Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AB8237B2E89411EBA062B42AD8A014CE.roa
File:                     AB8237B2E89411EBA062B42AD8A014CE.roa (raw, json)
Hash identifier:          sHIS0R67OHfu9AmRB5QTX0uOK9BuaBQTVskYM0LUWuk=
Subject key identifier:   62:81:E7:AF:E7:17:16:5D:80:E0:FE:8D:1A:69:9B:D4:CA:00:72:3D
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0778
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AB8237B2E89411EBA062B42AD8A014CE.roa
Signing time:             Mon 19 Jul 2021 13:24:46 +0000
ROA not before:           Mon 19 Jul 2021 13:24:42 +0000
ROA not after:            Mon 14 Mar 2022 13:24:42 +0000
asID:                     1239
IP address blocks:        156.235.0.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1912 (0x778)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jul 19 13:24:42 2021 GMT
            Not After : Mar 14 13:24:42 2022 GMT
        Subject: CN=60f57d1e-450d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:92:52:00:52:fb:0a:42:ef:c0:8c:02:af:d4:
                    43:5e:d1:c5:f1:95:28:a3:ff:80:20:27:1f:e0:a7:
                    ff:6a:ea:34:bb:8e:09:13:fe:3d:38:c3:64:69:fa:
                    cc:47:56:3b:3d:05:20:8f:08:ed:c0:29:94:c7:c3:
                    1e:0c:be:38:d9:4c:d0:ee:14:a2:b9:fa:0d:a4:a7:
                    97:86:5d:1d:cf:8b:82:c6:72:25:f3:2d:39:2d:05:
                    41:d8:01:a7:94:be:3d:e0:3c:eb:a9:a7:5b:f8:10:
                    c4:65:9e:de:15:c8:20:09:9e:41:07:e4:09:bb:22:
                    f7:65:d9:08:9f:13:41:bf:cb:fe:61:3c:dc:ad:42:
                    ff:33:5f:60:3a:36:b6:64:56:69:38:2d:bc:65:d8:
                    92:cc:9c:25:12:19:88:3d:76:87:32:05:0a:16:3e:
                    68:4b:2d:7a:e8:2f:44:f8:b9:ac:0b:61:44:da:10:
                    90:8a:92:88:fb:ac:da:ee:e8:94:16:dc:5f:3a:21:
                    cc:28:d4:b7:aa:62:43:e5:54:d1:5c:ef:83:f1:85:
                    cb:55:d6:be:e2:8f:1e:ab:06:2c:f8:0d:bf:b9:98:
                    77:61:52:e3:08:7b:b3:42:aa:f5:2a:a8:90:e4:0c:
                    04:d9:a3:42:65:20:53:7a:07:31:2c:d0:dd:5e:92:
                    de:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:81:E7:AF:E7:17:16:5D:80:E0:FE:8D:1A:69:9B:D4:CA:00:72:3D
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AB8237B2E89411EBA062B42AD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.235.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:6c:6e:22:e7:bb:b3:a1:dd:83:ed:f6:d1:8d:04:a7:a6:16:
         d7:0f:a1:30:a9:f0:35:83:3b:a1:88:eb:c3:0a:f6:8f:f8:41:
         33:e3:13:55:7f:c8:35:68:a1:78:0e:43:df:d3:44:9c:11:85:
         cc:53:37:4c:c1:e0:18:76:e6:75:73:d1:8f:03:40:bb:8a:c9:
         35:cb:df:da:5f:78:72:57:c4:82:7f:27:cc:16:9c:51:49:d8:
         a5:19:60:58:83:de:54:f3:b2:93:61:1d:d5:ea:7f:c5:f0:0f:
         d2:da:24:03:12:6a:41:1d:a7:26:40:d7:20:b6:ea:cf:5c:55:
         82:65:1f:07:17:61:2f:80:93:1f:1d:a2:15:4a:12:b3:14:e0:
         3e:57:90:f1:49:50:32:dc:f8:29:52:08:c9:01:26:03:e9:81:
         23:8a:ec:0b:04:42:81:c0:99:52:58:f5:67:89:11:9f:20:7f:
         5a:f8:4d:4e:71:95:c9:d2:82:39:8c:58:d6:82:68:ae:80:8a:
         40:2b:33:97:3c:d1:a1:e4:1f:be:65:09:00:0e:24:0f:58:4b:
         da:9f:11:b6:c7:de:94:9a:f9:13:58:bf:51:2a:22:69:7b:80:
         50:b0:da:e1:6d:40:1a:72:56:5c:3c:98:57:cd:d3:1f:24:51:
         27:e7:f9:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:23 2023 by rpki-client on console-ams.rpki-client.org