Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B37815C2735911ECA37E94BC5A40D577.roa
File:                     B37815C2735911ECA37E94BC5A40D577.roa (raw, json)
Hash identifier:          70x9JpfiRcXUW/5wYD0/7IVpp3jT1oBc8/OTVuIN8z8=
Subject key identifier:   76:CD:39:E8:88:65:67:03:A1:E9:4E:E3:3E:EA:FA:49:10:43:3E:38
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       1157
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B37815C2735911ECA37E94BC5A40D577.roa
Signing time:             Wed 12 Jan 2022 03:42:44 +0000
ROA not before:           Wed 12 Jan 2022 03:42:41 +0000
ROA not after:            Sun 31 Jul 2022 03:42:41 +0000
asID:                     149009
IP address blocks:        156.241.248.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4439 (0x1157)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 12 03:42:41 2022 GMT
            Not After : Jul 31 03:42:41 2022 GMT
        Subject: CN=61de4e34-729c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:37:47:f6:80:1a:7d:7d:45:f0:5d:a2:e4:f0:
                    b1:7b:57:ec:95:20:1a:17:a0:3e:eb:69:53:41:c6:
                    c6:a4:6a:69:39:2a:7d:e2:39:f1:92:4e:e0:e1:4a:
                    05:34:8c:46:88:61:4e:3c:24:5b:c9:b3:75:5f:48:
                    89:35:60:eb:90:f7:ed:2f:c3:31:d1:56:b5:c9:2a:
                    4f:15:15:61:43:50:c4:a8:98:f0:8d:9e:c7:84:8b:
                    97:7b:c2:21:20:88:81:0f:ca:14:f5:e3:59:a5:78:
                    02:ea:f4:ec:df:59:a2:78:b7:32:92:7b:14:f3:96:
                    55:95:43:53:07:d3:16:b1:7e:ae:95:e9:8a:c3:29:
                    d4:b7:5b:5d:46:0b:fb:64:a2:d6:6e:cc:53:4a:e3:
                    70:2e:08:73:b6:2b:1d:f0:1e:17:f5:f1:32:e3:ec:
                    bd:15:f9:55:6d:99:15:88:7f:a1:e2:94:62:26:37:
                    8f:cf:93:d7:72:7c:40:88:90:98:e8:ee:a6:f3:c0:
                    4f:36:e3:19:1e:97:43:ff:75:13:8a:50:21:93:72:
                    e6:fb:aa:7a:a0:65:88:25:76:3f:7a:b3:a9:1c:ea:
                    82:91:94:2d:c4:39:6d:13:9c:5e:7f:79:88:b6:e5:
                    5d:a2:7d:52:85:fe:05:5a:01:e7:08:82:86:ef:d0:
                    c5:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:CD:39:E8:88:65:67:03:A1:E9:4E:E3:3E:EA:FA:49:10:43:3E:38
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B37815C2735911ECA37E94BC5A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.241.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:cd:ad:52:67:54:7c:2d:7d:a8:04:4b:f9:b9:3c:bd:c1:1d:
         59:1a:77:57:91:ca:5a:dc:6f:7e:e2:43:28:c9:cd:1a:57:97:
         3c:e4:71:ff:99:36:eb:a3:b6:4d:e2:34:d7:a1:c9:bf:b1:48:
         e4:1a:93:23:c0:5c:d6:b2:7d:18:47:96:28:a8:b7:89:0e:16:
         51:e0:64:50:13:86:c5:02:e2:93:4c:d2:53:d5:22:66:da:be:
         b9:39:bd:25:ae:8c:44:f9:07:a0:11:6a:20:6c:5e:0e:cc:b0:
         97:02:b0:b8:2e:e1:ff:9f:b6:03:b6:b9:13:b8:45:a6:4a:4f:
         d8:08:ab:61:73:aa:b5:be:7e:f4:8b:c8:4a:16:58:c1:b8:b2:
         0d:0c:e6:9f:7d:a3:1c:d6:71:82:e1:78:63:f0:1b:32:fc:cd:
         47:a6:3f:62:2c:f9:87:f3:a3:18:3f:11:cf:03:b3:72:8b:4a:
         a2:15:fe:52:ef:c8:c8:b2:7c:6e:8e:c3:0b:c1:83:b3:80:1c:
         c8:e9:17:55:37:30:5d:f2:62:f6:4a:30:06:ad:a1:5d:ff:99:
         85:25:af:7c:f0:92:d9:52:94:12:59:09:59:fe:ae:c0:dd:5b:
         01:15:8b:0f:c6:17:a3:e1:0c:b3:e4:f6:4f:f5:60:0e:76:1e:
         5c:5f:58:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:24 2023 by rpki-client on console-ams.rpki-client.org