Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2AA01B5C36DF11ECA785C16AD8A014CE.roa
File:                     2AA01B5C36DF11ECA785C16AD8A014CE.roa (raw, json)
Hash identifier:          e25FHcTRVpwujG9Jg33UvB86ELH3uSxNjFluGN1BUrQ=
Subject key identifier:   1A:08:EE:C2:D5:83:DB:23:68:56:D4:B7:34:B5:40:01:40:9E:88:0E
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0B6B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2AA01B5C36DF11ECA785C16AD8A014CE.roa
Signing time:             Wed 27 Oct 2021 04:34:26 +0000
ROA not before:           Wed 27 Oct 2021 04:34:23 +0000
ROA not after:            Thu 27 Oct 2022 04:34:23 +0000
asID:                     58895
IP address blocks:        45.206.190.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2923 (0xb6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 27 04:34:23 2021 GMT
            Not After : Oct 27 04:34:23 2022 GMT
        Subject: CN=6178d6d2-78d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e6:4c:f3:7e:1b:81:53:ee:f9:4f:5c:3f:9c:
                    69:24:3e:5d:5e:42:6f:82:1a:d7:70:92:fb:7a:0c:
                    9d:84:df:29:c6:37:82:55:c2:c9:01:3a:c9:12:62:
                    f7:8d:c0:ac:79:d7:16:ab:2a:32:86:76:5c:4e:26:
                    a2:78:99:8f:19:69:9c:62:d4:8a:fa:9c:90:67:60:
                    ba:a0:3c:c0:2d:bb:4c:24:80:d3:60:b0:d3:09:2d:
                    fa:63:e9:39:70:23:f5:2c:03:23:68:65:5d:08:48:
                    f0:6e:76:a9:18:c9:d5:f9:cf:dd:cd:9a:c1:fa:a5:
                    30:be:39:12:59:7b:08:be:0a:10:a1:f7:86:0f:f9:
                    40:07:80:ce:9b:c4:e5:5a:2e:1e:5f:cf:85:ad:02:
                    1b:d3:ed:bf:4b:6d:40:b5:17:f9:54:30:d1:b5:49:
                    49:87:f8:2f:00:83:18:49:48:01:8d:fa:db:49:cf:
                    df:e1:a9:7d:fe:ee:08:25:0c:60:fd:d0:3c:86:18:
                    1a:f8:bc:e1:99:f0:5b:30:ff:15:11:eb:9c:92:96:
                    48:87:9a:d6:02:d4:22:0a:13:05:0e:92:4b:d4:a5:
                    b3:dd:e3:00:c1:ba:90:a8:0f:95:a5:ef:25:80:d4:
                    ff:2b:76:8b:b2:57:79:d1:83:dc:8c:6c:a1:88:78:
                    be:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:08:EE:C2:D5:83:DB:23:68:56:D4:B7:34:B5:40:01:40:9E:88:0E
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2AA01B5C36DF11ECA785C16AD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.206.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:87:8e:c2:24:e4:8a:02:82:6d:ca:0a:93:5b:91:bb:46:62:
         b8:4c:a7:5a:e9:0c:c2:f2:85:c6:fa:86:20:48:8b:4b:f2:3d:
         f0:9b:7e:f1:dd:d4:1a:44:9e:98:3d:b1:58:9e:2c:d7:b1:3a:
         1c:0c:76:e9:37:50:d4:2f:83:ed:32:a9:4e:cb:60:7c:b7:4a:
         af:b5:3f:02:23:7b:39:3e:a1:1e:a3:df:6c:96:77:f5:07:20:
         42:69:16:0e:7a:7b:b2:b3:6c:bf:7c:ca:7f:8b:28:48:5a:fe:
         9e:a2:b8:6d:21:41:a2:99:ca:da:a0:6f:a3:56:97:57:e7:0b:
         f6:04:b9:da:91:99:d0:2f:f1:1f:0d:48:50:a9:2d:39:4c:34:
         87:ba:9c:bf:6d:cb:4c:d5:8c:12:03:7f:18:4a:57:d8:eb:e1:
         2d:38:8a:52:62:4e:ee:91:9a:02:d8:af:23:71:43:e4:ae:8d:
         50:56:0d:f1:13:de:0d:7c:0b:6c:cb:5c:5a:22:24:c8:de:04:
         d6:a4:e3:37:fb:c9:3b:19:df:4c:f7:bb:c3:a8:0f:8c:3c:31:
         0f:0c:69:70:70:92:e0:06:5a:8f:f8:1f:69:b5:bc:ac:dc:c7:
         1e:4b:b1:58:62:65:38:51:39:c0:09:bd:9d:50:aa:33:b9:1e:
         7b:b1:e5:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:16 2023 by rpki-client on console-ams.rpki-client.org