Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B58B5402406911EF9715A49B762E951A.roa
File:                     B58B5402406911EF9715A49B762E951A.roa (raw, json)
Hash identifier:          RdV6u7cx+kRNwqqqg8SXu/1NPu8rAe62sWWTPOdBG7I=
Subject key identifier:   41:A2:6E:9A:4A:98:A5:E4:5E:94:B3:DA:DE:81:EE:F3:AF:76:75:30
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       9BFF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B58B5402406911EF9715A49B762E951A.roa
Signing time:             Fri 12 Jul 2024 16:13:43 +0000
ROA not before:           Fri 12 Jul 2024 16:13:40 +0000
ROA not after:            Tue 13 Aug 2024 16:13:40 +0000
asID:                     138915
IP address blocks:        156.244.9.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39935 (0x9bff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jul 12 16:13:40 2024 GMT
            Not After : Aug 13 16:13:40 2024 GMT
        Subject: CN=66915637-8502
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4f:9b:ce:7c:83:f2:da:1a:f2:21:67:f3:78:
                    5f:35:24:81:e4:6d:a7:90:ed:6a:da:58:c1:29:3c:
                    d9:3a:88:18:d4:f8:c5:13:3e:71:df:eb:79:69:61:
                    c7:b5:11:9f:75:72:f1:e2:bc:5c:56:0a:cc:ff:0d:
                    66:b6:c5:70:b8:f1:30:19:a2:cb:c8:1f:bc:a9:bb:
                    eb:b7:e3:f1:eb:b9:ef:c6:2f:4b:da:95:1f:96:5d:
                    70:3b:dd:cb:fa:25:99:a9:87:c8:ca:58:34:0b:2a:
                    5d:69:2c:18:11:59:51:1c:3a:1c:61:a9:0e:95:c0:
                    af:3e:2f:94:52:42:26:d6:22:9f:74:6c:f3:43:08:
                    6b:31:6d:d9:6e:4e:1f:26:0d:51:f1:bc:23:8d:7d:
                    c9:f2:15:62:c0:c4:9f:47:09:4d:ff:75:fc:30:7e:
                    5a:cf:f7:65:7d:09:a4:8e:34:6f:6c:4f:ab:9a:bb:
                    7c:ae:d5:14:4a:ad:8d:d1:e5:dc:79:27:66:52:15:
                    8d:a5:ac:d6:8d:6f:fc:87:34:bc:ca:fe:06:10:36:
                    89:c4:a9:22:fa:22:54:af:19:78:a6:15:42:25:0f:
                    cd:3d:8f:10:6c:b3:a3:ac:dd:85:f4:12:ab:8a:80:
                    9e:6f:a1:30:a0:bc:98:3f:05:f9:da:1f:f6:00:dd:
                    53:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:A2:6E:9A:4A:98:A5:E4:5E:94:B3:DA:DE:81:EE:F3:AF:76:75:30
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B58B5402406911EF9715A49B762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.244.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:16:45:28:f6:8b:e4:f3:ce:34:d2:9f:df:e5:66:67:53:30:
         92:61:31:7e:28:93:67:98:51:bd:80:d7:d9:7a:b8:06:47:d7:
         40:2d:b2:94:7a:ed:a6:e3:8f:78:cf:c7:cb:dd:78:f2:7a:e9:
         0e:94:8a:47:11:dc:fd:d4:f6:73:71:77:13:9c:15:fe:03:53:
         cb:8d:73:32:8b:79:22:f8:d2:32:8d:53:ba:87:6a:b8:e4:ac:
         e3:7b:4c:31:84:ae:f1:ee:54:ad:d8:fd:51:7b:f8:3c:f2:7c:
         29:1f:29:d7:a5:44:ed:ba:e3:cc:14:15:b0:22:ab:e7:8d:a0:
         32:0a:2d:7a:af:c2:38:06:19:ae:1a:f8:18:55:26:83:cf:c1:
         04:66:da:c9:3c:2b:84:2e:cf:11:a0:c3:91:00:10:ab:f4:c5:
         f6:6d:4a:ef:77:43:b3:53:60:24:fb:52:42:03:51:4b:ae:0b:
         ca:92:b4:0b:f1:61:e6:b8:89:47:03:f2:9a:4e:bb:48:e7:6b:
         46:0e:19:e9:c6:4b:8f:d6:02:fc:d3:68:2d:b9:4f:3d:ec:d0:
         15:0c:0a:5f:f5:0c:ee:c4:2e:23:e2:54:39:5a:cd:68:05:36:
         97:2e:08:7a:2a:67:64:38:2e:7d:3c:2c:a8:ba:c0:8b:3b:c7:
         bb:61:42:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 14 05:05:46 2024 by rpki-client on console-ams.rpki-client.org