Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3696E5F/52FE897C189711ED8059B9D2F1222468/F6937C781DE711EDB72F29B6F1222468.roa
File:                     F6937C781DE711EDB72F29B6F1222468.roa (raw, json)
Hash identifier:          8aQp9xfGbpUe0lga+3wCiahI4bUu0ZVe9/ozrXOwStQ=
Subject key identifier:   D1:6F:54:1D:AB:7A:28:7B:DA:AC:A0:DA:90:9F:B3:94:71:D5:B5:0E
Certificate issuer:       /CN=F3696E5FAR/serialNumber=8B29DC413EB502BD6DDEA306461E1A7A1084C5F6
Certificate serial:       09
Authority key identifier: 8B:29:DC:41:3E:B5:02:BD:6D:DE:A3:06:46:1E:1A:7A:10:84:C5:F6
Authority info access:    rsync://rpki.afrinic.net/repository/arin/iyncQT61Ar1t3qMGRh4aehCExfY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/52FE897C189711ED8059B9D2F1222468/F6937C781DE711EDB72F29B6F1222468.roa
Signing time:             Wed 17 Aug 2022 04:49:23 +0000
ROA not before:           Wed 17 Aug 2022 04:49:19 +0000
ROA not after:            Fri 31 Mar 2023 04:49:19 +0000
asID:                     25818
IP address blocks:        69.67.32.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3696E5FAR/serialNumber=8B29DC413EB502BD6DDEA306461E1A7A1084C5F6
        Validity
            Not Before: Aug 17 04:49:19 2022 GMT
            Not After : Mar 31 04:49:19 2023 GMT
        Subject: CN=62fc7353-4f21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:73:2d:99:04:1d:3b:4c:db:de:2e:d8:68:8c:
                    4e:52:09:c6:97:01:c9:c0:9c:eb:02:0c:95:6e:1c:
                    52:9e:7a:21:cf:26:62:ab:2d:89:7c:ab:5d:f8:4d:
                    78:e6:e0:49:0d:d9:04:5b:6f:88:3c:3a:87:db:fa:
                    27:94:a4:2d:d3:83:f0:ae:e0:31:b8:d6:0f:eb:72:
                    9d:2c:3e:31:cd:8c:62:b0:e9:4e:af:e0:5e:91:70:
                    81:4b:77:d2:3c:f8:e3:86:82:f1:b2:1c:1c:36:f7:
                    08:fb:c0:33:b8:e9:f3:7d:b6:7c:e4:d8:1d:1f:b8:
                    45:03:0b:f5:7a:d0:d2:43:75:f7:54:a2:be:20:f7:
                    59:2d:aa:af:ae:d2:fc:d7:fa:0b:d9:88:cc:04:1f:
                    8e:5e:90:88:f5:56:65:ca:6e:df:44:34:cb:ae:ba:
                    87:d9:51:aa:9c:e9:7c:ec:16:32:84:02:52:66:67:
                    ad:66:02:91:7d:1f:9d:44:4f:f6:60:bb:73:85:ec:
                    df:91:82:8f:59:23:89:71:b3:de:d2:19:7a:dd:0c:
                    1c:68:f0:2a:1e:94:04:7d:95:e6:26:53:07:dd:04:
                    2d:df:ba:94:5f:d9:50:54:af:db:6f:36:0b:57:2f:
                    f5:e9:be:1b:aa:06:98:85:f0:61:00:05:bb:38:40:
                    b3:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:6F:54:1D:AB:7A:28:7B:DA:AC:A0:DA:90:9F:B3:94:71:D5:B5:0E
            X509v3 Authority Key Identifier:
                keyid:8B:29:DC:41:3E:B5:02:BD:6D:DE:A3:06:46:1E:1A:7A:10:84:C5:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/52FE897C189711ED8059B9D2F1222468/iyncQT61Ar1t3qMGRh4aehCExfY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/iyncQT61Ar1t3qMGRh4aehCExfY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/52FE897C189711ED8059B9D2F1222468/F6937C781DE711EDB72F29B6F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.67.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4a:ca:52:7e:f3:0e:bc:7a:6e:b2:a9:70:3e:80:7c:9f:38:69:
         40:c1:98:b0:5c:a5:b2:d9:d9:ac:ef:ec:a6:92:7e:ef:77:fb:
         c5:7e:21:b0:ca:6e:34:f1:12:45:5c:c3:5c:55:d7:a2:73:35:
         ea:14:6c:97:44:f9:1a:73:e8:d6:a7:24:b0:96:26:c6:c8:5e:
         f2:6b:be:75:41:2b:92:9d:39:c3:84:7d:58:9b:f3:13:cd:ca:
         d4:a4:65:73:39:6f:bc:e9:ee:97:d3:70:57:37:3f:0c:fb:a8:
         f6:d0:27:84:44:0b:9d:1a:14:f7:80:c8:7c:60:c3:76:f4:ea:
         70:30:e0:5a:f9:7c:ea:46:d6:6b:d9:20:24:e0:cf:50:a9:07:
         bd:5b:21:69:4d:ae:33:79:12:ec:ad:65:bd:6f:c8:33:80:f5:
         38:08:ae:78:ba:e9:11:39:73:1d:02:98:e1:7f:21:5a:b1:c2:
         21:e8:2c:4a:72:56:f4:b5:8a:bf:44:4e:bc:ab:b8:d0:db:72:
         bf:8a:14:5c:c2:81:81:b0:01:49:72:7a:85:c2:36:66:69:ea:
         ca:21:43:88:7c:60:b2:94:07:83:88:4d:ef:dc:f6:cd:40:a6:
         7e:ee:fe:8f:02:d3:e8:fa:6f:9a:81:b2:f3:0a:93:70:db:fd:
         ba:aa:b9:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:32 2023 by rpki-client on console-fra.rpki-client.org