Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B648B4F0620611ECA45A9AE45A40D577.roa
File:                     B648B4F0620611ECA45A9AE45A40D577.roa (raw, json)
Hash identifier:          t21uxOWEHGAJDniJ9+NujRD4l88rFDxVTKqxaX5HvsM=
Subject key identifier:   E3:A7:D6:98:48:9A:78:43:A3:87:E4:ED:30:B9:C2:D4:D4:C5:DC:A4
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       1105
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B648B4F0620611ECA45A9AE45A40D577.roa
Signing time:             Tue 21 Dec 2021 02:35:51 +0000
ROA not before:           Tue 21 Dec 2021 02:35:46 +0000
ROA not after:            Fri 30 Dec 2022 02:35:46 +0000
asID:                     35916
IP address blocks:        156.233.2.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4357 (0x1105)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 21 02:35:46 2021 GMT
            Not After : Dec 30 02:35:46 2022 GMT
        Subject: CN=61c13d87-c565
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b9:cc:62:60:0f:90:e6:ac:f6:7e:77:a5:99:
                    5a:e1:ef:2e:e0:96:5e:c6:aa:e6:5c:37:96:a9:88:
                    a1:e8:2c:0c:b7:9f:c4:34:04:62:6c:d1:dc:33:78:
                    7a:1a:e5:94:16:73:4c:e1:46:b7:8b:d5:e0:32:7b:
                    d6:87:a6:e3:c3:b5:a3:c3:80:5f:b8:ec:f4:ca:eb:
                    ba:a5:20:15:7e:00:e0:41:df:af:17:58:91:21:a2:
                    ab:ab:12:fc:0e:4a:90:bf:68:9d:a2:fb:15:06:1a:
                    18:5a:19:a7:d9:39:d5:29:25:d5:86:44:b5:a2:74:
                    1a:67:9d:4e:4e:fe:0f:78:77:4e:77:e9:3c:d0:d9:
                    54:64:19:41:5a:14:63:3d:fc:2c:d5:6d:22:28:f4:
                    18:1c:c3:f3:5d:45:da:ce:20:23:6c:de:df:d2:90:
                    aa:e5:15:0d:a3:8d:00:e4:6c:0a:d5:56:d8:70:dc:
                    48:d7:97:4f:42:30:e4:dc:25:51:3a:72:1e:18:b5:
                    67:56:40:90:f1:39:dd:fd:15:51:22:e7:d9:1a:69:
                    81:20:f8:95:0b:09:7b:6c:11:44:3b:c7:f3:13:03:
                    57:45:24:46:53:2e:e0:c9:87:db:ee:95:ec:55:57:
                    64:5b:c7:ac:b3:08:7c:0e:1e:97:b6:cd:ec:41:98:
                    a1:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:A7:D6:98:48:9A:78:43:A3:87:E4:ED:30:B9:C2:D4:D4:C5:DC:A4
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B648B4F0620611ECA45A9AE45A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.233.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5a:ac:0f:2d:52:46:b3:a4:b2:be:36:3f:de:7f:ac:46:99:65:
         3d:0a:59:26:60:c0:46:ab:9f:90:b5:c7:15:1e:79:48:a6:b7:
         3d:c2:16:54:97:62:5f:08:70:1d:b8:ac:7c:b3:c3:c5:a7:be:
         34:fa:9c:75:e6:86:71:3a:e0:3d:44:b8:ea:de:07:47:e9:3d:
         e3:d8:5d:77:41:ed:e5:2d:01:fa:62:38:65:c9:94:14:32:03:
         59:22:be:24:bb:85:0f:c1:c9:62:66:4f:f6:cb:22:d9:c9:54:
         29:ab:78:35:cb:83:86:52:0d:fb:20:e2:97:26:1d:9b:99:26:
         e5:b1:7d:d9:c6:0a:cf:e2:a2:8a:3d:92:54:1b:fe:73:4a:88:
         61:13:ef:d0:c5:cd:ea:71:9f:2b:7d:e4:44:fe:0c:03:70:9a:
         87:f5:90:54:51:b5:e0:9d:86:ce:56:4f:a0:7c:78:59:c8:50:
         71:c4:ec:73:f5:fe:c4:c0:69:98:f0:66:e2:00:e8:a1:83:ae:
         25:80:1d:54:2d:40:b1:f5:1f:ff:ec:38:f4:85:e5:db:8e:65:
         39:cd:b0:ef:48:b2:f1:0f:32:4b:a9:b7:f3:9f:e7:90:08:1a:
         7c:bd:ba:b0:7f:69:f6:5c:97:3a:03:63:e9:ed:c3:13:d6:05:
         66:be:0c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:26 2023 by rpki-client on console-fra.rpki-client.org