Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C0933AE80CB511EDB876288DF1222468.roa
File:                     C0933AE80CB511EDB876288DF1222468.roa (raw, json)
Hash identifier:          zKGJY7n2U8PO7QZFP0EBjt2KDoq16q8ciEBqdR1tM/Q=
Subject key identifier:   B9:15:BF:F2:B7:03:29:9E:AF:36:4C:38:CE:65:EA:1B:53:54:AC:65
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       15BC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C0933AE80CB511EDB876288DF1222468.roa
Signing time:             Tue 26 Jul 2022 07:37:08 +0000
ROA not before:           Tue 26 Jul 2022 07:37:04 +0000
ROA not after:            Sun 15 Jan 2023 07:37:04 +0000
asID:                     149981
IP address blocks:        156.225.104.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5564 (0x15bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jul 26 07:37:04 2022 GMT
            Not After : Jan 15 07:37:04 2023 GMT
        Subject: CN=62df99a4-339b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:62:3e:a6:6d:21:e0:1a:fe:02:a3:ea:77:10:
                    9a:6b:60:27:21:71:40:50:96:09:f9:21:ce:86:24:
                    4c:ce:c6:53:c2:33:6d:dd:42:fa:9c:71:5d:c2:72:
                    41:d1:be:25:7c:05:bf:70:fe:8c:2c:00:82:50:88:
                    28:3e:2b:7c:4f:37:d2:0a:36:0f:d1:d7:a1:7d:49:
                    21:d2:fa:cb:12:b1:2b:95:5e:ba:19:0e:8d:53:9e:
                    fb:42:1e:a0:02:c1:7f:69:33:18:b3:d8:d8:ad:6b:
                    91:75:e5:eb:78:14:e7:61:42:4f:ea:1c:62:27:c8:
                    59:fd:9d:fe:dc:60:b5:78:ca:9a:05:94:32:ad:5e:
                    4f:5d:8f:d8:84:0a:51:e4:6a:27:a2:d1:57:84:d5:
                    f2:20:7a:ee:71:a7:5f:6f:cd:75:10:70:9a:eb:f4:
                    db:b0:48:cb:fc:2b:3f:8b:1a:b5:55:a2:fb:e3:42:
                    a2:b7:f9:e0:2c:a3:30:d9:2a:50:d4:33:7c:89:a6:
                    05:ef:0c:18:e0:ff:90:a3:7a:8e:44:1a:c9:31:4d:
                    2b:2a:1d:af:b2:a1:4a:3d:a9:a0:a4:f0:a0:a8:c6:
                    55:bc:73:04:f1:4d:b6:8d:97:9e:e5:65:28:7c:51:
                    18:e5:f6:1c:e8:06:b0:1e:ad:53:9b:d5:27:0f:27:
                    01:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:15:BF:F2:B7:03:29:9E:AF:36:4C:38:CE:65:EA:1B:53:54:AC:65
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C0933AE80CB511EDB876288DF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.225.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:01:7e:03:03:a3:b4:95:e5:8d:80:f8:8e:85:1d:9c:33:ba:
         15:95:61:c7:c5:f7:9a:48:f3:87:41:68:59:3a:35:60:26:f6:
         08:de:7e:2d:32:f7:f1:42:5b:a4:79:f9:58:70:06:9f:93:16:
         db:5d:6a:68:e3:99:11:76:27:2b:97:44:8a:5e:a9:d1:77:1e:
         dd:94:18:55:27:0b:d6:b1:9a:61:69:00:a9:9e:b7:d4:6c:52:
         ed:46:0a:c0:0f:e2:ed:cc:84:e3:db:e4:29:8b:2c:25:a1:5a:
         20:e2:0c:8e:8c:9e:13:af:d5:bc:a9:93:f5:97:03:62:2f:77:
         e8:09:f9:12:1c:65:7b:d8:5b:71:b7:b3:8d:bf:ec:8a:03:af:
         54:64:9c:bb:17:13:cd:e1:6c:69:bc:5d:10:4d:87:5c:72:07:
         b9:f7:48:f8:60:2c:79:af:97:1a:e2:42:f5:66:22:6c:21:93:
         cb:20:10:3e:ae:de:6f:17:cb:32:42:04:e6:c3:0a:91:8a:e2:
         de:36:13:85:9c:1b:f0:cc:0f:90:10:f0:32:c1:33:67:ed:30:
         11:87:f0:b8:4d:2f:9f:4a:68:35:00:e3:98:c3:1b:6b:2b:b0:
         a9:8d:5b:89:4a:f0:46:ab:e1:c6:d9:ab:e9:ad:be:9a:6c:9f:
         48:9c:1e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:28 2023 by rpki-client on console-fra.rpki-client.org