:d0:d9:c5:25:ac:e4:20:b5:63:
                    f5:ed:54:06:b7:8a:4a:1a:08:44:d7:ef:c3:63:69:
                    3f:88:fe:fd:2f:a9:24:fd:59:66:6c:9e:bb:e2:eb:
                    4b:e8:eb:54:c8:7c:0b:89:d8:91:3c:cc:2f:64:ae:
                    66:97:f1:5a:a9:92:98:83:d1:c1:c4:f6:0f:12:2e:
                    e2:f8:07:cd:cd:31:fc:f7:e6:a2:3d:19:96:e9:73:
                    b1:2c:2b:30:2d:6f:99:f3:11:9d:b4:ac:1c:23:92:
                    f0:ed:bb:06:40:6c:cf:3e:60:6b:6e:4f:41:c3:21:
                    27:1f:09:73:30:5e:c4:5b:61:71:01:43:05:20:d9:
                    c3:b7:48:6e:95:6b:24:aa:52:d6:80:60:ab:2d:d8:
                    09:64:64:d5:8d:8c:94:c4:3e:8a:af:08:5b:f9:d1:
                    12:b7:8d:4c:dc:ee:71:97:0e:74:fa:ed:c5:7d:63:
                    e1:c3:c6:ea:38:5e:6e:b6:d8:57:26:2d:7d:ce:95:
                    07:07:c1:f1:fc:c0:c5:4a:9d:eb:7f:da:e4:f4:a1:
                    d6:06:f6:f3:fc:59:85:b6:cc:fb:8b:ee:b7:0c:7a:
                    7a:d4:62:df:88:09:48:9a:00:95:81:74:17:34:fb:
                    1d:e0:82:a0:27:38:95:a7:14:d5:e7:9e:44:7e:fb:
                    de:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:EB:BF:69:28:EB:E3:75:57:43:80:89:BB:2D:19:D1:58:21:95:10
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A01B9B7A250B11ED8C0D59E8F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.225.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:30:97:95:cb:e7:56:aa:f4:dd:3e:5d:c0:28:a3:6c:90:1e:
         de:26:e4:bd:df:61:ff:3d:2a:9b:a5:59:d7:8f:e4:d8:a4:26:
         83:8f:22:b8:0f:d4:1d:ad:54:71:48:38:6a:d1:48:89:12:a6:
         8c:7b:57:d2:dd:b4:41:17:cf:57:8b:a7:9f:e2:1a:52:9d:60:
         bb:f5:06:01:34:4b:e1:19:5b:b9:d5:37:07:97:86:72:31:de:
         cf:6f:00:d3:73:0b:09:d7:5c:80:11:ce:db:2e:23:5c:60:b6:
         98:cf:25:db:f2:19:b9:35:14:d8:ec:78:f7:b1:9f:fd:96:30:
         f7:40:f1:6f:4e:70:01:18:1b:20:e0:af:ae:16:a6:5a:07:a2:
         b6:c2:43:b9:48:46:5b:1a:6a:47:09:6b:73:25:91:6d:41:90:
         7a:cc:0f:ef:f0:e1:6e:2f:f6:59:02:7f:eb:f7:03:c5:ba:69:
         cf:99:35:d3:d3:64:92:c4:ac:fb:66:62:c5:4d:64:9f:2d:1b:
         97:92:ed:74:14:bf:80:27:d0:2c:57:49:14:a9:8f:b2:1f:52:
         7b:ce:4c:13:70:44:4b:cf:f1:81:39:3c:24:f0:e9:0a:41:20:
         f7:26:b9:90:39:c7:1e:46:dc:09:43:ef:18:e9:69:6e:e6:7c:
         ee:1a:72:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:25 2023 by rpki-client on console-fra.rpki-client.org