Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1C791C2A38BB11ED9AE873F4F1222468.roa
File:                     1C791C2A38BB11ED9AE873F4F1222468.roa (raw, json)
Hash identifier:          /JgdvcDmFW0Y8EAEXUEHUEzg1wGWe7kjPmFRTm/f9+A=
Subject key identifier:   13:16:B4:CD:58:4F:B4:9A:5D:BC:2E:1D:3E:4C:08:22:AC:D5:BD:C4
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       181C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1C791C2A38BB11ED9AE873F4F1222468.roa
Signing time:             Tue 20 Sep 2022 08:06:21 +0000
ROA not before:           Tue 20 Sep 2022 08:06:15 +0000
ROA not after:            Thu 31 Aug 2023 08:06:15 +0000
asID:                     18233
IP address blocks:        45.195.28.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6172 (0x181c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 20 08:06:15 2022 GMT
            Not After : Aug 31 08:06:15 2023 GMT
        Subject: CN=6329747d-36e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:10:09:f9:45:bc:96:46:52:60:4d:57:c2:ba:
                    7e:ed:e4:c2:02:28:7f:33:ad:36:5a:4b:d2:fc:2f:
                    86:a0:4f:a6:f0:dd:f0:da:ac:5f:95:4f:53:32:fb:
                    8e:5b:5e:b4:db:ee:19:8a:7a:62:59:0f:a0:5d:96:
                    ad:45:b9:57:40:4a:ec:ac:15:2a:d9:35:bf:5d:31:
                    a9:d5:7a:39:b3:a6:17:ef:1c:de:bd:f1:e7:d2:3f:
                    6f:9b:da:79:ca:f1:0f:3a:af:e9:e2:60:d3:c6:fe:
                    2a:84:6b:07:7c:f9:75:9e:1d:40:80:b8:a5:4e:26:
                    81:b0:f3:9c:a6:11:0d:a6:58:bf:21:30:92:d2:2c:
                    07:d3:93:c8:8d:1f:50:5b:d1:06:6e:54:bc:8b:70:
                    a2:cf:fb:39:7a:a2:62:be:89:f5:25:ff:42:d9:34:
                    17:cf:e2:78:c6:21:24:c7:bf:b8:1d:a7:65:f8:e7:
                    ec:41:ec:32:77:6c:ad:b3:a3:aa:0b:13:6d:b3:f5:
                    c8:54:7c:25:61:65:ff:38:40:fc:e3:09:cb:ef:3c:
                    98:11:54:64:28:aa:dd:25:15:aa:51:9b:ee:90:d8:
                    90:4f:a1:90:34:93:0e:d1:8e:e6:e7:79:68:ad:1f:
                    a8:e1:a2:f3:0a:36:91:f6:42:67:af:5e:1d:1d:59:
                    5b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:16:B4:CD:58:4F:B4:9A:5D:BC:2E:1D:3E:4C:08:22:AC:D5:BD:C4
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1C791C2A38BB11ED9AE873F4F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:14:28:a2:76:a7:3b:cc:4e:82:13:c5:73:20:f3:21:79:0a:
         b4:4e:74:4e:34:37:c4:c4:89:a8:5b:bc:90:b0:27:3a:0e:32:
         b6:a9:64:b8:2f:26:fb:2f:3a:20:33:57:af:92:cc:63:58:53:
         0f:b7:33:20:05:b4:b7:39:8b:96:86:47:01:92:fa:27:2b:40:
         84:3d:96:fa:97:72:2c:95:ed:05:45:cc:23:cc:b7:47:21:a9:
         d9:b1:fc:bb:10:20:a3:62:81:b5:eb:35:f2:d6:c3:79:ab:69:
         8c:c5:f1:b6:89:91:86:0c:73:66:80:e5:f5:79:ef:62:7a:65:
         f5:78:d9:79:bf:3b:71:1a:bf:fc:d0:1e:18:ce:cd:e0:3e:8c:
         cf:76:b4:44:6d:c6:76:0d:6d:dd:ff:45:5b:32:ee:71:2f:ec:
         39:33:7b:cd:0c:b7:91:fe:37:25:03:7b:e3:84:37:f8:b0:d2:
         a7:e6:cd:54:b9:e6:03:07:b0:17:76:ec:39:a8:fe:c5:9c:a5:
         68:10:f0:d3:15:84:95:a8:b8:5a:f6:06:ac:b1:2a:85:60:4e:
         ca:18:db:43:f2:d4:5a:86:1a:17:90:40:28:c9:cb:7b:79:e9:
         ad:cf:a1:3a:7b:80:5c:b0:81:bc:9c:40:c6:f3:e8:d0:c0:eb:
         69:0c:ee:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 01:15:59 2023 by rpki-client on console-fra.rpki-client.org