Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3925702057D011ECADEB86B65A40D577.roa
File:                     3925702057D011ECADEB86B65A40D577.roa (raw, json)
Hash identifier:          FvXP6Gc/Gq4DChIicQRPzGpUx/IyQi4xuKp63Egmq3M=
Subject key identifier:   48:44:2C:DE:83:1A:10:7A:19:EE:D4:2E:98:04:09:28:AC:6A:12:F6
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       1084
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3925702057D011ECADEB86B65A40D577.roa
Signing time:             Wed 08 Dec 2021 02:40:37 +0000
ROA not before:           Wed 08 Dec 2021 02:40:33 +0000
ROA not after:            Fri 30 Dec 2022 02:40:33 +0000
asID:                     9009
IP address blocks:        45.192.141.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4228 (0x1084)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec  8 02:40:33 2021 GMT
            Not After : Dec 30 02:40:33 2022 GMT
        Subject: CN=61b01b24-9948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b7:a0:64:a8:86:1c:3a:29:e0:7c:23:85:70:
                    d9:05:e2:12:83:44:6d:0e:7c:1e:e3:be:1d:49:0d:
                    48:c0:4d:3b:6a:77:f6:36:d5:a0:dc:92:8c:78:16:
                    07:69:16:91:0f:b1:55:29:0b:cf:b5:ed:ff:08:72:
                    5c:a6:95:4d:9d:61:6d:01:e2:93:06:ee:b0:af:45:
                    54:f6:1d:ba:5d:d2:b9:ab:75:4f:02:54:45:83:19:
                    94:de:27:59:93:bb:30:ed:f6:d7:8c:02:e2:7f:97:
                    6f:1d:f3:96:a0:06:bc:ee:f0:45:25:0e:7d:34:0b:
                    23:ff:1e:d6:b2:88:d9:c9:7b:f8:1e:14:e3:3d:0c:
                    35:81:82:81:3b:16:d5:75:46:c8:f5:c3:f8:bb:db:
                    22:d3:f8:d9:91:af:e4:7b:8e:10:74:43:5c:7a:14:
                    12:b0:65:4f:1c:dc:29:02:08:f1:ea:bc:da:2e:a2:
                    8f:4d:f3:9d:63:0b:83:1f:ad:69:c4:81:6c:f1:e8:
                    28:99:3f:57:20:c7:16:81:8a:a3:10:96:f9:30:e0:
                    48:94:ed:4b:80:65:11:d2:52:c0:c4:f0:3c:a0:06:
                    b8:c5:56:07:8e:f9:db:6d:e1:cd:fd:ed:ef:3f:e5:
                    91:a2:b3:df:6d:c6:65:5c:08:d0:68:d9:46:a9:46:
                    d9:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:44:2C:DE:83:1A:10:7A:19:EE:D4:2E:98:04:09:28:AC:6A:12:F6
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3925702057D011ECADEB86B65A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:11:27:97:23:ce:5e:64:b5:cd:ee:09:17:da:44:9c:28:a2:
         3a:dc:2c:f9:ef:ec:f6:62:b1:3d:94:9d:a8:b5:8f:61:31:d6:
         54:23:ec:c5:10:0a:1b:a1:f8:7b:71:0d:7b:1d:89:fa:ea:d4:
         3e:5f:dd:92:e8:80:84:1e:ec:dd:13:79:e9:ef:86:4f:33:c2:
         81:ab:8e:3e:b6:57:75:7d:cb:75:77:33:fa:8f:d5:32:d3:d9:
         03:18:88:ef:f6:3f:3e:4c:6a:fc:6e:1c:7c:be:28:28:f5:84:
         68:c2:60:b4:5e:fd:6b:77:b3:bd:5a:9a:09:44:ad:56:38:f0:
         e1:ec:00:03:31:b5:79:87:c3:f3:36:0c:a0:24:78:6f:12:fb:
         ff:0a:9e:5d:ff:a6:81:1e:eb:cd:ee:5d:9f:e5:c8:ff:3a:cb:
         ba:d2:28:0f:e1:e9:82:b4:86:02:71:c5:c0:6f:40:9f:47:76:
         ed:36:81:d6:46:ae:0b:7c:5b:e9:6d:66:5d:fb:11:e5:20:9c:
         09:a4:cd:17:d6:cc:6a:27:5a:48:b5:93:47:33:e8:7c:38:06:
         5a:61:29:c7:ec:4d:4c:a6:47:eb:d2:32:f3:70:46:7b:73:0f:
         cc:fc:a9:18:1d:2d:85:fb:56:85:0a:69:28:69:f6:a9:e8:8c:
         3a:0e:b1:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:17 2023 by rpki-client on console-ams.rpki-client.org