Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E3073D96FA4011EB8BB04E27D8A014CE.roa
File:                     E3073D96FA4011EB8BB04E27D8A014CE.roa (raw, json)
Hash identifier:          ySz/mzVNkFhXFj00wrNbPzg2GiDYt6gdNLWYa3bigmQ=
Subject key identifier:   3D:6D:F4:E0:6A:0C:3A:C6:29:63:90:74:F0:8F:A1:CE:FC:42:A2:C1
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0884
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E3073D96FA4011EB8BB04E27D8A014CE.roa
Signing time:             Wed 11 Aug 2021 01:10:56 +0000
ROA not before:           Wed 11 Aug 2021 01:10:50 +0000
ROA not after:            Sun 09 Oct 2022 01:10:50 +0000
asID:                     1239
IP address blocks:        156.235.72.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2180 (0x884)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 11 01:10:50 2021 GMT
            Not After : Oct  9 01:10:50 2022 GMT
        Subject: CN=611323a0-1f26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a4:5c:58:db:1b:3c:bc:82:7a:9b:a9:88:da:
                    ff:3d:dc:6d:30:db:2b:ed:61:ef:6f:41:88:79:67:
                    e7:19:13:74:8e:1e:2d:3f:a7:1b:f5:58:52:ba:ae:
                    01:fb:4d:be:55:ae:01:5c:a1:aa:a8:ba:56:23:82:
                    97:9f:77:33:bf:8a:ce:14:0e:c7:d0:36:cc:5f:e9:
                    29:6b:79:ed:14:cf:68:07:c5:4b:9c:59:9d:99:67:
                    b7:38:2b:bc:4d:18:20:e6:ad:0b:d6:c7:94:9f:fc:
                    c6:9e:1b:a2:80:23:27:d0:6c:54:80:4b:8f:4a:c6:
                    49:ec:bb:bb:3d:0f:04:57:09:6d:ab:d6:2a:3c:0c:
                    16:22:45:ba:c5:ae:ef:a2:b8:0f:06:19:ee:52:32:
                    b1:5a:ce:be:43:32:33:c1:30:eb:b7:4d:c6:9b:ee:
                    12:fd:63:74:42:f0:1b:b8:cc:08:8d:9c:34:28:20:
                    ad:6e:24:11:52:c4:55:e9:2e:75:25:27:a0:d1:30:
                    a6:57:19:1e:be:67:fd:cd:a5:15:65:ac:ad:20:14:
                    54:cf:bb:47:d5:5c:1e:29:02:50:d4:6d:83:fc:b7:
                    05:53:fa:ff:e1:4f:69:4c:51:16:a3:24:a2:2b:30:
                    e3:5e:d9:c8:d4:cb:3d:33:7c:14:98:71:47:19:5d:
                    15:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:6D:F4:E0:6A:0C:3A:C6:29:63:90:74:F0:8F:A1:CE:FC:42:A2:C1
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E3073D96FA4011EB8BB04E27D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.235.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:a6:ed:bb:46:71:28:8f:c7:3e:42:e2:e5:8c:be:b7:22:dd:
         f8:7b:5d:c4:e7:48:3f:27:67:3b:87:54:ba:15:51:4f:d9:72:
         3d:c6:96:d3:04:51:0b:5e:3f:49:d0:c0:0a:38:c2:3e:37:79:
         3b:5c:6d:53:6e:60:b0:4d:ea:a9:21:1b:4b:00:b9:b1:1d:f3:
         14:82:87:cc:e9:f8:ca:44:fa:60:25:6a:da:eb:26:84:71:75:
         5b:22:37:86:38:28:80:c3:47:7b:e1:f3:2c:0e:bc:1e:91:0e:
         f2:ae:19:0e:dd:5b:80:08:5c:d9:da:98:3d:97:bb:7e:00:8e:
         59:58:f2:b7:63:81:8f:6c:fc:8c:61:50:9e:93:04:35:37:43:
         48:a2:81:25:30:92:cb:dd:14:b7:9c:17:41:46:19:a5:52:28:
         e4:d1:71:30:5e:f2:56:45:db:20:4b:50:83:b4:0b:0c:e5:b4:
         15:24:8b:09:08:a3:bf:65:63:61:d5:fa:31:8b:fe:93:f5:81:
         57:70:30:d1:0d:09:12:8d:af:08:34:95:80:90:33:24:49:b8:
         39:55:d5:85:0a:a4:cf:db:6b:9c:dd:9a:41:f7:b8:21:b9:fc:
         86:bf:00:ee:c9:45:97:c0:07:09:65:42:43:7d:af:ea:ba:1a:
         38:08:58:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:30 2023 by rpki-client on console-fra.rpki-client.org