Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0A2B5AEC36EB11EC9A03F97DD8A014CE.roa
File:                     0A2B5AEC36EB11EC9A03F97DD8A014CE.roa (raw, json)
Hash identifier:          TdDVZU4u1G9UFVj54YWFKtWI9rVSk/kV9CGBl4Wns84=
Subject key identifier:   75:AB:19:1C:5A:CC:BF:3A:3E:5E:6A:5A:4A:94:4F:0E:16:32:43:59
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0C0D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0A2B5AEC36EB11EC9A03F97DD8A014CE.roa
Signing time:             Wed 27 Oct 2021 05:59:26 +0000
ROA not before:           Wed 27 Oct 2021 05:59:23 +0000
ROA not after:            Thu 27 Oct 2022 05:59:23 +0000
asID:                     58895
IP address blocks:        45.206.237.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3085 (0xc0d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 27 05:59:23 2021 GMT
            Not After : Oct 27 05:59:23 2022 GMT
        Subject: CN=6178eabe-12fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:22:92:13:9c:4f:98:b7:82:be:db:38:8a:0f:
                    e4:c1:51:5c:75:96:cc:2d:2e:fd:97:c1:5b:00:76:
                    e8:91:47:ea:3c:e0:11:89:22:04:dd:ac:6f:53:24:
                    d2:25:ad:0d:38:a1:f5:4c:e6:22:de:b2:0a:32:93:
                    3c:49:c4:75:c8:20:10:9a:eb:c2:57:b8:84:b2:11:
                    0e:c8:9c:31:a4:1e:8d:00:c3:e7:16:50:e1:cd:56:
                    d6:a3:51:27:4f:da:40:8e:e7:3e:48:92:51:3c:eb:
                    31:94:b2:f7:48:2b:c1:85:26:22:b2:93:80:4c:76:
                    d8:3b:36:3b:d5:68:05:84:7a:08:48:69:e1:ff:0a:
                    7d:b2:30:63:7c:fa:31:26:67:11:f1:b5:fd:b3:a5:
                    64:eb:8f:fa:0e:de:bd:ae:59:26:37:87:28:e1:94:
                    dd:ad:3d:8a:e4:ba:95:ce:0d:fd:10:11:2f:49:5f:
                    ec:ef:50:07:23:2d:48:89:f2:85:a1:06:2e:04:a7:
                    7a:98:d5:bf:d8:c3:60:1f:3f:d9:d5:c3:14:2e:18:
                    39:6a:a0:1f:ca:f7:31:7c:96:98:e4:f8:30:ed:64:
                    e7:e7:b6:80:d9:ef:77:b4:7f:2f:c1:33:aa:06:25:
                    34:8f:86:8e:84:d0:21:99:a6:b1:ce:e0:41:b4:d8:
                    6b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:AB:19:1C:5A:CC:BF:3A:3E:5E:6A:5A:4A:94:4F:0E:16:32:43:59
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0A2B5AEC36EB11EC9A03F97DD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.206.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:d4:0a:b2:fb:bd:96:66:8b:ff:9c:3c:cd:08:cd:57:74:79:
         8e:1a:92:0b:be:7f:a7:f8:4a:92:67:2f:fc:eb:20:5a:1f:95:
         c1:8c:58:0c:7f:3e:a9:5b:ab:6f:a1:fd:a6:04:aa:f2:98:ef:
         f2:9e:74:06:b8:fe:1c:ba:d9:01:39:44:cc:ed:23:7e:94:68:
         f9:43:ee:93:c9:ea:09:e9:25:2e:c6:88:a2:f8:2d:aa:5f:2e:
         1a:b6:24:6a:65:2b:48:d0:a0:93:67:d7:89:c4:78:f3:cf:16:
         96:5e:6f:69:50:98:5b:58:c1:27:40:60:02:89:c8:a3:f0:95:
         4b:b1:17:24:36:83:69:8b:21:0e:d9:a9:c9:2d:39:08:38:78:
         3b:98:01:4a:d7:e8:ed:d9:73:07:c8:ab:63:27:cb:1c:a0:40:
         ad:87:7d:ba:d6:75:c1:ac:c9:d8:64:f6:68:08:70:c2:59:d7:
         fb:49:83:2e:a6:83:7a:69:0a:d6:2f:24:98:1d:84:f9:09:21:
         5b:98:c4:cf:82:73:1b:89:04:52:f7:9b:e0:e9:1d:da:31:2e:
         92:6a:ba:b9:28:a3:d6:2f:e2:ca:bf:9c:f7:ee:86:31:26:93:
         65:3f:87:15:d5:c1:8f:df:8f:19:66:d4:76:66:16:40:a4:2d:
         cf:89:15:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:16 2023 by rpki-client on console-fra.rpki-client.org