Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D18B77836DD11EC8F15F366D8A014CE.roa
File:                     3D18B77836DD11EC8F15F366D8A014CE.roa (raw, json)
Hash identifier:          0Cga1rPcDriM8OqyftDCVSKXX+ybas1ZydsqEMsY+pg=
Subject key identifier:   27:C5:22:A6:40:1A:7E:9C:52:18:11:21:48:83:B5:62:2E:19:2D:37
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0B0F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D18B77836DD11EC8F15F366D8A014CE.roa
Signing time:             Wed 27 Oct 2021 04:20:38 +0000
ROA not before:           Wed 27 Oct 2021 04:20:35 +0000
ROA not after:            Thu 27 Oct 2022 04:20:35 +0000
asID:                     58895
IP address blocks:        45.206.80.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2831 (0xb0f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 27 04:20:35 2021 GMT
            Not After : Oct 27 04:20:35 2022 GMT
        Subject: CN=6178d396-d311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f3:2d:b7:1a:76:29:e3:5f:2b:6c:1a:10:29:
                    e5:16:e9:b8:5c:ca:c0:94:c4:31:25:d7:48:d2:7a:
                    c2:c1:84:15:0c:2e:0e:67:9b:e0:80:24:62:d2:a2:
                    65:2b:c8:27:d9:98:4c:08:fa:2e:ae:71:51:d9:71:
                    3a:3a:01:f4:86:b5:4b:a6:35:cd:ef:03:fc:5b:b9:
                    d9:b4:c1:f1:b6:1e:11:db:39:b9:89:e8:1d:79:c6:
                    1b:51:7f:d1:50:1e:01:01:3e:f5:c6:7f:03:44:f8:
                    7a:df:dc:37:ef:fe:f2:8e:05:e4:18:c5:55:f8:68:
                    3b:5e:90:9c:fe:a0:3a:32:35:09:69:f8:2a:0f:4b:
                    fe:61:99:f6:12:3c:4e:bb:dc:a5:29:45:a9:4e:a4:
                    72:57:66:51:08:37:77:4e:ad:d3:b7:7f:02:c2:41:
                    63:f4:04:01:8f:03:b4:cc:0e:2b:d2:d6:dd:44:17:
                    c1:f4:96:5b:ce:17:41:26:2d:94:48:17:bf:c8:d4:
                    57:96:98:9b:fe:f2:af:3f:47:6d:80:57:c3:5f:e7:
                    b9:4a:04:88:00:31:de:db:c3:e0:9a:e0:c6:07:f2:
                    e2:2e:0b:b9:eb:3a:15:8c:72:25:1f:6a:4c:70:48:
                    60:8c:88:47:1b:9c:00:55:eb:16:7c:64:57:40:44:
                    64:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:C5:22:A6:40:1A:7E:9C:52:18:11:21:48:83:B5:62:2E:19:2D:37
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D18B77836DD11EC8F15F366D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.206.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:9d:28:f3:ee:18:e9:a2:9e:07:0d:ed:46:66:8a:0f:67:fb:
         9a:20:de:f4:0e:1b:82:c3:a1:6b:98:f0:fc:ab:77:de:c4:4e:
         78:b9:7f:6b:d8:85:f6:4a:c8:6f:24:61:21:71:17:2f:a1:04:
         45:85:b2:3b:70:b4:19:b4:f3:b1:c4:85:4a:d8:97:da:02:80:
         38:3e:c0:65:ff:7b:6e:43:5e:42:95:11:5b:50:17:1e:d9:67:
         3e:02:01:e3:9d:45:36:24:6e:c7:d6:47:c4:b9:1a:ba:77:6e:
         c7:4e:ae:07:f0:61:56:6f:5e:20:e8:2d:66:9c:53:e2:c1:d1:
         0b:d2:2a:66:64:07:00:96:33:11:b6:8d:95:6a:a1:a4:16:5f:
         49:21:06:10:df:ca:51:1b:49:f3:ad:a2:47:5f:1a:a3:64:c2:
         d6:55:6d:c7:20:6b:53:4e:5c:7f:68:a1:2a:71:e5:b0:94:a9:
         aa:95:4b:27:57:a9:66:0f:ae:c2:e2:3c:81:ab:5d:f6:63:f2:
         91:94:b3:c7:28:a4:2d:bc:2d:02:35:4d:94:b0:d0:7a:63:af:
         1a:b1:e7:78:57:39:a0:28:3c:6b:10:8f:79:a5:ee:76:7c:d1:
         7a:e0:ae:71:0c:9f:f8:59:bf:9e:88:62:47:56:da:11:6e:63:
         43:c5:f0:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:19 2023 by rpki-client on console-fra.rpki-client.org