Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369F058/9CF6AE44553911E9A315872FF8AEA228/252EEA6EB11611E99D12B231F8AEA228.roa
File:                     252EEA6EB11611E99D12B231F8AEA228.roa (raw, json)
Hash identifier:          JO2h9bSKnPvS+N++xZu9uK+1fAgalupmxdN0S7FDXBI=
Subject key identifier:   AD:34:44:66:BC:F9:84:15:1F:B5:4C:7C:13:03:63:A2:C5:AB:3B:64
Certificate issuer:       /CN=F369F058AR/serialNumber=AA39022282BE3ECEFBDC58E59F9963938264BB42
Certificate serial:       7E
Authority key identifier: AA:39:02:22:82:BE:3E:CE:FB:DC:58:E5:9F:99:63:93:82:64:BB:42
Authority info access:    rsync://rpki.afrinic.net/repository/arin/qjkCIoK-Ps773Fjln5ljk4Jku0I.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369F058/9CF6AE44553911E9A315872FF8AEA228/252EEA6EB11611E99D12B231F8AEA228.roa
Signing time:             Sun 28 Jul 2019 09:00:29 +0000
ROA not before:           Sun 28 Jul 2019 09:00:22 +0000
ROA not after:            Sun 31 Jul 2022 09:00:22 +0000
asID:                     328114
IP address blocks:        45.221.26.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126 (0x7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369F058AR/serialNumber=AA39022282BE3ECEFBDC58E59F9963938264BB42
        Validity
            Not Before: Jul 28 09:00:22 2019 GMT
            Not After : Jul 31 09:00:22 2022 GMT
        Subject: CN=5d3d642c-1016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6c:a3:3c:26:bb:17:67:8f:10:8c:4c:4f:f9:
                    cf:27:c9:09:ea:6c:ed:25:55:e9:26:6c:0f:ce:91:
                    63:67:f4:2c:e8:7d:fc:30:77:d3:d0:04:ec:2a:6f:
                    93:cd:ac:4d:b4:ed:3c:c6:df:eb:39:f3:2e:af:14:
                    0d:dc:e3:59:da:6c:30:05:0c:1a:34:c0:a1:75:62:
                    e6:87:2f:79:a7:23:76:20:a6:ab:26:b1:37:f1:18:
                    68:f7:bc:ef:f9:ad:03:08:5d:9b:fe:7f:87:81:30:
                    81:30:79:d6:72:9b:df:41:6e:2a:81:16:88:79:15:
                    22:83:47:7e:fe:83:80:45:f5:73:e5:09:6b:7f:c0:
                    84:a4:0e:06:a0:24:fc:d7:9d:de:49:ca:28:22:c7:
                    4e:07:31:1b:cd:9c:84:f0:21:28:66:ec:5c:01:26:
                    88:c0:46:10:02:f1:68:ff:56:d9:a9:0c:74:cd:6f:
                    05:6b:16:cb:b3:fa:a9:4c:35:c1:70:42:bd:0f:c3:
                    40:21:6d:93:8f:c1:9f:46:19:5e:81:ef:7e:0d:fd:
                    3b:a8:a1:f5:d8:e4:b1:68:65:29:46:1a:9b:3a:4b:
                    fb:97:10:60:4f:a8:80:70:1b:10:5a:15:0c:6a:a2:
                    a4:b6:87:d0:15:a1:d8:27:3e:dc:5a:bf:3c:88:2f:
                    70:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:34:44:66:BC:F9:84:15:1F:B5:4C:7C:13:03:63:A2:C5:AB:3B:64
            X509v3 Authority Key Identifier:
                keyid:AA:39:02:22:82:BE:3E:CE:FB:DC:58:E5:9F:99:63:93:82:64:BB:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369F058/9CF6AE44553911E9A315872FF8AEA228/qjkCIoK-Ps773Fjln5ljk4Jku0I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/qjkCIoK-Ps773Fjln5ljk4Jku0I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369F058/9CF6AE44553911E9A315872FF8AEA228/252EEA6EB11611E99D12B231F8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.221.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:8b:91:61:f0:57:46:b4:ff:a6:9d:e5:d5:4a:d6:56:ac:b9:
         51:d2:b2:bc:08:f0:9a:f7:10:9e:86:9c:d9:38:aa:29:bb:2b:
         9e:69:2a:ab:ea:b4:83:21:2f:ab:2b:9b:59:ec:21:9b:bf:1c:
         51:42:53:2d:71:82:ae:e6:8e:85:26:30:dc:9c:1e:4f:84:22:
         65:f4:f9:c4:d3:99:44:c7:d1:a1:25:f9:6b:93:84:d7:d6:ad:
         5c:e3:f1:c5:18:27:aa:4f:ed:39:a0:ea:be:97:51:4b:38:41:
         48:f2:5b:8c:76:38:7b:8b:55:23:87:9b:29:f8:e5:b5:5c:fd:
         89:0a:34:97:50:57:77:65:a1:26:de:81:82:c2:54:de:88:48:
         fc:e2:53:28:84:b6:c5:ea:e0:a7:bd:af:8a:74:47:8e:54:1d:
         a4:42:04:d4:c3:a8:17:3a:29:9b:cd:29:1e:77:13:94:6e:81:
         e0:a3:ac:46:17:6b:dd:bb:47:60:36:17:26:e6:70:28:a3:5a:
         6c:15:9e:91:f8:7f:09:e1:83:1e:08:5e:c0:df:be:8c:34:a5:
         4a:ad:43:1f:d1:4e:82:ea:04:55:fc:6c:f1:5f:5a:ed:4e:5a:
         d8:5d:07:a8:7e:59:2b:79:b2:45:93:50:7b:e4:62:4e:94:99:
         ae:41:33:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:30 2023 by rpki-client on console-ams.rpki-client.org