Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FB9E9CE0488911EC81E09E3ED8A014CE.roa
File:                     FB9E9CE0488911EC81E09E3ED8A014CE.roa (raw, json)
Hash identifier:          ojVogqGygtMt2wONRAJ9qCVtu7VeNEYBcHmXo5j/OyA=
Subject key identifier:   50:04:F0:29:DF:FD:DA:A7:30:E5:4C:1B:A9:E2:64:B1:3F:F4:3E:14
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0E23
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FB9E9CE0488911EC81E09E3ED8A014CE.roa
Signing time:             Thu 18 Nov 2021 16:10:01 +0000
ROA not before:           Fri 19 Nov 2021 16:09:58 +0000
ROA not after:            Sat 19 Nov 2022 16:09:58 +0000
asID:                     139879
IP address blocks:        156.231.198.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3619 (0xe23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 19 16:09:58 2021 GMT
            Not After : Nov 19 16:09:58 2022 GMT
        Subject: CN=61967ad9-e245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0f:11:a6:60:12:26:a9:ad:0b:32:58:b0:3c:
                    64:6d:2b:4e:ad:5f:fb:a4:7b:71:45:b3:84:81:32:
                    18:4b:73:f3:3f:00:ff:18:e3:f0:3d:cc:6a:c0:9f:
                    c0:b4:4e:1f:be:20:aa:7b:ef:8d:3f:70:22:06:8d:
                    e5:73:18:e4:12:68:1b:9e:30:0e:83:d8:03:15:7c:
                    7d:7b:61:4d:83:a0:84:9a:6b:bf:34:a6:a3:86:09:
                    e5:c2:34:57:a2:f7:3f:17:c3:fb:57:16:7c:eb:1a:
                    e8:a5:c4:3e:e6:db:53:7e:de:84:a8:40:a9:fc:d2:
                    64:88:6d:4c:13:b2:64:83:84:79:dd:e4:3f:ce:80:
                    98:8f:3a:21:ce:13:39:8c:82:f4:ad:2e:a3:d0:08:
                    fb:85:08:5e:93:c9:0d:ff:f9:11:0d:cf:01:fa:b0:
                    8c:7c:85:3b:0f:fa:25:49:48:f6:a8:7f:5b:f5:c5:
                    09:64:16:1b:ee:51:6e:56:ac:5a:32:38:38:a3:df:
                    81:9a:d4:4e:fd:73:66:e0:20:f3:4a:bd:20:d5:d5:
                    95:69:ca:28:6e:6d:50:94:00:0a:e8:07:c1:02:04:
                    d3:b6:ab:c7:93:a6:cc:82:39:f6:90:b8:b3:39:df:
                    4d:c8:d5:7c:4e:8f:74:84:23:3a:03:07:d1:70:09:
                    0d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:04:F0:29:DF:FD:DA:A7:30:E5:4C:1B:A9:E2:64:B1:3F:F4:3E:14
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FB9E9CE0488911EC81E09E3ED8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.231.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:fe:45:01:8b:14:a3:70:ab:cc:35:4e:a4:47:ce:1e:d9:03:
         66:f3:09:2c:0a:ae:33:7e:60:f0:60:63:7e:f4:32:7f:9a:f1:
         c8:32:c1:97:09:6c:5e:3c:2a:b0:44:84:15:a7:e3:cd:e8:b1:
         2c:c4:77:11:44:5e:84:28:87:2f:f2:58:b2:55:e8:db:ee:27:
         4b:27:33:f1:5f:f1:d1:3f:77:51:c8:ca:46:ce:80:96:b2:7e:
         2d:18:bb:59:05:9c:f7:05:1b:d4:0f:cf:b7:41:89:89:d2:4d:
         85:7b:2e:b3:e3:cc:07:8b:84:a5:aa:a1:6a:b3:bf:6d:5b:be:
         49:85:79:4b:fa:86:af:80:50:69:9a:30:c2:93:ea:7f:38:04:
         03:72:a9:fe:8e:87:5c:f1:ed:ec:c2:e5:4d:ee:98:61:89:ea:
         9f:48:d4:61:97:7a:18:7b:c6:6f:e4:4f:12:2b:1f:3f:f0:7a:
         30:a9:cc:5c:85:4f:b0:aa:2f:31:8e:58:fe:84:de:1a:f3:85:
         ae:47:77:39:1c:0a:f6:c4:d6:a5:e8:00:b5:71:d0:2d:d0:0e:
         80:48:b9:34:c3:3a:3c:5d:58:70:ce:50:91:4d:ed:f3:f4:c3:
         83:2d:c7:0f:9c:3d:ae:f9:9d:14:20:09:2e:57:c0:8d:ca:6d:
         28:bb:e0:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:29 2023 by rpki-client on console-ams.rpki-client.org