Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6347BA2693A11EC8ECF208D5A40D577.roa
File:                     C6347BA2693A11EC8ECF208D5A40D577.roa (raw, json)
Hash identifier:          LtS0HaQ4YFeWwB5J+urHyPzwU4Mt4dqpNIuo8G4QU3g=
Subject key identifier:   0F:AF:6D:CE:3B:C3:6D:6D:B7:F5:F7:85:71:77:D7:12:90:A3:07:26
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       112A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6347BA2693A11EC8ECF208D5A40D577.roa
Signing time:             Thu 30 Dec 2021 06:36:10 +0000
ROA not before:           Thu 30 Dec 2021 06:36:06 +0000
ROA not after:            Tue 30 Aug 2022 06:36:06 +0000
asID:                     1239
IP address blocks:        156.242.64.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4394 (0x112a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 30 06:36:06 2021 GMT
            Not After : Aug 30 06:36:06 2022 GMT
        Subject: CN=61cd5359-569e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1e:0c:f1:a4:7b:61:02:8b:03:65:f1:69:84:
                    89:dc:12:26:4e:12:c4:45:46:1d:09:99:e7:8e:a6:
                    ec:2d:d0:e0:7f:44:69:95:a3:50:69:3d:f3:df:6f:
                    df:1a:44:37:04:e9:1f:f7:33:45:7d:79:0d:9f:ec:
                    4d:9e:e4:67:90:3a:dc:ae:04:0a:8e:04:5d:dc:36:
                    2c:3e:64:b7:fa:e4:10:17:be:b3:f8:df:21:3f:2e:
                    cd:fb:a9:63:f4:89:00:90:04:68:cd:00:7a:df:eb:
                    22:e4:6c:54:1d:d9:05:31:05:36:32:01:18:7c:70:
                    d3:1b:f9:62:28:8b:a1:d9:98:2d:97:7c:e9:13:5a:
                    4f:a2:b0:18:12:5c:79:cc:a3:76:cf:cd:b2:74:ff:
                    08:16:26:b3:07:33:f5:35:84:55:7a:d1:4c:67:de:
                    d5:60:d1:a2:97:95:76:6e:1f:d2:2a:d5:71:76:d0:
                    7b:ed:0d:7b:52:56:fc:92:0e:73:81:78:e0:5b:ae:
                    0e:82:bb:be:7b:6a:16:c5:0f:9a:7d:9d:38:2c:20:
                    cc:16:01:9d:56:6a:c0:f7:29:bf:48:ae:51:dc:44:
                    f5:2b:6b:34:77:18:e2:65:ff:21:81:f3:80:fc:92:
                    49:b6:a3:13:22:4a:3c:35:66:e0:b7:2b:0d:90:72:
                    f0:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:AF:6D:CE:3B:C3:6D:6D:B7:F5:F7:85:71:77:D7:12:90:A3:07:26
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6347BA2693A11EC8ECF208D5A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.242.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6f:b0:99:d6:75:dd:2f:3f:33:f7:4b:2f:8a:5c:6a:12:cf:f7:
         1d:a0:bb:a8:c0:a3:72:32:80:77:e0:b1:3b:6b:7b:e2:17:5d:
         18:9f:e7:1f:f5:68:5b:5e:6c:70:31:56:89:22:9b:be:11:c3:
         0f:42:ea:5c:9c:e5:bd:f7:12:d2:66:f5:65:7b:13:6f:33:42:
         d2:ee:31:c1:da:13:e1:c0:9a:93:ff:1d:7e:9e:b4:82:b4:04:
         38:82:f7:f3:85:a1:bd:0b:70:d1:fd:03:57:71:72:cf:0c:1f:
         31:d5:74:53:e9:f8:59:81:60:5b:80:a1:6d:13:21:7d:53:23:
         7a:b9:a5:32:09:c8:b6:8c:16:25:ad:0f:80:37:81:77:db:0f:
         d0:69:e0:1c:8f:bf:a6:d7:c2:5e:75:d8:57:4b:fb:33:5b:ba:
         58:53:fc:71:bc:44:8a:36:8b:94:eb:2b:dd:04:19:f2:27:0a:
         dd:8a:11:1f:3a:db:f5:de:03:6b:d8:19:62:ad:6b:b9:3f:7a:
         91:10:52:8f:79:c2:cf:7d:86:b6:7e:31:f5:81:e7:c7:ad:05:
         14:85:9f:f9:a1:5f:26:18:ec:26:8d:20:d3:23:68:2d:a9:ce:
         57:5d:c9:fc:a3:07:3d:62:e1:75:ff:2a:3b:a5:a5:6d:79:98:
         16:bc:2f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:29 2023 by rpki-client on console-fra.rpki-client.org