Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D3F73F82D7F811EB9C6E9D4EF8AEA228.roa
File:                     D3F73F82D7F811EB9C6E9D4EF8AEA228.roa (raw, json)
Hash identifier:          mOHDGxZ67/BF1xbkmW1b8p6AUA8a64Eza84gV+8rMrI=
Subject key identifier:   C6:14:1A:39:6C:B3:E8:3D:66:64:5A:54:47:AD:6B:91:5D:C8:3A:A5
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       06B3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D3F73F82D7F811EB9C6E9D4EF8AEA228.roa
Signing time:             Mon 28 Jun 2021 10:08:48 +0000
ROA not before:           Mon 28 Jun 2021 10:08:42 +0000
ROA not after:            Sun 28 Aug 2022 10:08:42 +0000
asID:                     271868
IP address blocks:        156.227.0.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1715 (0x6b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jun 28 10:08:42 2021 GMT
            Not After : Aug 28 10:08:42 2022 GMT
        Subject: CN=60d99faf-040f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:10:a5:c7:5c:f4:cd:63:dc:a4:69:25:e2:c4:
                    ce:18:c0:1b:08:ad:2b:db:b0:84:f3:8e:08:47:c1:
                    76:a3:2d:92:3d:36:0f:14:61:1c:03:78:4f:6e:03:
                    3c:cc:69:03:ee:95:d2:ec:9a:30:62:25:cb:73:2d:
                    ac:09:6a:19:0b:1a:94:4b:b6:2b:30:21:cd:a4:79:
                    49:e7:7b:7b:bf:32:3e:45:af:7d:11:0a:79:25:f7:
                    5d:d6:2a:be:7a:c3:00:dd:ca:f3:6f:1d:fe:33:cb:
                    5b:27:af:2c:21:7b:ac:af:8c:51:9a:12:92:e5:66:
                    94:3b:c9:15:cd:6e:e6:59:06:b1:46:aa:5c:27:ea:
                    93:98:8e:50:fb:86:62:a0:a1:1e:66:3a:44:23:09:
                    97:b0:bc:60:77:a9:bd:c3:69:50:66:89:33:a4:1a:
                    b1:55:3a:61:ee:2b:1a:6e:f0:65:a9:7a:7d:bd:97:
                    eb:70:4e:0b:d8:06:fc:fc:30:22:6a:de:3c:0d:28:
                    13:fd:ae:79:85:7d:a9:ec:29:f7:50:46:ca:4b:c6:
                    f7:2c:6c:b0:a7:45:10:34:6b:c9:a2:89:b7:99:cc:
                    8b:e7:15:c0:1f:a9:c1:54:93:0f:c1:2c:b1:85:c9:
                    51:de:c7:0b:2a:5b:c6:54:2d:30:13:73:05:7e:01:
                    4c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:14:1A:39:6C:B3:E8:3D:66:64:5A:54:47:AD:6B:91:5D:C8:3A:A5
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D3F73F82D7F811EB9C6E9D4EF8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.227.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:d5:1c:f4:73:1d:12:c5:fd:95:6e:91:0b:6e:c6:6a:4e:1d:
         98:44:52:78:9f:b8:5b:9f:54:7f:d1:a8:17:0f:2a:38:f0:ae:
         e1:9d:43:a9:47:0b:b6:31:52:5b:df:3c:f0:42:88:42:b0:90:
         e2:ad:5a:eb:84:17:67:4e:32:ba:91:e9:13:6e:be:0a:6c:ec:
         43:3b:9a:03:03:e3:50:bb:bd:c0:13:e5:06:68:b1:c0:ea:30:
         53:17:27:cb:d7:60:e0:0f:a8:45:f8:28:f6:db:74:10:1a:d0:
         ae:3b:da:a5:cb:6f:b9:38:3a:d0:70:70:5c:fc:6d:86:8b:2d:
         ea:e3:d6:25:92:c4:86:81:da:28:42:98:ed:7a:c0:f4:fa:1b:
         c9:3a:76:ac:b2:bd:d2:37:9a:8f:7f:be:8e:b1:a1:96:89:6a:
         4e:fa:7a:a2:2a:73:3a:6f:48:bc:43:e3:87:b0:74:93:de:85:
         99:c1:de:56:7d:65:ae:10:67:8a:26:82:ae:a3:46:91:c5:26:
         56:2f:c5:0e:49:52:a5:0f:a5:89:86:fe:5f:da:e9:fd:63:9f:
         fc:c3:e9:19:69:b1:39:08:67:32:5c:4f:1f:e9:91:53:38:ae:
         02:1b:71:39:e7:ba:2d:a3:1f:1d:33:17:31:88:94:d3:fa:bf:
         36:ec:ff:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:29 2023 by rpki-client on console-fra.rpki-client.org