Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/21E48204507A11ED85B886DFF1222468.roa
File:                     21E48204507A11ED85B886DFF1222468.roa (raw, json)
Hash identifier:          XliQr5NFLEtvOWv29M9UBF+UhatwgSc38hGjBcK1QvQ=
Subject key identifier:   8D:93:EA:26:A8:14:94:C2:6F:64:0A:14:BD:E9:9C:82:B0:C5:57:EB
Certificate issuer:       /CN=F363BA19AR/serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
Certificate serial:       F4
Authority key identifier: 60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
Authority info access:    rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/21E48204507A11ED85B886DFF1222468.roa
Signing time:             Thu 20 Oct 2022 13:21:40 +0000
ROA not before:           Thu 20 Oct 2022 13:21:35 +0000
ROA not after:            Fri 20 Oct 2023 13:21:35 +0000
asID:                     61317
IP address blocks:        45.221.69.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 244 (0xf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AR/serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
        Validity
            Not Before: Oct 20 13:21:35 2022 GMT
            Not After : Oct 20 13:21:35 2023 GMT
        Subject: CN=63514b64-a589
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0f:46:da:2f:1b:84:fb:0f:36:cd:9a:fb:f2:
                    af:06:00:f7:ab:e8:8b:f0:6a:40:65:a5:c6:a2:c7:
                    d2:04:a6:7c:4f:4e:84:28:75:cf:66:52:35:4e:c7:
                    ce:ec:20:06:95:99:a9:18:ba:a5:27:d4:87:31:66:
                    e0:6c:63:ce:18:5e:8f:c6:72:7b:4e:1a:b4:c0:0f:
                    e3:25:56:9e:18:ef:bb:bc:68:05:86:db:9a:3a:67:
                    ed:22:6f:e3:2d:43:72:b6:88:75:a3:b9:42:69:45:
                    f6:7e:84:76:71:a3:1c:4a:dc:17:a8:ff:64:77:95:
                    f2:47:45:7e:9a:1a:3b:b1:f1:cd:19:50:c7:79:d2:
                    83:b2:55:7c:84:a9:03:58:d8:ae:6f:d8:da:2d:c5:
                    b0:a8:79:46:4e:da:a9:70:d5:33:4f:46:4a:77:d2:
                    b6:f5:ed:14:1b:4f:e9:5b:60:3b:3e:01:7e:af:ef:
                    8d:fc:40:ba:5b:0a:5a:2a:a9:2b:2e:85:0c:7a:8a:
                    d6:3e:f5:df:a6:d6:b6:da:66:be:eb:ff:a8:c4:7a:
                    eb:17:6c:4a:c8:d5:5d:cc:b0:98:5c:11:b9:54:ae:
                    7d:bf:10:b7:88:e8:f3:93:b1:a6:54:b3:6d:84:c2:
                    82:76:a3:00:7d:ec:10:1b:50:cd:6a:7d:60:5a:42:
                    51:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:93:EA:26:A8:14:94:C2:6F:64:0A:14:BD:E9:9C:82:B0:C5:57:EB
            X509v3 Authority Key Identifier:
                keyid:60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/21E48204507A11ED85B886DFF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.221.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:be:3c:84:2e:75:88:f5:13:03:fd:53:2a:b6:45:50:45:74:
         f1:5f:9a:b9:ba:98:6f:f6:e7:8f:59:3b:ad:4d:33:cb:ed:39:
         1c:08:dc:05:1e:75:97:4c:0f:5d:b0:a2:a0:05:98:17:2e:21:
         29:3e:02:fc:97:4f:da:7e:8d:9a:7e:c6:13:50:ff:b9:07:e4:
         e8:5d:de:a8:a8:bd:b8:f7:7d:a4:83:e2:8a:38:37:34:92:63:
         ef:e1:a4:fe:62:b0:3c:bf:07:5d:7d:a4:da:19:a2:24:5f:5a:
         13:d1:ed:ec:f4:7a:be:58:fc:09:85:6b:27:18:ff:59:a6:0c:
         e5:47:37:d4:11:f8:fa:38:cd:b6:6c:54:f2:f2:00:0d:4a:0d:
         34:bd:0c:82:f0:a2:7a:25:35:e6:70:ad:07:93:b4:78:ba:e1:
         71:36:b1:1f:73:d2:5a:ec:46:6a:6e:66:e2:d4:f7:c4:9f:1f:
         e4:fe:f5:70:a7:fe:30:70:89:a0:84:cd:3b:8a:16:15:8b:02:
         ed:e1:0e:1a:ca:89:1b:7a:ad:84:fc:54:af:af:5d:a6:75:89:
         5d:d8:4c:93:4d:19:aa:fa:8e:ea:16:36:83:d5:25:44:37:ba:
         60:c4:dc:13:46:17:2b:18:2a:4d:df:76:3f:57:0a:49:6c:8c:
         3f:36:81:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 21 02:17:42 2023 by rpki-client on console-ams.rpki-client.org