Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6ABD074488511ECB5A56735D8A014CE.roa
File:                     C6ABD074488511ECB5A56735D8A014CE.roa (raw, json)
Hash identifier:          nR778SKDxtN41NCI9uCmZOHZNK1It3NY1vGkrz0oGlU=
Subject key identifier:   F0:1B:71:80:F6:48:C2:B9:F1:4B:11:AD:6D:E3:0B:00:27:56:47:0B
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0D3C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6ABD074488511ECB5A56735D8A014CE.roa
Signing time:             Thu 18 Nov 2021 15:39:54 +0000
ROA not before:           Fri 19 Nov 2021 15:39:51 +0000
ROA not after:            Sat 19 Nov 2022 15:39:51 +0000
asID:                     139879
IP address blocks:        156.249.155.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3388 (0xd3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 19 15:39:51 2021 GMT
            Not After : Nov 19 15:39:51 2022 GMT
        Subject: CN=619673ca-cb2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:55:6e:1c:b4:5f:cb:4d:02:d4:6d:2d:02:5c:
                    fb:f1:13:d5:a9:32:94:2f:20:cd:fc:e8:15:78:f4:
                    e2:10:46:55:02:ca:b8:39:8a:dc:c5:6f:76:26:95:
                    5e:e1:25:8f:d2:55:3a:ae:4a:2b:85:f4:86:44:97:
                    ac:87:95:43:86:4b:01:ad:1b:2d:58:8d:d9:75:5d:
                    e0:bc:4e:15:17:1d:81:8c:49:f5:83:51:a3:cb:36:
                    13:ac:b6:70:7d:dd:0d:b2:c7:e7:d5:5d:10:40:ee:
                    76:70:ee:72:3e:29:7a:2c:2f:f5:13:e5:01:9c:fb:
                    c2:6b:63:29:ce:00:d0:8f:63:dd:40:1d:a2:58:2f:
                    44:d9:42:a1:e4:1a:00:bb:93:bd:b4:95:13:27:30:
                    01:8c:3a:86:8e:2d:78:12:c4:43:f2:68:02:2f:ae:
                    fe:a9:98:69:f5:cf:8d:96:23:5f:92:d5:50:67:5c:
                    7d:21:06:19:f0:04:55:83:3a:01:dc:ec:08:82:d5:
                    79:5c:b6:3e:67:01:3e:e2:04:b1:41:ab:36:54:3e:
                    08:8b:a7:56:75:b2:58:db:0a:21:d8:b6:08:bd:c4:
                    6c:d8:8f:ec:ff:8d:22:40:bc:37:87:2d:11:9c:5c:
                    31:2e:5e:a3:80:52:01:57:69:5c:2a:3e:c2:c5:c3:
                    8d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:1B:71:80:F6:48:C2:B9:F1:4B:11:AD:6D:E3:0B:00:27:56:47:0B
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6ABD074488511ECB5A56735D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.249.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:79:5d:e9:71:94:8b:b9:e7:bd:b5:f8:03:9d:d7:72:7e:54:
         4b:22:cf:8a:99:dc:3f:48:0a:a9:c9:05:3b:ae:00:0c:21:5b:
         d3:49:a9:9a:4b:06:fa:4d:10:90:6a:0e:a2:5e:ba:de:58:62:
         b3:bd:0c:d8:71:27:ea:87:ff:d5:2f:36:01:dc:5e:7f:05:1d:
         f4:a4:e4:03:34:ed:5e:83:10:c4:34:b7:62:74:e1:91:33:4e:
         11:44:ad:f5:56:64:99:ee:11:2c:d6:9e:83:7c:c3:c3:ef:bf:
         28:0b:16:12:4c:69:0a:54:8f:00:99:b0:50:8f:7c:d1:54:05:
         ae:80:77:3a:aa:28:84:de:3c:1d:8b:85:3b:57:e7:07:8c:7a:
         00:b5:61:c6:ee:2b:8d:1a:46:62:79:86:5e:f4:bf:c9:37:77:
         cf:35:ab:07:68:a2:5e:e3:a5:db:d6:81:85:00:71:57:b4:60:
         9a:9b:3d:4e:af:d6:21:df:9e:14:de:8b:ca:ef:93:33:5a:e4:
         ee:07:37:23:f3:68:a0:90:5a:b1:e1:a6:52:3e:28:46:5b:44:
         48:94:f1:44:9a:67:3e:9f:e8:a2:c8:42:e9:5c:bc:d2:3d:40:
         5a:f2:d6:35:a4:4a:55:51:58:af:3e:0e:bb:26:07:ab:b0:20:
         90:20:e1:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:29 2023 by rpki-client on console-fra.rpki-client.org