Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE98576616C411ECA3304471D8A014CE.roa
File:                     FE98576616C411ECA3304471D8A014CE.roa (raw, json)
Hash identifier:          FAs56n+SYwRByEb5miHFNw0q2pYiO3QutPhRPgNomnc=
Subject key identifier:   60:10:A1:E0:48:67:EA:1E:B9:41:C1:1F:B2:D2:84:DF:B8:BB:72:92
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0965
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE98576616C411ECA3304471D8A014CE.roa
Signing time:             Thu 16 Sep 2021 08:06:28 +0000
ROA not before:           Thu 16 Sep 2021 08:06:24 +0000
ROA not after:            Wed 16 Nov 2022 08:06:24 +0000
asID:                     133201
IP address blocks:        156.250.64.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2405 (0x965)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 16 08:06:24 2021 GMT
            Not After : Nov 16 08:06:24 2022 GMT
        Subject: CN=6142fb04-6fb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:58:af:17:ac:fe:34:1e:67:4f:a8:66:9a:b1:
                    0c:06:4a:e6:70:6f:c2:6f:89:23:b6:08:8c:55:22:
                    f5:26:3c:92:03:22:3e:1a:a4:f4:f3:b0:50:6d:ab:
                    07:2b:42:f9:88:c7:b0:35:e3:8d:7d:79:b3:c8:80:
                    ac:07:6b:71:fe:58:10:31:2a:81:ca:f0:fb:bf:e9:
                    e6:a5:31:9e:66:e4:6c:a3:ac:c0:ed:87:1b:81:77:
                    76:79:30:68:82:f7:ca:59:1a:1b:08:38:a1:a3:8d:
                    6f:be:5f:14:e4:cd:47:49:d6:30:f5:03:6b:4d:b7:
                    a2:3b:d2:ca:40:41:81:1c:50:55:ca:e7:c8:f9:50:
                    c6:a9:4c:97:0a:75:f3:ef:e9:1b:fa:97:82:32:93:
                    d2:96:cb:ef:8e:84:b6:9c:ab:2e:e4:27:2b:5b:fb:
                    ca:cb:ae:2f:2d:bb:4c:8b:f8:6e:48:7b:71:b1:fd:
                    60:f5:37:40:1f:2f:19:63:13:48:a6:7f:27:bd:38:
                    5f:91:34:b4:f4:4a:0d:3c:cb:cd:cd:9f:ba:eb:ee:
                    da:ff:8a:5e:5e:03:02:a3:ee:8e:78:2b:b1:8e:ae:
                    ff:83:2a:6e:88:ff:7b:27:13:19:86:49:87:51:82:
                    f9:26:0b:7f:7c:41:33:39:04:c9:88:1a:15:f7:d8:
                    d1:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:10:A1:E0:48:67:EA:1E:B9:41:C1:1F:B2:D2:84:DF:B8:BB:72:92
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE98576616C411ECA3304471D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.250.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         b5:c3:b4:55:cc:43:09:16:6a:34:3a:2f:04:f7:2d:86:0e:35:
         2e:84:f8:85:cf:cc:45:7b:09:e2:d5:15:9b:a7:8c:a6:18:7e:
         be:78:07:06:a7:92:89:d9:14:27:05:4b:63:83:a1:5e:bc:8f:
         c2:e3:68:ea:47:30:bf:e2:6f:65:32:e2:16:f2:41:7f:01:d0:
         cf:f5:8a:b5:56:ed:08:51:c4:ea:df:72:85:fd:63:49:04:c0:
         50:44:da:b2:9d:15:8c:e6:80:38:22:00:f4:b0:c0:1a:9a:c5:
         cd:17:a2:50:6d:39:f0:0a:e8:49:bd:03:8d:b4:ef:02:cb:92:
         4a:9f:af:9a:ba:76:b5:8d:58:a3:30:4d:27:27:7a:18:5d:bb:
         9a:60:03:e1:25:98:1c:80:03:65:02:08:54:03:0d:63:b9:2e:
         56:20:a3:b4:a9:fe:bc:15:92:82:be:6e:1e:44:f1:78:80:e2:
         f9:b6:20:a0:40:b1:ea:f2:72:c9:c0:be:06:5b:6f:7e:0f:16:
         a2:3d:37:a1:09:2b:8b:90:fa:92:aa:6b:9c:e0:39:54:20:ec:
         fd:43:ec:d0:7d:39:2d:70:ea:5f:29:2c:01:73:09:9f:fd:82:
         e4:90:55:ea:78:4a:75:2a:ec:5c:bb:93:dd:cd:35:dd:31:b5:
         2d:d9:6a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:29 2023 by rpki-client on console-ams.rpki-client.org