Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C15E5FA4413E11EC9822093FD8A014CE.roa
File:                     C15E5FA4413E11EC9822093FD8A014CE.roa (raw, json)
Hash identifier:          fVwZGmqBP5Khs2nuncYQVBAH9YvKG2vSiTe/mNtmXjY=
Subject key identifier:   E9:8C:5A:D0:67:C1:C7:2C:9B:F5:B1:DD:A6:F5:BE:C1:8A:D2:15:07
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0C89
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C15E5FA4413E11EC9822093FD8A014CE.roa
Signing time:             Tue 09 Nov 2021 09:23:53 +0000
ROA not before:           Tue 09 Nov 2021 09:23:49 +0000
ROA not after:            Sat 31 Dec 2022 09:23:49 +0000
asID:                     399674
IP address blocks:        156.244.128.0/17 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3209 (0xc89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov  9 09:23:49 2021 GMT
            Not After : Dec 31 09:23:49 2022 GMT
        Subject: CN=618a3e29-e903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7a:ba:ed:bb:d1:9d:00:6a:91:a1:8a:97:62:
                    a4:ee:02:59:3e:17:c7:6a:18:dc:0e:33:fa:fa:b5:
                    bc:d3:27:00:fb:b5:74:82:da:61:80:c2:79:24:af:
                    0c:55:25:32:ec:92:ed:be:0c:8e:95:c4:2b:f4:32:
                    a0:ad:b7:84:21:da:67:a7:02:9c:85:bc:be:09:f7:
                    9c:e4:5e:f8:0f:ba:05:e9:24:82:39:90:99:ea:4c:
                    75:0c:9d:7f:ef:c3:ed:02:c3:d2:81:73:29:5d:52:
                    bd:bd:37:6c:17:17:ce:b3:e1:a5:77:aa:7d:dd:78:
                    bd:86:ff:20:47:57:e8:08:47:a2:6d:3f:5d:49:51:
                    61:29:ee:72:01:85:3c:32:b8:4b:ce:08:c4:c5:b1:
                    82:6a:1e:4f:b6:e2:cb:73:b5:d3:fb:8d:4c:90:6d:
                    34:a1:6a:ce:11:76:c1:44:ca:b4:c2:0d:92:b5:f6:
                    9e:36:c6:b3:a9:9e:3e:49:07:e1:9e:57:fd:58:b1:
                    55:51:1b:4d:bf:24:d4:ac:a0:12:38:b0:2c:4c:38:
                    16:b3:4c:fd:09:39:ba:56:41:ab:9d:ba:ce:80:1c:
                    99:db:cf:82:fd:b9:cf:08:fd:72:36:42:de:b6:b1:
                    bf:a1:8b:44:8a:a7:da:3c:6e:fb:88:05:8a:7f:f3:
                    17:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:8C:5A:D0:67:C1:C7:2C:9B:F5:B1:DD:A6:F5:BE:C1:8A:D2:15:07
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C15E5FA4413E11EC9822093FD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.244.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         ac:50:dd:d5:4c:03:67:84:d1:d2:c4:a3:5a:d8:db:06:5b:c5:
         85:cb:ba:a3:3f:ec:02:7b:51:a0:20:be:10:f9:64:af:30:c8:
         83:d6:b0:a8:75:32:36:19:92:d2:43:48:94:26:1d:05:3c:c9:
         7b:a4:1c:da:03:f3:ef:3d:1c:a0:4b:7a:2b:8b:db:c5:93:98:
         9d:9e:ae:98:13:1d:0d:1a:dc:b6:91:43:4d:b4:02:7d:cc:86:
         10:c6:08:b5:cc:e0:3d:25:a0:fd:6f:96:a4:2e:90:5e:05:8d:
         7a:7c:47:bf:16:02:58:c3:f2:95:80:34:10:db:57:e8:af:87:
         95:6c:f2:69:61:28:ee:05:a4:82:23:f2:a4:97:f1:5b:8a:c2:
         6a:42:9d:e1:7c:2b:07:4a:89:85:db:66:4f:b2:ac:5f:8a:21:
         94:82:60:8b:0c:c0:f1:75:83:1d:53:6a:93:69:74:56:db:30:
         7e:87:7a:ca:6c:08:e5:a5:bb:e6:3f:5a:01:e3:7e:8f:5b:8e:
         c4:75:c8:1f:c5:19:03:42:32:7f:b5:98:ee:57:f8:9d:02:22:
         75:ed:5b:c1:f1:93:f0:9a:de:dc:ed:f6:09:5a:92:32:5c:db:
         65:35:8d:de:e4:cb:40:82:98:ef:a1:58:6f:bb:fa:ef:da:5f:
         75:95:f0:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:26 2023 by rpki-client on console-ams.rpki-client.org