Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0C5910C836DE11ECB3EA8768D8A014CE.roa
File:                     0C5910C836DE11ECB3EA8768D8A014CE.roa (raw, json)
Hash identifier:          A0FgBwHfqDCf1BsXKCfLww3dV9oaCTcbIdatPW0Xlv8=
Subject key identifier:   B4:AB:40:9E:61:7B:04:6A:6F:5F:22:35:86:EE:79:AF:70:C2:21:81
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0B36
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0C5910C836DE11ECB3EA8768D8A014CE.roa
Signing time:             Wed 27 Oct 2021 04:26:26 +0000
ROA not before:           Wed 27 Oct 2021 04:26:23 +0000
ROA not after:            Thu 27 Oct 2022 04:26:23 +0000
asID:                     58895
IP address blocks:        45.206.176.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2870 (0xb36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 27 04:26:23 2021 GMT
            Not After : Oct 27 04:26:23 2022 GMT
        Subject: CN=6178d4f2-13f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b8:fa:e6:c7:53:99:41:9e:fe:7d:ad:31:fb:
                    24:f1:e4:90:11:91:2f:27:40:58:17:69:b5:b9:b8:
                    ba:b3:76:e0:0c:cf:d0:9d:e2:4c:37:e9:ba:20:44:
                    66:79:84:4f:f7:22:5d:4f:92:44:66:04:24:22:40:
                    1e:cd:a6:93:6c:bc:1f:75:c4:01:d5:af:68:ac:2e:
                    d9:17:a1:26:de:33:89:ed:5b:f9:b9:b3:32:47:b3:
                    f2:50:49:4e:b8:a2:ca:94:1e:e8:39:ac:6f:c8:e9:
                    0a:69:00:78:e4:26:d7:f9:29:5a:78:ba:3c:e7:2a:
                    8b:5c:ec:3e:27:b6:6d:10:18:1a:4d:04:68:19:1a:
                    57:e2:8a:62:35:a6:f1:5e:b5:6d:7c:b0:9a:3e:cc:
                    5c:3f:5f:64:51:39:66:06:18:85:9b:69:10:47:8e:
                    e5:f9:b9:9d:3d:e5:d8:c9:90:8c:75:24:be:20:ac:
                    ab:6e:a0:dd:2e:21:8a:1b:93:86:38:ba:ea:6c:49:
                    6d:63:6a:7b:60:65:09:56:74:c8:90:4b:52:4f:18:
                    93:51:fd:88:02:2b:83:02:cf:cb:01:82:ff:cb:e8:
                    cb:93:08:d8:27:30:61:58:05:b1:9a:a9:f8:88:14:
                    73:10:4b:4b:39:e0:8c:1f:18:3b:14:b8:12:d7:b7:
                    b1:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:AB:40:9E:61:7B:04:6A:6F:5F:22:35:86:EE:79:AF:70:C2:21:81
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0C5910C836DE11ECB3EA8768D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.206.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:1f:c4:03:a9:40:e5:b0:0e:a3:ed:c6:af:ea:6c:d6:ed:e5:
         6b:99:fd:09:f3:f0:18:c6:dc:e7:9d:00:57:b9:fa:83:ba:7a:
         6e:df:73:c0:02:7c:1f:dd:59:0d:ea:b6:71:80:92:ef:ec:59:
         61:ed:e0:56:e2:36:87:d6:19:0c:74:73:3a:63:e8:52:d2:fb:
         ad:70:b5:43:14:e2:e8:0e:e8:cd:27:9c:23:86:c4:5d:eb:63:
         72:2a:b8:d8:6c:46:62:0a:85:c8:b4:31:d6:45:af:85:c4:31:
         96:15:73:c6:7b:b1:f5:bb:c2:9b:96:4c:3d:7f:dc:f1:6f:ac:
         92:b7:ae:6d:9b:a9:4d:59:31:6f:8e:aa:c8:e2:a6:62:6c:ca:
         76:6c:56:12:fd:5e:72:a2:3a:7a:e9:c7:22:20:a2:ca:7b:f0:
         b6:d1:0f:aa:b9:ef:90:de:bb:9d:e5:25:a1:c0:1f:05:f9:5e:
         8c:cb:fd:f6:06:f9:ad:5e:ac:ee:31:78:ed:ed:d2:a3:ef:df:
         07:37:29:4c:83:d6:96:e8:4b:33:f8:d5:10:14:b9:1f:52:22:
         c5:44:87:b7:0c:1b:76:45:3f:ae:e8:1c:73:fc:5f:02:59:4d:
         19:a0:fb:6a:81:67:c1:a0:09:c5:30:5a:3a:19:a6:d7:2a:95:
         b6:a4:11:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:16 2023 by rpki-client on console-fra.rpki-client.org