Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/31EA151036E011EC9F90876CD8A014CE.roa
File:                     31EA151036E011EC9F90876CD8A014CE.roa (raw, json)
Hash identifier:          gvdnugnWV5vRo8ycAkNpJQRGgzcqFkm17UMEo/Q9dBY=
Subject key identifier:   34:6F:E5:E1:2D:F0:A7:3C:31:AB:5B:2E:06:EB:C9:6E:DC:04:CB:91
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0B8F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/31EA151036E011EC9F90876CD8A014CE.roa
Signing time:             Wed 27 Oct 2021 04:41:48 +0000
ROA not before:           Wed 27 Oct 2021 04:41:44 +0000
ROA not after:            Thu 27 Oct 2022 04:41:44 +0000
asID:                     58895
IP address blocks:        45.206.116.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2959 (0xb8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 27 04:41:44 2021 GMT
            Not After : Oct 27 04:41:44 2022 GMT
        Subject: CN=6178d88c-c466
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:36:73:4f:03:58:c7:f7:0b:ab:90:33:84:ac:
                    3f:86:1f:d7:21:97:40:75:24:f7:62:66:8c:0d:ab:
                    1b:8b:2d:42:a7:fa:fa:d4:e1:7d:91:2d:f4:32:94:
                    b0:26:bc:ee:c1:d0:d7:90:17:87:20:93:a4:58:42:
                    0e:ce:e5:9a:49:3f:84:4b:0b:ca:21:f4:f4:42:ff:
                    98:56:63:b8:bc:98:84:18:9a:48:3f:2f:9c:9e:dc:
                    4a:47:e2:75:42:d6:be:33:00:b1:ab:bb:f2:1f:ed:
                    95:4d:fa:97:9a:26:49:25:94:fe:f3:c0:46:ab:46:
                    04:40:f5:1c:43:7d:d3:06:66:1f:8f:7e:c1:ff:ae:
                    52:dc:2f:54:cd:dc:67:32:c3:02:6f:ab:2d:7d:4e:
                    f7:77:a2:5f:a6:47:4c:c5:2f:c6:ef:ba:1b:d0:65:
                    06:c8:49:d9:2e:af:28:94:b2:79:ab:c6:08:44:8c:
                    9f:d9:4e:24:a1:1e:2d:88:5c:2b:3a:00:69:ac:4e:
                    c9:b4:9b:63:41:ce:4d:ef:d7:7d:9e:2c:33:86:6a:
                    e5:ae:b4:b2:f5:c0:8f:d1:70:61:63:fc:ca:c3:77:
                    d6:6c:d9:26:85:ad:8a:b5:40:39:cd:e5:e1:4d:99:
                    90:a8:07:12:22:28:a0:fb:e0:e7:b2:b3:2b:8c:30:
                    3d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:6F:E5:E1:2D:F0:A7:3C:31:AB:5B:2E:06:EB:C9:6E:DC:04:CB:91
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/31EA151036E011EC9F90876CD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.206.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:10:ba:54:f7:d4:5f:44:0b:ab:08:20:d8:dd:6f:84:5b:40:
         98:a4:23:67:5f:24:41:fc:57:3e:2f:42:27:cb:5b:38:59:05:
         35:cf:be:41:91:76:a5:71:a4:4b:0a:4a:7c:2e:8f:14:9f:26:
         82:fe:1c:8c:df:34:36:c6:52:11:64:84:ff:58:7b:3d:ea:6f:
         84:e6:8b:10:c8:98:ec:23:ae:b5:da:ba:1c:95:b3:43:fa:42:
         47:bf:f8:8c:ac:be:1a:e5:9e:d6:e0:8e:bc:1b:6f:b5:41:5a:
         dc:e7:5a:1c:b1:5e:25:09:c7:56:15:06:77:da:c8:8e:13:74:
         f3:b5:a8:a1:6b:52:c3:1b:2d:09:52:27:44:a5:a4:62:15:48:
         ca:55:2a:3b:6c:47:0e:cd:83:01:df:f1:de:67:7c:1b:3a:c8:
         9f:ee:06:12:1d:ff:bd:52:3b:1d:a8:c6:b1:60:c1:cf:34:ff:
         cd:80:aa:84:c9:a6:44:c7:46:ab:67:22:6d:36:89:6f:b9:26:
         20:63:b5:21:15:77:7f:f1:dd:0b:7f:14:82:fb:e3:a5:51:ce:
         d7:8e:64:42:be:af:5c:de:73:1e:a4:28:3a:1a:f6:30:a6:65:
         2d:b0:32:7b:5b:9d:3d:86:ca:33:0b:9b:ee:e3:33:b5:b4:f0:
         25:e5:f8:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:16 2023 by rpki-client on console-ams.rpki-client.org