Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40CD33E4405F11ED9B3199FAF1222468.roa
File:                     40CD33E4405F11ED9B3199FAF1222468.roa (raw, json)
Hash identifier:          Gafsq2zI6iLA9aQv2R5PuUd7QT2oDM2J3lYk595FPEI=
Subject key identifier:   6F:9A:E5:12:B3:C1:A2:CC:88:F2:82:A9:16:BD:19:AA:84:F0:2A:97
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       18B8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40CD33E4405F11ED9B3199FAF1222468.roa
Signing time:             Fri 30 Sep 2022 01:28:57 +0000
ROA not before:           Fri 30 Sep 2022 01:28:54 +0000
ROA not after:            Thu 05 Oct 2023 01:28:54 +0000
asID:                     22773
IP address blocks:        45.196.32.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6328 (0x18b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 30 01:28:54 2022 GMT
            Not After : Oct  5 01:28:54 2023 GMT
        Subject: CN=63364659-2fb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:54:ab:3b:5a:af:b7:5f:94:a1:bd:30:93:22:
                    9b:d7:eb:86:b3:26:44:aa:2f:f3:1f:30:f7:88:a5:
                    0e:b5:b9:d7:04:a8:6b:da:32:64:d1:77:4d:a9:57:
                    a3:17:49:c7:30:d1:35:bf:ce:00:a6:82:01:2c:39:
                    03:dc:c0:52:92:54:63:98:e3:ce:4e:e8:c2:95:69:
                    d6:2a:44:26:da:de:76:b9:48:8f:69:2d:81:52:b0:
                    d3:b3:86:ec:a0:84:d5:2b:36:5b:12:8f:01:b4:ce:
                    2a:91:6f:a2:45:40:5c:ff:61:b6:53:ed:a1:f1:05:
                    c8:68:ac:98:fb:5e:aa:2b:26:65:08:f3:e8:1f:75:
                    0d:6f:7f:f7:89:9d:54:8c:03:0d:e9:a4:15:a5:ef:
                    1b:99:de:86:76:ea:b9:e0:09:eb:10:ae:d3:8f:88:
                    ee:89:e9:5f:83:2f:ce:8a:a6:36:80:b3:7b:4d:8e:
                    32:68:0b:f0:5b:63:b9:08:a1:aa:29:55:36:81:4b:
                    fd:47:a2:ba:ca:ab:47:c6:16:4c:13:fb:c1:5c:56:
                    4d:96:f7:c5:77:4e:b1:af:0e:ac:21:f8:d1:55:53:
                    c8:66:83:94:22:d8:14:f7:c7:cf:1c:c7:b5:01:1b:
                    40:c3:07:2f:23:b2:56:ad:3c:c2:dd:9f:58:5b:13:
                    46:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:9A:E5:12:B3:C1:A2:CC:88:F2:82:A9:16:BD:19:AA:84:F0:2A:97
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40CD33E4405F11ED9B3199FAF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.196.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b7:4d:a0:0c:31:0c:d1:f3:ae:80:85:cb:09:03:64:25:66:c5:
         34:79:87:6d:8f:b2:56:ac:6e:7e:8b:47:aa:ae:e7:f2:92:f6:
         e7:a4:01:6c:2e:8d:b2:43:5a:e3:b6:a3:71:14:3b:d5:ad:e2:
         f2:5e:5a:2f:20:cd:3a:7f:5a:51:ef:f2:0b:f8:77:20:49:77:
         bf:24:c8:fc:1f:14:5a:70:f9:07:06:3e:ef:91:48:22:c6:3e:
         1e:fd:3b:07:bf:55:37:2d:2f:30:42:9b:22:7d:d4:10:6c:3d:
         ab:c1:c9:98:79:56:98:2b:dd:85:10:07:47:a4:41:e2:fc:b4:
         77:df:b7:fa:87:3a:de:98:7a:be:fa:1f:4f:f4:cf:51:20:e8:
         90:3d:d7:07:ec:59:21:5e:51:2d:b8:70:43:f8:60:0e:92:fa:
         a1:24:a3:f1:95:e9:8a:e8:17:c5:cc:3a:d1:22:53:c6:f5:f1:
         c5:63:80:6f:b6:d5:c5:ec:43:c1:89:38:92:45:28:1a:ad:7f:
         1b:46:5d:3e:c8:71:b4:14:c0:07:73:ec:1a:9a:46:43:5a:f7:
         9a:e2:fe:11:a0:b7:b7:4c:cd:1c:76:6c:16:26:ff:5b:17:09:
         2c:ed:8d:af:42:16:35:99:89:9e:e5:d3:5c:25:29:e2:9e:0a:
         5e:0e:16:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 6 01:29:46 2023 by rpki-client on console-fra.rpki-client.org