Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/C0A846A0AB5211ECA950DB895A40D577.roa
File:                     C0A846A0AB5211ECA950DB895A40D577.roa (raw, json)
Hash identifier:          IFmEFGwja8K05Wf0o8vLiEtxBs5rkBGcQfUKan3lv4g=
Subject key identifier:   7A:EA:35:E9:4E:9A:0B:97:7A:DB:8F:9B:C0:A2:68:B3:0E:1C:8E:93
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       0624
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/C0A846A0AB5211ECA950DB895A40D577.roa
Signing time:             Thu 24 Mar 2022 09:14:05 +0000
ROA not before:           Thu 24 Mar 2022 09:14:01 +0000
ROA not after:            Fri 24 Mar 2023 09:14:01 +0000
asID:                     400377
IP address blocks:        161.123.55.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1572 (0x624)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Mar 24 09:14:01 2022 GMT
            Not After : Mar 24 09:14:01 2023 GMT
        Subject: CN=623c365d-e902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:77:17:80:7a:6e:f1:70:4e:ab:67:e8:d1:ad:
                    fc:5f:33:61:2b:07:3b:47:f4:66:9c:e4:8f:fe:67:
                    07:08:7c:35:a1:ad:42:d4:59:e9:ff:0a:45:28:c7:
                    46:b1:24:f2:42:a9:a0:45:42:7e:ea:f3:98:d4:59:
                    43:c4:16:77:8e:5b:c3:70:e3:2a:a2:f1:c1:8c:69:
                    90:72:e9:aa:ba:3d:a0:f9:cf:6d:98:75:63:68:f7:
                    5f:eb:c9:0b:af:04:92:f2:23:0b:ba:b6:34:b5:31:
                    3e:64:4d:ea:0e:6a:b4:ce:1a:fc:03:c7:fa:13:d1:
                    34:3d:04:73:c1:8b:38:bc:da:20:8b:39:68:82:da:
                    28:2c:44:cd:cb:0f:6a:b8:11:29:52:cd:5e:81:42:
                    01:8e:b3:90:81:e1:c8:cc:9b:90:61:c1:55:43:d6:
                    2e:07:7a:e2:e2:42:1c:d1:16:dd:89:08:2b:cd:ac:
                    86:c2:b3:58:01:4a:80:c3:88:4a:6e:b6:54:e5:c5:
                    6f:ef:81:0f:2c:44:c4:5c:1f:d5:55:e1:47:c8:83:
                    ad:78:fe:68:37:c1:c8:42:40:df:20:2a:ca:f7:ba:
                    52:29:46:73:4e:49:fb:63:3e:63:1a:5e:b7:a2:06:
                    9e:2f:65:0f:4b:7c:82:d3:db:4b:9a:59:1e:d4:cf:
                    6c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:EA:35:E9:4E:9A:0B:97:7A:DB:8F:9B:C0:A2:68:B3:0E:1C:8E:93
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/C0A846A0AB5211ECA950DB895A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:93:e8:a9:0f:ad:d9:4e:fb:b4:9c:3d:3b:d2:fc:da:34:31:
         42:a9:12:c4:da:80:a8:ee:d1:fd:21:63:7a:cb:c5:9d:4d:e6:
         e0:30:3b:5b:18:29:9e:95:98:fe:38:eb:c1:16:c3:eb:40:8f:
         65:ea:63:37:de:7e:17:09:8b:11:c0:61:62:af:80:3e:03:42:
         ec:cf:f4:97:49:cf:6b:73:04:1d:a7:c6:37:33:04:32:ec:1d:
         c7:de:49:a7:2d:0a:b2:b9:31:67:28:31:c8:64:54:00:82:a4:
         31:af:4a:46:5f:79:e2:d6:7c:f0:20:ce:2a:fe:15:ae:b8:66:
         e8:cd:c6:55:b4:3b:b6:e2:06:97:11:11:cf:41:97:58:49:f6:
         38:80:5f:5c:7d:aa:99:8b:5d:74:2f:dc:fc:40:2f:4d:8c:a8:
         de:6d:56:ad:39:56:4b:56:5e:b0:98:19:04:c8:c6:0d:37:4f:
         cd:97:59:46:f9:03:d0:18:57:b7:9c:9a:5f:4c:75:c8:a4:6f:
         d3:b1:72:21:17:49:21:c1:e1:00:5e:4d:00:c4:cd:d8:a2:d6:
         4b:43:75:ed:0b:25:46:a3:2a:6e:75:cd:b7:f1:a1:3d:99:da:
         39:c5:2b:6e:e5:4a:3a:7a:2a:8e:ad:fb:6d:aa:76:a3:b2:01:
         57:37:2a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:34 2023 by rpki-client on console-fra.rpki-client.org