Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/43E22ED4EBBC11EBB1C8E807D8A014CE.roa
File:                     43E22ED4EBBC11EBB1C8E807D8A014CE.roa (raw, json)
Hash identifier:          YFk5NFtASFA0YbF3453cwvTrhJgfXGMPssDI9US7FI8=
Subject key identifier:   8F:46:7A:2D:2A:F0:A6:37:2C:E6:D1:34:31:24:CB:EB:09:82:14:02
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0807
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/43E22ED4EBBC11EBB1C8E807D8A014CE.roa
Signing time:             Fri 23 Jul 2021 13:45:51 +0000
ROA not before:           Fri 23 Jul 2021 13:45:47 +0000
ROA not after:            Thu 15 Sep 2022 13:45:47 +0000
asID:                     1239
IP address blocks:        45.197.160.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2055 (0x807)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jul 23 13:45:47 2021 GMT
            Not After : Sep 15 13:45:47 2022 GMT
        Subject: CN=60fac80f-1f9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:69:e2:0c:85:26:bd:08:47:36:75:27:b0:26:
                    c0:41:e4:dc:4a:93:2d:5b:c9:d8:01:c5:45:f5:9f:
                    98:b0:1c:28:1b:a1:7c:dd:47:67:aa:93:9e:32:c1:
                    a9:7d:37:30:92:da:21:ad:1e:bb:aa:25:13:f5:09:
                    03:2c:0c:90:fa:2a:f2:6a:a9:5a:ce:ba:43:14:e1:
                    62:32:5a:02:b6:07:48:76:0a:03:37:c4:46:e9:63:
                    c3:da:ca:27:52:a9:2d:b4:89:dd:14:58:23:58:f9:
                    aa:0d:f5:a6:48:a2:b7:51:01:96:d9:c4:fd:24:76:
                    41:a5:02:2c:b8:5c:59:0f:5f:1a:b9:a7:6e:36:38:
                    54:24:71:e4:b9:85:16:79:b1:63:86:32:98:75:70:
                    0e:1b:ad:6d:ea:64:bf:46:8e:ff:8c:fe:4e:a0:a0:
                    ef:6f:ac:1b:96:17:ae:7a:ae:d6:15:02:a8:ae:dd:
                    dd:ab:7e:32:25:1a:d3:0d:53:9c:b2:14:7e:cf:ee:
                    f8:8a:60:fc:34:bd:22:d6:86:0b:ef:36:d9:6a:9b:
                    c2:38:ea:f1:79:67:b0:73:77:ff:4a:0a:c1:dc:a9:
                    dd:14:69:6c:f2:ae:1d:35:fd:ab:e0:4b:5d:8a:a4:
                    10:2d:89:be:86:59:95:e0:9c:19:e0:05:06:1f:e4:
                    78:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:46:7A:2D:2A:F0:A6:37:2C:E6:D1:34:31:24:CB:EB:09:82:14:02
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/43E22ED4EBBC11EBB1C8E807D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.197.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         93:0c:b0:21:67:ae:3b:9f:b1:30:bb:8a:b8:0e:23:8a:72:f3:
         59:54:0a:28:1f:09:f5:26:b6:a1:17:2f:1d:bf:ae:fb:9c:87:
         cd:c0:50:32:5f:d8:95:01:f6:08:3c:62:3c:c2:94:fc:07:b0:
         88:54:24:06:1d:7c:7f:7a:2d:b5:d2:8b:d7:41:8c:6f:ca:13:
         05:04:46:7c:f8:35:4a:fd:06:8b:fd:33:0b:26:7e:6c:27:b8:
         5c:dd:10:c3:a3:fa:94:e9:81:9c:7a:75:f7:b0:61:37:06:f0:
         41:7e:c9:59:f1:9e:22:9c:a2:e8:77:1b:7e:06:74:0d:bf:23:
         72:09:a7:e0:d9:41:6f:6e:3d:ce:52:a8:57:20:82:98:44:f0:
         69:39:dd:2f:e5:d8:99:5b:d0:33:94:e0:15:25:aa:62:78:e5:
         0a:59:98:77:ca:92:4b:7a:a9:43:70:d0:4b:e8:fe:db:28:6a:
         29:de:e8:fb:a4:8c:5e:63:19:16:b7:23:15:79:64:34:1d:12:
         f6:63:84:37:45:89:92:5e:30:b4:d9:6e:1d:b1:e0:15:88:ad:
         2b:08:89:12:04:c6:f2:fa:0a:6b:d6:95:89:4f:6d:4b:c5:b0:
         6a:79:27:08:fc:5b:30:f6:9b:43:17:64:c0:04:8e:ff:0a:7a:
         25:49:53:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:17 2023 by rpki-client on console-ams.rpki-client.org