Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF1F1598123F11EDA16FE7A6F1222468.roa
File:                     CF1F1598123F11EDA16FE7A6F1222468.roa (raw, json)
Hash identifier:          OthPPwJTE0wzH0IjVbGU+0XG3UittpM6WkN0tqInkRo=
Subject key identifier:   13:26:6A:1B:63:F2:15:E3:9D:D9:B1:15:56:B7:5E:68:16:62:C6:BE
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       15EE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF1F1598123F11EDA16FE7A6F1222468.roa
Signing time:             Tue 02 Aug 2022 08:47:59 +0000
ROA not before:           Tue 02 Aug 2022 08:47:53 +0000
ROA not after:            Sun 05 Feb 2023 08:47:53 +0000
asID:                     212850
IP address blocks:        156.245.3.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5614 (0x15ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug  2 08:47:53 2022 GMT
            Not After : Feb  5 08:47:53 2023 GMT
        Subject: CN=62e8e4be-e085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:de:7c:3a:e9:15:41:25:91:ab:28:54:ac:06:
                    45:d8:60:46:45:eb:60:4f:ee:56:d9:e1:e7:d8:22:
                    12:78:79:df:df:d0:1a:17:90:4a:f6:0c:69:a9:c5:
                    ce:eb:de:ae:ac:14:68:17:5a:29:97:f9:66:28:b8:
                    1d:9c:a3:49:5a:25:cc:39:c5:3c:76:b8:e1:5b:24:
                    1e:57:0d:d3:42:9e:2f:2f:9e:c3:2f:aa:cc:8f:00:
                    5c:f6:f7:93:15:be:33:90:3c:19:f4:e0:a9:e0:34:
                    3a:f1:de:af:18:bf:ad:cd:c7:ed:ce:67:4d:77:77:
                    93:b6:b4:19:28:63:2f:ed:06:58:85:48:7e:34:23:
                    cd:da:4b:41:a7:4f:bf:75:92:74:9a:30:7e:67:5a:
                    09:d3:70:28:a5:ae:d8:17:ab:b5:b1:16:25:22:ca:
                    c2:71:3f:ef:b0:58:73:ad:8d:b6:99:5a:64:59:d8:
                    13:ce:89:23:c3:d6:0d:bb:49:da:c2:4b:71:b6:cc:
                    c4:56:17:59:99:02:99:09:fc:88:a1:6a:72:ea:49:
                    47:1c:a4:2d:31:2a:43:e4:69:b2:58:63:35:ca:17:
                    63:26:fa:bd:bb:f4:d1:8e:ec:52:fc:24:3b:d3:bd:
                    9c:b9:b5:53:b5:e9:cb:fb:15:82:39:25:cb:5b:57:
                    9e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:26:6A:1B:63:F2:15:E3:9D:D9:B1:15:56:B7:5E:68:16:62:C6:BE
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF1F1598123F11EDA16FE7A6F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.245.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:4e:35:f0:dc:95:2f:a4:f3:cc:70:0e:9b:a8:ea:d3:16:aa:
         44:3c:c5:a9:0c:8a:7f:b0:a4:33:00:dd:91:8a:d2:52:3f:83:
         48:20:7e:6a:65:5f:06:fc:a5:2e:36:94:91:ff:4b:7f:f5:38:
         17:b5:c6:90:fa:34:ca:fa:97:ed:2d:ae:2c:6a:06:07:b7:ad:
         8f:95:d5:75:96:c1:3b:f1:47:ce:fc:e9:a3:5c:48:c0:c0:c4:
         c5:ca:6a:b8:ee:ed:6a:5a:c5:2b:f9:0e:3a:78:4c:47:e8:25:
         90:fd:6f:28:48:84:05:4a:10:9c:70:d6:d1:3d:98:18:e5:34:
         5c:2f:b4:51:ba:17:db:32:7f:04:e7:ee:57:d6:b2:47:30:85:
         00:61:12:71:99:4f:94:dd:ae:2e:b6:db:0d:a8:15:c7:2e:e7:
         2e:4b:10:e6:4f:87:0a:f4:80:1c:67:e5:49:3e:bd:24:a1:1e:
         be:e6:1a:d2:79:20:97:c7:4c:ae:85:e5:a9:bb:47:42:29:f9:
         82:86:ea:78:ea:dd:16:29:f5:4d:c8:55:f1:03:15:4d:f0:62:
         5a:44:f8:61:83:bd:9c:4c:e8:6a:7f:f0:86:f0:51:70:4f:92:
         ec:e0:28:fc:e1:fa:8f:f3:6f:10:20:0c:8a:c0:b5:71:1d:3a:
         dc:ca:67:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:27 2023 by rpki-client on console-ams.rpki-client.org