Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A6D49192488911ECADF4DF3DD8A014CE.roa
File:                     A6D49192488911ECADF4DF3DD8A014CE.roa (raw, json)
Hash identifier:          fTesifzEJx3bQkvxD59XSwAwk09/jarTozJG2wShmDM=
Subject key identifier:   50:5F:37:D4:01:99:9F:83:5E:70:2A:58:0E:0C:7C:E9:D4:A2:E4:0F
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0E12
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A6D49192488911ECADF4DF3DD8A014CE.roa
Signing time:             Thu 18 Nov 2021 16:07:39 +0000
ROA not before:           Fri 19 Nov 2021 16:07:35 +0000
ROA not after:            Sat 19 Nov 2022 16:07:35 +0000
asID:                     139879
IP address blocks:        156.249.194.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3602 (0xe12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 19 16:07:35 2021 GMT
            Not After : Nov 19 16:07:35 2022 GMT
        Subject: CN=61967a4b-4827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:37:03:a9:4c:ba:bf:f1:cf:cf:db:42:a0:32:
                    36:03:3f:fd:99:46:91:1c:81:53:88:5c:aa:ed:69:
                    c5:a3:ea:ee:97:cd:2e:14:6f:bc:7d:9a:24:47:c0:
                    2d:6b:8e:11:71:6c:5b:1b:4c:87:3b:b1:ab:ed:2e:
                    92:d4:09:96:6c:cb:1c:ac:4a:56:37:42:03:9f:6b:
                    df:77:87:e3:e0:18:9c:7d:95:04:28:c1:35:12:ca:
                    71:39:6e:05:48:59:b2:f1:5a:a8:3d:55:32:e4:f1:
                    15:8a:d9:a5:d5:f2:dd:6f:cf:fa:ef:cb:f6:22:ba:
                    bd:ea:a3:d9:a4:0c:86:7b:08:a4:66:ae:d4:8d:85:
                    e4:c4:89:63:ff:e0:9b:e7:86:90:39:e4:04:37:09:
                    5b:a3:84:8d:1f:4e:1b:3c:0f:bd:d7:61:e2:78:cf:
                    87:09:0b:b6:84:c5:1f:bf:9d:49:c8:da:5e:00:3a:
                    27:ad:6f:a7:73:c9:cb:b4:e7:85:c8:ee:aa:b5:86:
                    ec:6f:de:99:43:bb:e6:81:42:81:fa:20:95:dd:b1:
                    b7:f3:35:31:19:96:be:f1:0b:7d:6b:b4:52:9e:44:
                    10:e4:8e:7a:93:76:13:bc:2e:ea:54:b8:76:ec:e3:
                    0a:75:16:ed:e4:19:8a:7a:b9:51:20:85:50:d1:89:
                    a0:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:5F:37:D4:01:99:9F:83:5E:70:2A:58:0E:0C:7C:E9:D4:A2:E4:0F
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A6D49192488911ECADF4DF3DD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.249.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:39:c6:51:0f:e7:6a:a7:49:96:fd:63:cf:b6:b8:9d:e6:64:
         aa:7e:1a:b6:a6:c5:de:60:a0:2d:94:17:24:11:20:ee:d2:ad:
         8f:e4:b4:e1:79:6f:c7:bd:3d:87:c3:2f:5c:59:22:09:e0:a5:
         13:52:11:fc:ba:a0:fd:4e:8f:62:e5:7c:51:61:e4:1e:07:78:
         99:19:73:1a:bd:60:1d:15:39:ef:b9:6f:16:cf:d2:5e:f0:a3:
         aa:67:40:2a:2b:82:6a:f4:6a:2a:37:cb:2e:5a:21:3b:c8:42:
         cb:55:bb:0e:14:54:77:0f:23:f9:8d:fa:a4:e6:d0:08:fe:c6:
         72:f7:54:5e:50:cf:f3:54:71:bb:f3:f4:fc:9c:a7:70:6d:a7:
         62:b6:d5:32:d3:5d:b1:d4:fa:1f:f4:af:77:0d:8c:31:b1:2b:
         30:70:bd:0c:1a:88:e7:e3:c4:67:40:e0:30:82:8d:42:93:39:
         10:7d:39:b3:cc:2a:60:76:1e:d7:cf:76:20:4e:a1:00:bd:86:
         26:16:31:fe:dd:3f:dc:f7:68:42:88:04:8e:45:03:92:a7:7b:
         a1:eb:f7:8b:95:90:8d:0d:76:af:8d:25:86:eb:de:a5:89:d2:
         f4:01:8c:1f:8c:dd:42:07:bc:a5:5b:88:12:6c:f8:8e:30:d2:
         f8:6e:82:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:23 2023 by rpki-client on console-ams.rpki-client.org