Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/00FB2FBC36DF11EC8C31716AD8A014CE.roa
File:                     00FB2FBC36DF11EC8C31716AD8A014CE.roa (raw, json)
Hash identifier:          ATl7GjILddNsqjubXvb9RJ4HorEEaMfoNDrQmDat1Ss=
Subject key identifier:   E2:35:D1:F9:4A:90:46:B2:81:5C:BD:CC:9C:36:BB:05:37:08:90:55
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0B63
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/00FB2FBC36DF11EC8C31716AD8A014CE.roa
Signing time:             Wed 27 Oct 2021 04:33:16 +0000
ROA not before:           Wed 27 Oct 2021 04:33:13 +0000
ROA not after:            Thu 27 Oct 2022 04:33:13 +0000
asID:                     58895
IP address blocks:        45.206.188.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2915 (0xb63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 27 04:33:13 2021 GMT
            Not After : Oct 27 04:33:13 2022 GMT
        Subject: CN=6178d68c-a707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:55:31:4b:19:89:4c:2c:46:b6:08:68:9c:88:
                    7e:08:b1:f2:16:1a:2d:3b:f7:02:ef:6d:9e:18:75:
                    1d:5f:cb:92:05:54:6e:7c:71:44:f0:8d:1c:f9:e2:
                    a8:47:f5:b8:44:c1:7c:b6:cd:13:9b:cf:65:1d:dd:
                    0d:12:4c:8a:7b:83:55:9e:61:47:f6:19:ce:fb:4b:
                    d8:a9:1e:be:69:5f:2c:b5:fc:50:3e:b0:4f:98:8b:
                    31:30:c3:19:c1:3a:62:f6:78:a5:62:8f:4f:fc:58:
                    e5:00:14:7b:23:42:20:a5:f6:43:72:a8:29:45:25:
                    b2:c3:33:ea:66:3e:71:ea:04:30:41:84:19:4f:88:
                    dd:d4:c1:bd:9f:23:e9:8e:0f:65:c9:b7:e0:4a:1c:
                    07:eb:7d:19:ed:a9:66:38:8a:0c:5f:e8:ac:73:a7:
                    39:55:89:01:de:b6:01:d9:a5:95:03:84:eb:65:86:
                    eb:e7:54:e2:05:af:62:4c:fd:8d:07:33:47:fb:31:
                    7e:d9:9b:ce:3e:f4:5e:23:b3:b7:20:ea:9e:68:57:
                    b9:12:8c:6e:9e:33:c4:82:ef:7a:8e:1e:73:c2:42:
                    5c:93:91:79:d7:7b:51:ea:18:9d:ba:25:61:9c:b8:
                    4d:35:d4:37:8b:34:b9:ea:41:4d:df:a6:a3:8a:23:
                    75:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:35:D1:F9:4A:90:46:B2:81:5C:BD:CC:9C:36:BB:05:37:08:90:55
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/00FB2FBC36DF11EC8C31716AD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.206.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:df:e7:23:ec:58:ef:85:fe:2a:0e:80:db:be:e8:ff:c7:d5:
         e0:88:aa:5c:8d:38:16:37:ac:93:f6:ce:ed:a5:07:9b:c8:38:
         14:49:ef:fe:d6:e9:04:2b:ba:ea:2b:7b:a3:f8:ac:be:96:37:
         0d:57:0b:ce:ee:b2:89:6e:3e:3c:16:97:c6:a6:b9:7c:8d:ab:
         2d:50:d2:98:77:68:30:0d:4d:e1:9c:3c:f5:c2:cd:a4:fa:3a:
         c5:03:66:5b:31:7c:6e:84:d0:39:78:cb:76:f0:b0:59:d8:23:
         92:30:c5:42:1c:64:20:ee:b0:02:4a:47:6c:1a:1d:38:5b:48:
         17:86:a2:5a:45:7d:86:61:d5:11:ed:51:3e:8f:a0:08:fe:c5:
         9b:0e:6a:ca:28:0e:60:a3:34:78:57:b1:e6:37:5c:a3:83:7f:
         da:a0:39:19:90:f1:63:58:f4:07:62:ad:01:60:52:8a:90:67:
         b2:4f:5c:2b:f1:4c:0c:3a:8b:ce:06:74:b1:b7:97:01:a3:ba:
         81:91:49:b7:07:3a:ef:3f:36:44:59:41:60:ad:e5:9d:f2:0e:
         02:9c:40:9b:fd:2b:0e:5d:09:25:be:70:2c:18:10:88:7a:04:
         85:ba:80:e8:75:5e:98:fb:01:fe:c4:56:ac:88:fd:37:9b:c4:
         4f:61:36:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:16 2023 by rpki-client on console-fra.rpki-client.org