Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1B6A4D6836E111EC904F3B6ED8A014CE.roa
File:                     1B6A4D6836E111EC904F3B6ED8A014CE.roa (raw, json)
Hash identifier:          skJzcCX/NP3EdBwPZ5rs6lWCwXiKIuwSOO09N4mUd94=
Subject key identifier:   8E:D0:A8:50:9A:85:A0:41:58:74:CB:7E:E8:8A:1D:C5:EE:5D:0D:5C
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0BA5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1B6A4D6836E111EC904F3B6ED8A014CE.roa
Signing time:             Wed 27 Oct 2021 04:48:20 +0000
ROA not before:           Wed 27 Oct 2021 04:48:16 +0000
ROA not after:            Thu 27 Oct 2022 04:48:16 +0000
asID:                     58895
IP address blocks:        45.206.127.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2981 (0xba5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 27 04:48:16 2021 GMT
            Not After : Oct 27 04:48:16 2022 GMT
        Subject: CN=6178da14-5c93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:27:03:32:c8:06:c3:a6:a2:dd:a1:7c:33:e6:
                    ee:4c:2c:7c:f9:f5:9a:93:0b:da:3f:41:68:33:44:
                    f7:33:d1:00:d8:10:ac:91:23:5e:5f:db:04:51:38:
                    04:77:08:0d:23:d6:2d:9e:8f:f9:41:94:4e:ff:10:
                    cd:7b:99:ba:c6:7b:c9:e2:b5:18:93:04:2d:0a:e9:
                    ec:7e:7f:07:f5:ad:44:ae:e5:3a:e3:ad:6d:fe:67:
                    d8:d5:c0:7c:43:a5:d5:19:59:39:46:f2:7f:3c:e0:
                    3c:dc:20:2e:74:83:7f:73:d8:a1:0e:44:84:58:e2:
                    6a:c3:30:f4:78:04:fc:e2:f6:57:b7:cf:15:49:46:
                    b3:0a:29:12:48:8b:56:a3:ec:2a:a2:cf:79:14:b5:
                    2a:9f:81:e0:09:2e:12:0f:7a:0d:1d:83:35:55:90:
                    58:fc:ad:40:7d:2d:89:10:0b:cd:8f:cb:86:d2:31:
                    d3:cc:55:c2:68:88:cc:46:65:3d:d1:b3:94:24:fb:
                    82:73:0a:50:c7:f0:60:1c:3c:01:5e:ac:03:85:57:
                    ce:e5:3d:47:24:ea:93:ef:0a:e3:d6:82:7a:fb:81:
                    8f:e6:dc:4f:7a:36:f9:e0:fe:5c:37:52:96:fe:ac:
                    9c:52:79:19:cd:42:b3:7e:84:20:f2:72:e1:5a:8d:
                    3c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:D0:A8:50:9A:85:A0:41:58:74:CB:7E:E8:8A:1D:C5:EE:5D:0D:5C
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1B6A4D6836E111EC904F3B6ED8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.206.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:02:31:f3:7b:a5:70:cd:c4:c5:fa:87:e1:d6:ae:b5:93:2a:
         08:2f:c2:86:01:57:5c:ef:7b:3e:dd:d5:8f:7b:89:9a:1f:8b:
         d0:7d:06:be:b5:a6:6b:3e:cc:d9:31:c2:84:f0:b6:95:d7:d6:
         d5:79:f5:ff:0c:13:3b:5f:92:35:9e:83:15:2d:8f:f0:14:f7:
         30:3f:e5:9c:f9:2b:c6:98:2d:70:05:72:dc:aa:5e:de:c0:b7:
         9c:4e:12:d8:ae:04:f3:80:92:bf:ca:b8:25:70:de:b7:88:a2:
         00:6f:57:04:19:45:3f:79:ce:f5:bf:42:59:97:4b:fa:95:e4:
         ff:70:5d:c4:03:d1:e5:7a:6a:a8:8d:c7:62:c8:aa:f9:37:3a:
         74:35:cb:55:84:5a:52:62:c0:60:13:c6:b1:d7:68:5c:6c:99:
         71:1d:68:b8:cc:61:be:65:62:30:6d:05:c4:25:86:95:3e:d3:
         df:39:e9:c8:6a:38:00:ad:e2:52:74:82:30:ad:02:78:1b:67:
         da:39:53:11:73:69:85:63:82:f9:5c:dc:42:2a:de:8b:a7:ef:
         2c:8a:1b:73:81:46:31:b1:6b:cc:43:62:36:d4:05:cf:af:98:
         54:77:ae:71:ec:e4:8e:7b:0b:57:ee:ae:39:70:35:b7:b3:f8:
         0d:f1:05:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:15 2023 by rpki-client on console-ams.rpki-client.org