Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/200E467036CE11ECABDC734DD8A014CE.roa
File:                     200E467036CE11ECABDC734DD8A014CE.roa (raw, json)
Hash identifier:          8EwJKjtHhU9v3eOYVOIAQliDEiF9h1eH5r8BP9EDbkI=
Subject key identifier:   BB:6C:74:86:8F:43:E4:65:26:41:02:51:23:4F:F0:76:30:BE:A8:5E
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0AB7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/200E467036CE11ECABDC734DD8A014CE.roa
Signing time:             Wed 27 Oct 2021 02:32:27 +0000
ROA not before:           Wed 27 Oct 2021 02:32:24 +0000
ROA not after:            Thu 27 Oct 2022 02:32:24 +0000
asID:                     58895
IP address blocks:        45.206.155.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2743 (0xab7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 27 02:32:24 2021 GMT
            Not After : Oct 27 02:32:24 2022 GMT
        Subject: CN=6178ba3b-3a19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:24:04:36:da:7d:ac:05:f3:09:04:9a:3c:b2:
                    45:52:98:81:8f:1b:95:44:82:df:6d:c1:59:8e:a6:
                    09:e2:f8:99:a6:0d:80:30:99:f8:d9:b2:6f:13:98:
                    f3:9f:92:35:62:36:93:84:ae:7d:47:50:b7:56:70:
                    57:72:6e:15:01:5d:7b:5a:1a:86:2c:a5:3d:f9:bc:
                    32:bf:c9:e7:f0:06:8a:4c:09:11:22:23:74:fc:65:
                    85:0e:f7:42:a6:3a:96:30:1f:2f:6c:6a:ef:cf:20:
                    63:d3:ea:e5:cb:72:fb:a0:ed:89:84:89:99:c0:96:
                    ec:2d:86:e2:22:73:63:22:56:da:da:99:59:ce:57:
                    8f:fc:2b:c9:50:97:28:12:6a:6a:b0:b8:4e:98:ce:
                    5c:ce:d3:11:32:cf:a9:7a:fd:23:a2:96:88:5b:ed:
                    66:ce:91:4f:9e:43:8c:10:4c:d9:a3:3b:c6:83:04:
                    70:b6:26:ef:93:5d:12:b2:40:e7:b0:c3:b8:b7:7f:
                    52:3b:1c:8e:92:52:ad:f6:3b:a8:85:06:9e:27:f5:
                    0b:1a:45:6b:53:3e:46:e9:74:6c:53:e1:8a:3c:3a:
                    09:1b:de:3d:0e:11:a3:99:62:0e:93:92:a3:bf:46:
                    11:69:4d:04:20:c0:8c:5f:d2:0b:45:be:bb:61:57:
                    59:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:6C:74:86:8F:43:E4:65:26:41:02:51:23:4F:F0:76:30:BE:A8:5E
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/200E467036CE11ECABDC734DD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.206.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:df:e0:fe:94:de:93:1c:c0:fb:cf:fe:0c:78:40:48:67:a0:
         fc:c9:de:e4:8b:28:4e:00:93:3b:8f:47:fb:03:3c:79:7d:5e:
         b1:a0:f9:d6:11:b3:20:00:d2:c5:3d:0e:a6:4e:18:6c:cc:fc:
         eb:ec:16:a0:e7:cd:70:91:80:e8:28:2f:9b:de:fe:0d:a1:e3:
         18:bb:2a:92:ca:56:52:a6:a8:87:8b:cc:d1:9a:5b:70:e4:2a:
         d0:5d:03:e1:37:29:27:04:3c:da:9e:cc:b5:60:97:85:d4:1b:
         66:d8:c8:29:83:5e:25:9b:5d:1c:72:5d:ef:04:54:3a:6a:77:
         dd:3a:80:f0:1f:99:a8:69:9d:c7:44:5d:5e:ad:9f:47:6f:d6:
         f1:02:67:6e:dd:b8:ab:7f:e6:72:d5:22:f3:f0:1b:51:ff:07:
         a8:e5:19:10:59:1d:f0:93:fd:11:0a:98:79:90:39:f3:37:b5:
         ee:c4:cc:bf:1b:d6:3a:52:14:19:14:5e:05:db:03:1c:e2:21:
         5e:45:8d:8c:7a:4a:fb:59:31:93:26:0c:6c:96:fd:19:a1:04:
         24:22:44:e7:35:4e:5f:6e:0b:94:51:20:7f:c5:07:55:1f:c7:
         67:d9:1d:bc:a4:e2:03:6a:7c:5b:10:d2:4d:44:de:ed:0c:25:
         52:63:b3:c7
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICCrcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMTEwMjcwMjMyMjRaFw0yMjEwMjcwMjMyMjRaMBgxFjAU
BgNVBAMMDTYxNzhiYTNiLTNhMTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDNJAQ22n2sBfMJBJo8skVSmIGPG5VEgt9twVmOpgni+JmmDYAwmfjZsm8T
mPOfkjViNpOErn1HULdWcFdybhUBXXtaGoYspT35vDK/yefwBopMCREiI3T8ZYUO
90KmOpYwHy9sau/PIGPT6uXLcvug7YmEiZnAluwthuIic2MiVtramVnOV4/8K8lQ
lygSamqwuE6YzlzO0xEyz6l6/SOilohb7WbOkU+eQ4wQTNmjO8aDBHC2Ju+TXRKy
QOeww7i3f1I7HI6SUq32O6iFBp4n9QsaRWtTPkbpdGxT4Yo8Ogkb3j0OEaOZYg6T
kqO/RhFpTQQgwIxf0gtFvrthV1lZAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUu2x0
ho9D5GUmQQJRI0/wdjC+qF4wHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzIwMEU0NjcwMzZDRTExRUNBQkRDNzM0REQ4QTAxNENFLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtzpswDQYJKoZIhvcNAQELBQAD
ggEBABDf4P6U3pMcwPvP/gx4QEhnoPzJ3uSLKE4AkzuPR/sDPHl9XrGg+dYRsyAA
0sU9DqZOGGzM/OvsFqDnzXCRgOgoL5ve/g2h4xi7KpLKVlKmqIeLzNGaW3DkKtBd
A+E3KScEPNqezLVgl4XUG2bYyCmDXiWbXRxyXe8EVDpqd906gPAfmahpncdEXV6t
n0dv1vECZ27duKt/5nLVIvPwG1H/B6jlGRBZHfCT/REKmHmQOfM3te7EzL8b1jpS
FBkUXgXbAxziIV5FjYx6SvtZMZMmDGyW/RmhBCQiROc1Tl9uC5RRIH/FB1Ufx2fZ
Hbyk4gNqfFsQ0k1E3u0MJVJjs8c=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:15 2023 by rpki-client on console-ams.rpki-client.org