Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D16C99436CD11EC951E1F4BD8A014CE.roa
File:                     0D16C99436CD11EC951E1F4BD8A014CE.roa (raw, json)
Hash identifier:          2gM4PWYgrPXTcmR4emrKNMhwI5OS5vQ0eC1dCOU/pL0=
Subject key identifier:   60:AE:19:C3:89:07:74:71:7C:57:44:38:BA:D3:20:10:67:08:E6:53
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0A6A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D16C99436CD11EC951E1F4BD8A014CE.roa
Signing time:             Wed 27 Oct 2021 02:24:46 +0000
ROA not before:           Wed 27 Oct 2021 02:24:43 +0000
ROA not after:            Thu 27 Oct 2022 02:24:43 +0000
asID:                     58895
IP address blocks:        45.206.73.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2666 (0xa6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 27 02:24:43 2021 GMT
            Not After : Oct 27 02:24:43 2022 GMT
        Subject: CN=6178b86e-fbb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:29:b2:a0:2b:e9:e7:48:98:d1:53:a9:37:39:
                    33:e6:a1:c0:2b:98:71:1d:44:02:d1:c4:23:fd:7b:
                    f1:d5:0a:13:fd:36:25:28:8c:aa:2a:9b:ae:69:44:
                    7c:c5:e3:51:b1:fd:9f:4c:c8:01:64:e4:70:e0:7a:
                    3e:f9:55:16:65:d2:9f:30:84:da:cd:a3:28:fa:65:
                    45:11:67:59:68:30:c5:00:74:1e:32:e7:44:c0:7d:
                    a5:e5:0a:54:3b:ba:32:9e:48:06:c7:2a:a6:8c:07:
                    d9:cd:32:75:91:5c:b0:db:bc:72:b5:69:f2:11:80:
                    88:0f:a3:76:e5:d5:97:cb:6e:bf:1c:ca:81:9a:db:
                    d0:32:63:2f:8f:d3:c1:1f:38:ab:c6:f5:d2:bf:e4:
                    8d:77:e4:41:09:eb:b2:2f:40:4d:10:e6:df:bc:3f:
                    d7:23:7e:0e:d5:ba:fb:8d:9f:ef:65:31:2b:ef:33:
                    b3:42:46:0d:7f:da:b2:7d:db:ff:18:94:cb:53:c7:
                    fb:6f:f5:37:cc:3e:8d:b2:d2:0d:e5:09:8e:34:76:
                    5a:95:a6:3d:44:5f:61:24:65:ce:39:48:b6:c1:42:
                    ce:a7:32:0c:87:62:7c:e7:18:30:80:21:61:dd:ba:
                    6e:da:b2:dd:79:c3:21:6f:47:b4:39:ed:25:ba:89:
                    a2:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:AE:19:C3:89:07:74:71:7C:57:44:38:BA:D3:20:10:67:08:E6:53
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D16C99436CD11EC951E1F4BD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.206.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:59:97:b8:f7:57:54:33:4f:29:de:b7:4b:5f:74:7e:27:17:
         c9:20:ba:67:d4:dd:c0:06:a8:d8:e7:1a:7e:b4:4c:a2:ee:ca:
         77:34:07:5c:13:42:7a:5a:9e:e0:f3:8b:f9:49:b1:53:3f:ee:
         5a:7a:ad:ef:d1:1d:8f:f0:16:10:0e:e7:ac:f1:f6:df:e4:e4:
         53:e9:ea:4d:d4:b0:d9:73:f5:c8:8d:62:f7:65:91:94:62:08:
         c3:e3:70:68:84:ef:ac:97:a6:52:22:cd:59:25:37:18:47:45:
         0a:20:b6:4d:88:ee:ac:f2:d4:71:0d:43:82:f0:19:4f:3b:01:
         c0:69:df:03:76:0d:9a:1c:b5:45:36:f1:ae:fd:a3:f6:fe:e6:
         e2:b6:84:5e:56:91:4f:aa:f6:fe:40:ee:49:90:47:f4:a9:75:
         5b:67:16:5d:36:ad:14:7a:90:70:9f:7e:95:a3:df:f3:f9:ad:
         b5:3a:bf:99:98:30:3d:d1:35:58:a0:19:48:52:25:ff:4e:73:
         64:02:ca:fc:2d:15:8e:cf:bf:5e:00:a9:43:50:36:d2:07:67:
         a4:02:63:92:7d:49:c5:98:61:eb:27:76:92:1a:4e:d0:10:92:
         bd:fe:89:f0:4d:c6:f8:eb:9f:26:9e:dc:46:2f:6d:5c:df:69:
         a1:db:0b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:16 2023 by rpki-client on console-fra.rpki-client.org