Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4000B3C836EC11ECA5EEF901D8A014CE.roa
File:                     4000B3C836EC11ECA5EEF901D8A014CE.roa (raw, json)
Hash identifier:          VBFhdvaWIs8cEy5vwLHVb16JIc0u/knLsCxbHomPA+w=
Subject key identifier:   C7:19:0E:47:12:F1:02:C4:9E:07:04:5B:54:A4:29:ED:36:8F:E0:0A
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0C3D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4000B3C836EC11ECA5EEF901D8A014CE.roa
Signing time:             Wed 27 Oct 2021 06:08:06 +0000
ROA not before:           Wed 27 Oct 2021 06:08:01 +0000
ROA not after:            Thu 27 Oct 2022 06:08:01 +0000
asID:                     58895
IP address blocks:        45.206.251.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3133 (0xc3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 27 06:08:01 2021 GMT
            Not After : Oct 27 06:08:01 2022 GMT
        Subject: CN=6178ecc5-4841
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:82:1b:82:14:be:2e:81:da:01:a3:3f:61:fe:
                    4d:81:2f:01:0a:86:b7:25:35:cf:1c:5a:29:a4:35:
                    af:13:a3:a2:20:c7:35:9a:fd:86:61:d6:e2:a2:08:
                    83:88:99:d4:5b:23:70:cf:90:df:09:a5:d6:84:18:
                    b9:e4:3e:ee:47:c5:1b:82:1a:95:14:be:bd:04:68:
                    5b:ee:8a:73:9d:13:0e:42:be:0b:bb:62:79:3c:4e:
                    1a:58:4d:a9:8c:a1:30:34:75:6d:84:b9:53:14:f0:
                    95:4b:b2:a7:f7:ed:ac:f1:f5:d1:63:7f:81:f4:80:
                    f9:49:07:42:57:21:ed:c9:7d:e3:ed:8c:f8:36:67:
                    89:a1:68:d2:54:f0:33:9f:0b:69:c7:be:65:fc:7e:
                    a7:b4:1d:b5:69:76:f9:61:cd:16:bc:0e:e9:f9:fd:
                    0c:7a:cc:78:ed:6d:80:a1:05:2f:b4:34:a5:2e:11:
                    9c:f4:aa:73:9f:ee:9f:06:0b:fe:81:2a:67:4a:f5:
                    d9:d2:84:09:54:5f:4a:03:f3:9c:62:40:45:63:f2:
                    3d:53:4c:22:22:25:03:6e:33:a8:c8:8f:71:1e:4a:
                    f5:54:71:05:b4:70:5e:76:89:86:1c:e1:75:e6:d9:
                    43:5f:e1:b3:1b:e6:af:a7:c8:2a:ac:b1:fc:88:54:
                    28:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:19:0E:47:12:F1:02:C4:9E:07:04:5B:54:A4:29:ED:36:8F:E0:0A
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4000B3C836EC11ECA5EEF901D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.206.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:20:bc:92:0d:dc:c5:1f:e1:bb:3b:2a:4b:08:00:b0:a8:4c:
         4d:8d:51:78:14:a8:b8:c7:7f:26:b7:8a:d0:7f:9b:46:85:57:
         cc:69:85:7c:63:54:68:07:11:cf:5a:82:cb:ad:9c:7c:8f:db:
         a9:0e:55:c4:6f:eb:24:25:d7:a7:92:bd:22:89:e5:89:ed:99:
         85:ab:70:24:bb:fa:ed:ba:62:f8:05:35:4d:17:f7:b6:ae:d9:
         68:76:3d:0e:16:3d:3a:9e:08:08:59:27:b7:61:e5:cb:45:23:
         4e:d7:c5:20:82:63:5e:ef:b6:4f:a3:76:f0:63:a6:be:b2:01:
         ac:1f:68:0a:ea:5b:f9:30:c5:5e:ef:8c:84:a5:3a:8f:ba:45:
         8c:2a:1b:13:a5:9c:56:32:e4:fc:19:78:60:34:70:0c:62:10:
         c8:ba:7c:52:58:1c:6d:e5:50:43:74:aa:d8:91:92:84:d9:da:
         49:d6:04:11:bc:73:8e:38:81:df:f7:b5:0d:c1:6c:f7:5c:1f:
         62:5c:8c:93:e0:e2:ed:f2:72:28:fc:ad:30:23:8b:00:2e:bb:
         b6:05:76:bd:e6:ae:84:7e:bf:77:5b:6e:dd:f6:ef:9e:42:fa:
         92:7b:d9:30:91:b3:65:92:00:14:55:fc:af:72:0c:8f:20:aa:
         4a:e5:2a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:17 2023 by rpki-client on console-ams.rpki-client.org