Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A65F710C486E11EC95533A0FD8A014CE.roa
File:                     A65F710C486E11EC95533A0FD8A014CE.roa (raw, json)
Hash identifier:          kfDvexUcVrYe7borTj8mCJxLJ/L5TpcU8gppIwGt5fo=
Subject key identifier:   51:DB:B1:A9:D9:B8:01:D4:C2:00:62:52:C4:0A:CE:2B:35:C1:41:ED
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0CA0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A65F710C486E11EC95533A0FD8A014CE.roa
Signing time:             Thu 18 Nov 2021 12:54:22 +0000
ROA not before:           Thu 18 Nov 2021 12:54:17 +0000
ROA not after:            Sun 27 Nov 2022 12:54:17 +0000
asID:                     16125
IP address blocks:        156.238.25.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3232 (0xca0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 18 12:54:17 2021 GMT
            Not After : Nov 27 12:54:17 2022 GMT
        Subject: CN=61964cfe-56eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6c:9c:b6:02:36:c5:39:49:63:75:ce:3f:17:
                    09:c9:6c:2d:72:ad:96:15:ef:41:e4:c8:65:c0:87:
                    46:fd:e1:d9:4b:8b:26:ce:57:08:40:07:0b:f7:3c:
                    0f:2d:de:e5:3e:7c:f8:e6:6d:51:cb:0b:6d:c1:cd:
                    70:65:3b:b6:c9:33:3e:30:9c:da:f1:6c:81:9f:56:
                    a8:0d:d1:4a:df:44:3d:d0:9b:c3:a5:fb:55:6a:61:
                    bc:df:87:b9:56:c8:2e:b8:ce:a0:4f:05:d7:5d:44:
                    ac:b7:7f:d9:e4:6c:cd:a0:62:0b:26:d4:13:81:e0:
                    23:ac:d8:fc:8c:f8:ed:2b:eb:f3:0a:b6:87:a2:3e:
                    5a:56:4d:3d:c6:92:5c:84:ea:43:da:a4:41:98:f7:
                    cf:0e:02:6c:cd:7f:ef:2d:7c:ad:2d:21:3b:ea:7a:
                    c1:c5:68:1d:6c:a8:ab:ad:12:66:f3:03:5f:f0:b4:
                    73:10:0c:34:58:10:f1:1c:10:d7:6a:45:b3:39:8d:
                    24:40:98:4a:58:76:f9:eb:a4:d0:cd:60:f7:99:27:
                    16:d8:7f:38:02:2d:a5:a3:b4:28:54:84:7e:69:f0:
                    b2:71:a1:34:7d:b6:bf:22:0a:0b:7f:5a:03:d6:c1:
                    2a:5a:72:1d:10:0c:5e:6f:79:05:ec:87:e1:6d:4a:
                    2b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:DB:B1:A9:D9:B8:01:D4:C2:00:62:52:C4:0A:CE:2B:35:C1:41:ED
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A65F710C486E11EC95533A0FD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.238.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:9d:05:cf:44:4d:9b:9e:ca:27:9f:4f:56:b6:2e:64:29:1a:
         85:f0:16:01:50:bc:7d:0b:49:6d:dd:0b:e7:2b:f0:90:fb:87:
         e6:2b:0d:aa:90:39:57:37:15:2d:b9:00:35:bc:42:a9:05:47:
         f7:d8:9b:11:23:a6:38:36:3f:8e:88:40:3b:97:f7:cc:43:99:
         89:51:85:29:29:41:e3:06:84:74:82:6d:9d:71:70:04:cd:b8:
         90:ac:1a:26:79:eb:51:60:2a:95:bc:6b:dd:de:fa:5d:a1:ca:
         11:5a:43:54:06:24:9a:19:59:da:4c:8b:a5:d4:ef:19:51:d3:
         eb:76:fe:f9:4f:9e:57:8a:a6:83:22:30:da:0d:a1:60:94:8c:
         05:bd:00:d0:74:e7:da:3a:16:d1:9d:10:6f:f2:15:e8:ba:ab:
         56:b6:6e:3b:b2:ee:28:00:6b:72:9a:49:61:04:9d:19:77:a5:
         a2:8e:31:de:6e:b9:a7:48:be:8c:ca:f3:c6:4b:30:2a:54:92:
         3c:0b:08:c9:da:f6:24:a7:c0:5a:1d:d1:9e:d1:cc:eb:fa:ec:
         ab:da:cd:0e:07:35:42:7b:1b:2d:e0:31:c8:7a:4c:be:39:96:
         59:2d:56:0d:1b:a5:0b:97:96:1b:95:74:cc:0b:6f:cb:39:5e:
         8a:9e:06:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:23 2023 by rpki-client on console-ams.rpki-client.org