Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F7CDCC90F13511EBA8FDEA13D8A014CE.roa
File:                     F7CDCC90F13511EBA8FDEA13D8A014CE.roa (raw, json)
Hash identifier:          +cyS4bY4IsrS6zpS/TRvuEG+GX2KsqokqTeCGy2jSQw=
Subject key identifier:   AB:18:62:C8:7B:E2:81:C4:CC:63:86:50:76:BC:56:74:A0:17:37:28
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0842
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F7CDCC90F13511EBA8FDEA13D8A014CE.roa
Signing time:             Fri 30 Jul 2021 12:59:49 +0000
ROA not before:           Fri 30 Jul 2021 12:59:44 +0000
ROA not after:            Wed 30 Mar 2022 12:59:44 +0000
asID:                     7018
IP address blocks:        156.246.26.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2114 (0x842)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jul 30 12:59:44 2021 GMT
            Not After : Mar 30 12:59:44 2022 GMT
        Subject: CN=6103f7c4-9068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:85:9e:f3:43:65:66:84:e2:22:80:b1:f9:70:
                    7f:7a:0a:e8:8c:dd:5f:5d:62:a8:e9:2d:54:de:d3:
                    09:5b:df:1b:5f:92:09:3a:5a:3f:ea:92:b5:c4:05:
                    c6:30:2c:15:f2:4b:e6:27:4b:9a:a3:90:20:3d:b1:
                    0d:cd:86:45:54:48:82:63:5a:43:45:13:00:a9:1e:
                    5c:ce:ea:04:43:ac:29:e2:52:9d:c9:28:ca:38:59:
                    3e:ba:97:4e:94:e2:6c:bd:93:7f:65:b3:bc:11:55:
                    8b:9b:a8:f6:13:c1:60:42:cd:91:af:5f:4c:97:c4:
                    10:d1:bb:9e:9d:ec:65:8e:18:4d:03:f6:13:7e:c6:
                    99:c0:b4:a0:b8:d3:6d:49:e5:3f:f9:f4:ea:10:95:
                    fb:e9:6f:e3:87:fc:d3:cb:17:07:d2:65:28:d2:93:
                    ac:d4:20:00:aa:e8:62:93:36:2a:7a:7a:8b:63:bf:
                    c2:bf:be:83:c8:24:7d:00:48:38:b0:32:9c:cd:46:
                    5c:ef:25:84:7d:4f:fe:b1:de:45:8a:71:8b:e4:72:
                    58:bb:3c:48:07:db:0e:a8:a2:17:17:2f:43:61:bc:
                    d6:e1:38:ca:9e:da:23:c0:b0:ab:69:a9:54:79:aa:
                    48:0e:c6:22:43:26:cb:ba:c2:ad:c2:00:a8:51:bb:
                    53:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:18:62:C8:7B:E2:81:C4:CC:63:86:50:76:BC:56:74:A0:17:37:28
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F7CDCC90F13511EBA8FDEA13D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.246.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:5f:e8:d5:9f:8b:e9:4b:51:ae:fb:42:5b:93:9b:f1:2b:28:
         55:96:64:d1:23:c8:ac:79:0c:35:ce:e2:6f:d6:40:fa:13:da:
         c1:f4:38:0f:d0:06:f3:ee:54:9a:3e:8c:70:27:bc:96:27:f9:
         40:e4:19:c5:fc:d5:d1:18:56:df:fd:d1:e7:ec:cd:6e:ff:06:
         07:0e:22:a4:49:17:8e:38:4f:70:ef:e5:67:2f:ff:8f:6e:e9:
         c0:3a:1b:d4:33:ce:27:d0:a3:4a:d2:60:f0:2d:a8:f4:5f:a7:
         12:ad:6d:90:86:83:20:5a:09:9a:e6:0f:7f:17:6d:85:bf:96:
         63:8c:cf:ed:cf:23:9a:8f:ec:cb:30:ae:04:3a:5a:c0:f2:00:
         84:5a:a2:e8:f7:ce:03:bb:6e:4c:5c:4f:24:ec:cc:b0:11:46:
         b1:41:bd:ac:0f:4f:5b:d6:fa:10:4b:80:86:2a:1a:a2:46:b6:
         f6:0b:58:38:e3:62:bb:4c:01:d6:20:6d:b3:69:e3:7f:e0:04:
         4b:10:28:bd:14:69:86:a1:36:07:c1:28:e6:85:47:65:7e:11:
         ec:f2:8c:bc:73:a4:a1:ef:4c:ca:8d:9c:80:4f:9b:2a:e5:ea:
         66:53:6e:b8:f0:b7:52:0b:65:93:c4:09:4c:a1:a4:14:12:eb:
         2a:47:36:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:31 2023 by rpki-client on console-fra.rpki-client.org