Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE5540BA5AC711EB9A096664F8AEA228.roa
File:                     BE5540BA5AC711EB9A096664F8AEA228.roa (raw, json)
Hash identifier:          AGs5X65Q4Z196/cf32wOEkaJmtfmMzNwKMA2GOkRfVw=
Subject key identifier:   F6:68:3F:F5:69:FD:EC:4F:B2:4A:62:88:84:29:D5:32:5A:BD:3E:DA
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       046A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE5540BA5AC711EB9A096664F8AEA228.roa
Signing time:             Wed 20 Jan 2021 02:32:31 +0000
ROA not before:           Wed 20 Jan 2021 02:32:25 +0000
ROA not after:            Fri 08 Apr 2022 02:32:25 +0000
asID:                     45102
IP address blocks:        156.240.76.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1130 (0x46a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 20 02:32:25 2021 GMT
            Not After : Apr  8 02:32:25 2022 GMT
        Subject: CN=6007963f-0ea1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4e:5d:f6:26:0c:d1:b5:35:f5:11:31:da:97:
                    60:20:f6:dd:67:55:2a:d4:9d:6d:a4:ba:61:19:43:
                    2f:ab:e1:d5:01:db:01:69:4d:ba:a6:f0:c1:f8:bd:
                    0f:1b:4f:25:20:b3:32:6c:61:df:8e:70:40:26:bb:
                    eb:0a:f7:fd:6d:b6:2f:0e:5a:a6:ae:6f:d9:a1:34:
                    75:86:06:cc:25:c6:ea:8e:1a:96:a5:34:e9:f2:f1:
                    23:25:f1:07:87:15:f8:60:8f:11:f4:4e:0a:e1:8e:
                    14:eb:41:12:43:70:7e:55:c2:c9:8d:a2:92:c0:78:
                    08:94:87:7a:96:44:70:fb:2d:ab:51:62:30:64:a7:
                    87:1a:45:9b:fc:16:2c:a8:34:b1:76:03:0f:d3:66:
                    53:e6:e3:62:9e:36:20:65:25:e9:55:56:c6:86:8f:
                    37:05:aa:fd:42:16:eb:53:67:ac:3f:f1:26:98:e7:
                    74:cd:4e:e4:db:b5:ec:61:57:6d:f9:3d:a5:12:1b:
                    e8:9c:24:7d:c4:c7:36:4e:eb:71:11:31:a4:49:27:
                    7e:27:dd:87:52:2b:bb:ec:db:45:e4:b4:e2:07:a0:
                    20:9a:33:71:ce:27:85:2b:64:79:f2:ac:b6:b6:04:
                    1a:5a:75:d2:c1:30:78:74:01:c0:fc:c8:31:42:12:
                    f4:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:68:3F:F5:69:FD:EC:4F:B2:4A:62:88:84:29:D5:32:5A:BD:3E:DA
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE5540BA5AC711EB9A096664F8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.240.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:fb:03:07:7b:99:ec:cb:0b:0b:33:68:03:d7:75:65:98:2e:
         06:23:62:93:78:e1:b5:8c:4d:ca:32:df:f2:ba:89:26:f4:c8:
         1b:2d:4d:77:2f:c8:d1:0b:e2:47:72:16:16:2f:f1:3d:6c:94:
         44:57:44:fa:a0:d8:40:e8:29:e8:be:ba:09:0f:a2:23:a8:18:
         40:90:4e:73:6b:84:a9:4f:1e:38:e5:4c:0f:0d:2f:19:54:08:
         98:8e:35:9b:49:90:c9:86:ff:a9:45:a2:13:0d:c6:65:12:c7:
         4e:df:e1:3d:6e:b0:53:b1:9d:43:d4:06:a3:09:33:ff:1f:61:
         5d:1a:cc:bf:ce:fd:39:1e:93:88:6c:8f:7a:a8:3c:b4:a5:81:
         98:f2:11:62:62:a5:ef:8e:bf:4a:a9:91:2d:c6:c4:d4:be:44:
         93:8e:b4:01:e4:e6:95:b2:a5:81:82:03:41:5d:77:06:27:b6:
         69:62:e6:0f:13:82:96:62:a8:80:68:bd:5b:89:ee:fc:0e:ed:
         00:14:53:34:07:1e:a2:45:e7:60:28:c9:c1:98:82:8d:d3:dd:
         57:29:eb:89:9d:3c:9d:94:a2:ce:a3:f7:9a:2b:0e:2c:ff:17:
         21:f2:6b:88:fa:cf:ee:40:76:5f:d2:72:1a:e8:0c:be:3c:72:
         c7:cc:c9:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:26 2023 by rpki-client on console-ams.rpki-client.org