Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D4F2766C95E511EC8E61DD995A40D577.roa
File:                     D4F2766C95E511EC8E61DD995A40D577.roa (raw, json)
Hash identifier:          6YxcJWmjsi1gvClvRTBypl9Vp6EtH0sJQXdsc22BbL4=
Subject key identifier:   08:A1:D0:F7:7F:8E:15:92:1B:44:12:F0:2C:0D:D2:43:EE:8D:EF:64
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       120D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D4F2766C95E511EC8E61DD995A40D577.roa
Signing time:             Fri 25 Feb 2022 02:51:29 +0000
ROA not before:           Fri 25 Feb 2022 02:51:26 +0000
ROA not after:            Fri 31 Mar 2023 02:51:26 +0000
asID:                     1239
IP address blocks:        156.243.192.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4621 (0x120d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Feb 25 02:51:26 2022 GMT
            Not After : Mar 31 02:51:26 2023 GMT
        Subject: CN=62184431-01a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:86:9b:08:f0:1b:d1:b9:0e:6e:c8:45:e9:9c:
                    42:5b:78:5b:55:e5:6a:af:f2:53:bb:7f:8e:56:61:
                    f9:e1:20:c4:53:39:5e:bc:53:16:bb:20:b3:41:d4:
                    38:cb:1b:19:ba:b6:40:d0:9a:3a:fe:e2:f9:52:1f:
                    db:68:7b:45:69:43:0e:88:e4:4a:45:00:d0:a2:a0:
                    f4:76:ad:be:f8:82:01:ed:1d:a4:27:63:b7:cf:d4:
                    4c:d5:d8:71:9a:ae:c4:70:42:60:1e:18:a7:7e:6b:
                    56:4f:2a:50:15:39:2c:9a:30:4f:12:7a:98:37:21:
                    b3:b8:63:d8:7d:9f:ad:0c:4b:53:8c:4e:07:11:58:
                    df:e1:02:54:44:cf:6e:dd:fd:d6:d7:9e:ba:ba:2a:
                    69:17:3a:eb:73:29:10:67:52:50:00:fb:a7:b2:6b:
                    59:09:68:0b:e7:2c:bc:9d:ea:7b:15:e0:70:73:62:
                    08:87:df:9e:42:61:22:f7:e7:b9:62:36:58:59:f1:
                    91:06:18:29:41:4d:76:3f:ea:a0:48:67:57:91:60:
                    4f:e9:57:28:82:39:a6:dc:85:8a:b9:7d:03:d4:cb:
                    08:a8:89:4c:62:56:53:83:4f:04:17:b9:a1:20:c1:
                    92:b9:a0:09:2a:ae:3d:ed:ab:10:ec:6c:a8:1d:a2:
                    42:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:A1:D0:F7:7F:8E:15:92:1B:44:12:F0:2C:0D:D2:43:EE:8D:EF:64
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D4F2766C95E511EC8E61DD995A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.243.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1c:01:76:66:ce:64:e3:ec:d3:51:63:fe:8d:e3:97:4d:46:a6:
         f7:c6:53:25:db:1a:1e:52:26:6b:56:9d:0d:f6:56:a6:41:a7:
         05:3d:a2:6e:21:6e:37:87:cc:b3:6a:c2:c3:2a:b0:b7:80:86:
         c1:f8:f4:76:5e:12:d0:a1:cf:a3:7d:b5:72:a6:2e:f3:2c:fa:
         de:52:80:7f:60:76:ce:b7:3a:19:e1:3e:a7:76:17:a5:eb:20:
         f5:5f:bc:63:62:01:15:8d:2c:e9:d7:03:04:00:35:5d:f2:50:
         d7:9d:f0:04:69:0b:3f:00:4b:f2:1f:ce:36:e8:1e:45:f9:7b:
         b5:87:d2:c9:9c:d5:6c:34:a5:77:ff:6c:e0:fa:31:6d:c2:a1:
         54:80:b3:b7:9b:d6:a3:68:be:f6:f4:71:c8:21:40:fd:0c:bb:
         15:8f:e8:67:39:92:78:65:a7:24:0b:26:b1:69:c6:8f:88:a8:
         6a:9f:d5:88:35:1a:e9:f9:a8:bb:63:87:41:2c:1a:f0:5b:a8:
         ff:e0:2f:12:fe:28:82:27:31:13:fd:15:0d:1b:ed:50:dd:aa:
         cd:cc:63:8b:99:ec:e6:a0:95:75:c4:62:1b:74:89:b1:c8:34:
         2f:ba:04:ff:b8:eb:2c:3e:3a:ad:7a:bc:4a:86:37:4e:f8:63:
         ef:a1:73:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:29 2023 by rpki-client on console-fra.rpki-client.org