Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AEB012C82CFA11EDAAD782B5F1222468.roa
File:                     AEB012C82CFA11EDAAD782B5F1222468.roa (raw, json)
Hash identifier:          DduHAhQpag1hyeGyGms4SgOxBZ6XowF7sHwEkX9UWvQ=
Subject key identifier:   4F:8E:F0:C6:43:30:04:16:A7:56:CB:DE:9A:5F:B6:36:76:FE:69:97
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       1763
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AEB012C82CFA11EDAAD782B5F1222468.roa
Signing time:             Mon 05 Sep 2022 09:11:10 +0000
ROA not before:           Mon 05 Sep 2022 09:11:07 +0000
ROA not after:            Wed 05 Jul 2023 09:11:07 +0000
asID:                     22773
IP address blocks:        156.237.0.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5987 (0x1763)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  5 09:11:07 2022 GMT
            Not After : Jul  5 09:11:07 2023 GMT
        Subject: CN=6315bd2e-75df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9a:08:ed:42:7c:46:e7:60:90:4a:63:82:ec:
                    5b:93:d4:92:38:fa:61:52:54:76:2e:e5:d4:3b:cb:
                    f1:d7:e3:af:e7:4b:21:09:db:49:37:22:6d:c5:f0:
                    d2:2d:33:8e:83:23:de:39:19:df:55:62:d8:33:8f:
                    5c:68:bf:01:d6:a6:c8:48:a1:83:6c:00:7a:bd:5e:
                    3d:8b:7f:ea:17:c6:af:e5:2a:8f:6c:22:f4:15:86:
                    8b:68:f1:3c:ba:71:9e:29:69:ec:05:cc:37:ce:5b:
                    40:f7:c4:82:a9:52:4e:e6:77:32:a2:6c:cb:c2:ba:
                    11:29:b3:97:51:f9:e5:0f:39:e5:18:45:f8:1c:a5:
                    ce:21:c1:b4:fb:47:b6:93:e1:20:34:33:5c:28:5d:
                    d6:52:ee:f0:c2:61:ab:83:a2:95:82:76:ff:5d:ca:
                    7f:75:a7:81:29:17:f2:a9:38:48:c3:c9:d4:12:38:
                    84:b2:fa:fd:60:0e:a8:03:4e:5b:6d:31:d4:d7:81:
                    9c:3e:fb:be:cc:98:7d:83:62:a5:12:66:70:aa:a6:
                    91:76:08:15:4c:65:5d:fb:eb:f9:96:fa:ad:f0:9c:
                    26:fd:dc:43:22:76:1d:93:b8:78:66:01:78:5e:59:
                    1f:45:32:ae:ef:b5:e4:26:21:32:07:4a:d6:be:05:
                    ed:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:8E:F0:C6:43:30:04:16:A7:56:CB:DE:9A:5F:B6:36:76:FE:69:97
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AEB012C82CFA11EDAAD782B5F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.237.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:97:7b:e0:5e:f8:27:71:e8:d5:35:5a:2c:a5:73:8b:aa:88:
         99:b4:6e:d2:30:98:d1:4c:fe:d5:ba:df:c4:b9:99:e1:45:57:
         5e:fc:9a:24:68:0d:c1:66:2b:8a:86:e2:da:5e:7f:e8:e0:34:
         cb:92:d8:51:25:17:e9:9e:82:20:92:ec:1a:ca:a5:6d:0c:e3:
         64:3c:77:ef:ae:3d:e3:94:67:6b:8f:48:34:9e:10:46:ce:ec:
         dd:cf:57:05:06:5a:bd:7e:a2:e6:8f:d9:51:7d:da:bc:9f:37:
         c4:85:a2:1b:f8:e3:5e:06:76:c9:2b:2c:35:0d:f4:b8:58:cd:
         2c:cf:1c:32:27:07:50:ee:a0:03:fe:a9:47:90:85:54:ac:3a:
         aa:06:bc:c0:1d:9f:73:d5:d6:8f:cc:3c:14:75:9b:3b:a7:de:
         b1:02:23:1c:4a:3d:8a:20:99:f2:9a:e2:ba:8c:2f:98:9c:c4:
         e6:30:7b:d4:c7:0c:22:0f:6c:26:e2:a0:7d:1d:4c:29:c3:a6:
         92:1a:e6:ae:25:b5:00:d1:fe:b4:3d:b1:9b:48:ef:23:55:89:
         03:c0:5e:e0:66:18:56:8c:e0:35:1f:fd:57:35:2a:29:8b:aa:
         8d:2e:bf:1c:81:8a:19:99:a8:a5:d4:7c:b4:a7:83:5e:43:bc:
         dc:3f:34:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:25 2023 by rpki-client on console-fra.rpki-client.org