Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/374DCF2236DD11ECA9A8F066D8A014CE.roa
File:                     374DCF2236DD11ECA9A8F066D8A014CE.roa (raw, json)
Hash identifier:          G+Q8Dxq7Y/mKmehCQZRndZ/R+HjGzfqRsYX+Wj7LXLA=
Subject key identifier:   AB:A5:D8:AF:6E:29:F0:C1:B8:3B:2B:9C:EB:AC:9C:77:89:84:6D:0A
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0B0D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/374DCF2236DD11ECA9A8F066D8A014CE.roa
Signing time:             Wed 27 Oct 2021 04:20:29 +0000
ROA not before:           Wed 27 Oct 2021 04:20:25 +0000
ROA not after:            Thu 27 Oct 2022 04:20:25 +0000
asID:                     58895
IP address blocks:        45.206.166.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2829 (0xb0d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 27 04:20:25 2021 GMT
            Not After : Oct 27 04:20:25 2022 GMT
        Subject: CN=6178d38c-84bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:df:b8:02:7d:45:5b:ae:1a:95:91:83:24:ed:
                    79:6e:0b:66:24:96:19:f5:54:6b:29:83:d2:5f:b9:
                    fe:70:fb:51:5d:e3:ac:2f:e9:b8:98:a6:a0:c5:18:
                    2c:17:ce:ac:c9:16:46:85:cb:9b:a7:7e:df:ad:de:
                    1a:2c:88:90:a3:5e:3f:f3:59:fd:25:b1:05:71:6e:
                    fc:3c:2e:75:c0:88:fa:e5:5c:38:55:25:c0:f0:fa:
                    e2:91:fb:74:6d:68:ef:5d:3c:f4:da:49:57:dd:e5:
                    c0:15:6e:3e:14:76:a5:13:63:72:5c:cf:8a:3a:04:
                    8d:0e:33:41:1d:d9:8b:54:13:ff:45:a1:3b:57:66:
                    71:e0:8f:49:00:1a:21:11:21:eb:ba:4e:48:4f:ca:
                    69:0a:11:d0:e1:77:16:a5:51:e6:82:bd:5b:c8:9b:
                    b6:f3:be:71:d3:82:b1:00:b4:29:13:6f:32:e4:9e:
                    ee:dc:19:15:cc:b8:5b:98:e0:a3:5e:b8:56:c6:4d:
                    3b:1a:c3:99:b5:b2:d2:45:fc:3a:03:67:42:b7:57:
                    fa:c1:2c:a3:95:b1:6d:7f:19:85:36:78:34:5b:ab:
                    5b:9a:57:ae:91:f4:4f:1d:9c:65:7f:9e:31:2e:03:
                    65:9e:1f:f4:52:3d:02:0e:f1:18:0a:9e:7a:a4:35:
                    6d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:A5:D8:AF:6E:29:F0:C1:B8:3B:2B:9C:EB:AC:9C:77:89:84:6D:0A
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/374DCF2236DD11ECA9A8F066D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.206.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:8b:9a:94:00:06:1c:39:fe:57:62:41:ad:10:6c:97:8e:7f:
         3f:7f:80:48:12:0c:7a:47:07:7e:2e:73:5d:d9:2c:58:39:ae:
         7c:8e:e8:ca:a8:21:82:1c:af:3b:99:49:c1:17:bb:a4:7b:ef:
         94:c4:b9:d1:df:43:3e:c5:a5:ff:29:bb:78:ea:3f:7d:bd:91:
         0a:33:70:c3:fb:72:be:30:32:90:cf:37:e6:ee:23:fa:6f:a5:
         ec:db:e6:c7:a6:56:89:b7:5f:0d:6b:64:e9:b8:cf:61:b5:25:
         07:b1:ca:f2:21:54:ec:6b:92:4c:2a:4b:79:62:7d:66:01:89:
         52:89:c8:0b:f3:a6:5b:68:58:49:69:e1:44:6d:95:6d:fd:01:
         29:62:af:00:23:8e:18:f9:88:f6:0b:cf:84:76:2d:e3:21:94:
         c5:a0:11:bb:55:2c:6c:90:ae:4e:2b:30:02:56:51:15:d1:d1:
         79:82:ba:e7:57:cf:e9:23:f4:df:d6:4e:b5:cc:3c:e0:79:c7:
         75:54:2e:ad:0e:ae:ca:93:e3:ac:96:4a:e3:13:16:57:38:42:
         a8:88:9d:f9:15:ca:e9:d4:7b:4c:97:3b:79:76:6d:95:fb:d9:
         d4:f8:60:c4:e5:f3:16:2c:65:93:98:05:4b:ce:e7:b5:fd:bc:
         72:be:1d:ec
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICCw0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMTEwMjcwNDIwMjVaFw0yMjEwMjcwNDIwMjVaMBgxFjAU
BgNVBAMMDTYxNzhkMzhjLTg0YmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCf37gCfUVbrhqVkYMk7XluC2Yklhn1VGspg9Jfuf5w+1Fd46wv6biYpqDF
GCwXzqzJFkaFy5unft+t3hosiJCjXj/zWf0lsQVxbvw8LnXAiPrlXDhVJcDw+uKR
+3RtaO9dPPTaSVfd5cAVbj4UdqUTY3Jcz4o6BI0OM0Ed2YtUE/9FoTtXZnHgj0kA
GiERIeu6TkhPymkKEdDhdxalUeaCvVvIm7bzvnHTgrEAtCkTbzLknu7cGRXMuFuY
4KNeuFbGTTsaw5m1stJF/DoDZ0K3V/rBLKOVsW1/GYU2eDRbq1uaV66R9E8dnGV/
njEuA2WeH/RSPQIO8RgKnnqkNW3rAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUq6XY
r24p8MG4Oyuc66ycd4mEbQowHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzM3NERDRjIyMzZERDExRUNBOUE4RjA2NkQ4QTAxNENFLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtzqYwDQYJKoZIhvcNAQELBQAD
ggEBACmLmpQABhw5/ldiQa0QbJeOfz9/gEgSDHpHB34uc13ZLFg5rnyO6MqoIYIc
rzuZScEXu6R775TEudHfQz7Fpf8pu3jqP329kQozcMP7cr4wMpDPN+buI/pvpezb
5semVom3Xw1rZOm4z2G1JQexyvIhVOxrkkwqS3lifWYBiVKJyAvzpltoWElp4URt
lW39ASlirwAjjhj5iPYLz4R2LeMhlMWgEbtVLGyQrk4rMAJWURXR0XmCuudXz+kj
9N/WTrXMPOB5x3VULq0OrsqT46yWSuMTFlc4QqiInfkVyunUe0yXO3l2bZX72dT4
YMTl8xYsZZOYBUvO57X9vHK+Hew=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:18 2023 by rpki-client on console-fra.rpki-client.org