Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/47CD613436E011ECB246C66CD8A014CE.roa
File:                     47CD613436E011ECB246C66CD8A014CE.roa (raw, json)
Hash identifier:          CexfrqtvGupHAQmIe16vV+Cy/5E0VmNIcmyuukKK94g=
Subject key identifier:   58:3A:76:57:FD:18:7A:4A:1B:2A:77:10:DB:ED:0E:09:5D:B7:C9:44
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0B91
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/47CD613436E011ECB246C66CD8A014CE.roa
Signing time:             Wed 27 Oct 2021 04:42:25 +0000
ROA not before:           Wed 27 Oct 2021 04:42:21 +0000
ROA not after:            Thu 27 Oct 2022 04:42:21 +0000
asID:                     58895
IP address blocks:        45.206.117.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2961 (0xb91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 27 04:42:21 2021 GMT
            Not After : Oct 27 04:42:21 2022 GMT
        Subject: CN=6178d8b1-40c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:c4:33:d5:40:b0:95:1e:f1:28:c0:b2:a6:d9:
                    dc:9a:19:2a:8b:eb:31:d2:44:98:50:d0:03:36:c3:
                    bc:b1:cd:86:a3:30:40:cc:22:6b:eb:de:87:4d:b2:
                    44:cd:26:f0:76:01:24:1a:4c:10:45:1d:7d:ea:7e:
                    40:62:7b:0e:14:28:a1:ff:d5:7b:d1:7a:a4:b2:58:
                    71:42:b2:80:98:55:71:bd:a7:d6:64:64:2e:01:66:
                    b1:2c:38:97:9a:29:b4:d9:74:b8:03:61:29:e9:cf:
                    fa:07:59:a3:e7:bf:5a:b0:3b:3e:6d:52:30:ca:68:
                    ef:51:50:3a:a7:6f:0f:40:1e:21:d1:54:a6:08:e6:
                    ed:18:eb:6b:cc:37:f4:ae:22:2e:a1:fb:e7:f8:8b:
                    2c:99:50:60:02:f9:d1:99:33:e9:a8:3a:f2:89:c8:
                    71:21:a2:85:bd:2d:ea:95:91:d3:1a:b1:72:7e:c1:
                    b8:2c:22:57:40:14:95:e9:6f:2e:2a:e9:91:0f:eb:
                    d4:1c:7a:72:3b:40:e0:9d:14:fd:7d:b8:0b:0b:94:
                    90:38:08:dd:7c:8f:46:96:d3:d7:fd:65:b4:f5:d1:
                    f3:84:34:a2:d6:f2:09:3f:e8:10:3a:40:18:c1:bb:
                    11:3c:76:a4:5d:7c:80:6a:21:f5:ab:34:82:e7:6f:
                    b2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:3A:76:57:FD:18:7A:4A:1B:2A:77:10:DB:ED:0E:09:5D:B7:C9:44
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/47CD613436E011ECB246C66CD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.206.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:f1:a2:ca:45:09:ac:dc:6c:31:95:36:cf:32:72:ff:9a:c9:
         0d:4f:15:e5:82:35:6f:e2:d0:b9:83:bb:c2:0b:ae:da:f2:91:
         43:47:0d:be:9b:3f:b3:0b:a2:d5:f7:f1:72:97:1d:82:c6:f9:
         7f:1f:4b:e7:e6:2d:f9:7b:b2:49:b5:3c:00:5e:ac:a2:1f:5e:
         cc:ed:72:25:17:46:b2:d7:d7:c6:e8:0e:e5:10:c8:73:c8:80:
         de:2e:6f:f2:fa:dc:ef:a0:bb:f4:e7:5c:6e:c2:bb:e5:2e:eb:
         d0:a6:89:71:9f:ed:54:85:91:6d:7a:dd:d6:e3:35:fc:5a:bf:
         01:e2:6b:4c:55:9d:07:d0:6c:58:1d:f6:10:90:2d:d2:fc:1f:
         52:59:85:06:de:93:06:96:b5:a1:7f:72:37:6d:f1:e8:23:32:
         a1:6a:f5:e5:9b:01:cb:70:c2:b4:8f:8e:6e:0b:fb:c5:61:47:
         38:2e:5a:6c:66:86:4b:02:75:9b:00:66:5e:b2:28:9c:5b:fe:
         0f:19:65:82:c6:f4:74:f8:28:ff:d1:7e:d5:5e:8e:b2:8e:95:
         cb:ad:02:c7:1e:e6:2b:5d:93:ad:ba:07:df:cb:25:41:c6:1b:
         5b:bb:3e:e6:e4:f8:1e:ba:db:c5:9a:49:a2:a5:11:20:ab:b1:
         c4:55:56:41
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICC5EwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMTEwMjcwNDQyMjFaFw0yMjEwMjcwNDQyMjFaMBgxFjAU
BgNVBAMMDTYxNzhkOGIxLTQwYzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDpxDPVQLCVHvEowLKm2dyaGSqL6zHSRJhQ0AM2w7yxzYajMEDMImvr3odN
skTNJvB2ASQaTBBFHX3qfkBiew4UKKH/1XvReqSyWHFCsoCYVXG9p9ZkZC4BZrEs
OJeaKbTZdLgDYSnpz/oHWaPnv1qwOz5tUjDKaO9RUDqnbw9AHiHRVKYI5u0Y62vM
N/SuIi6h++f4iyyZUGAC+dGZM+moOvKJyHEhooW9LeqVkdMasXJ+wbgsIldAFJXp
by4q6ZEP69QcenI7QOCdFP19uAsLlJA4CN18j0aW09f9ZbT10fOENKLW8gk/6BA6
QBjBuxE8dqRdfIBqIfWrNILnb7JfAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUWDp2
V/0YekobKncQ2+0OCV23yUQwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzQ3Q0Q2MTM0MzZFMDExRUNCMjQ2QzY2Q0Q4QTAxNENFLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtznUwDQYJKoZIhvcNAQELBQAD
ggEBAKzxospFCazcbDGVNs8ycv+ayQ1PFeWCNW/i0LmDu8ILrtrykUNHDb6bP7ML
otX38XKXHYLG+X8fS+fmLfl7skm1PABerKIfXsztciUXRrLX18boDuUQyHPIgN4u
b/L63O+gu/TnXG7Cu+Uu69CmiXGf7VSFkW163dbjNfxavwHia0xVnQfQbFgd9hCQ
LdL8H1JZhQbekwaWtaF/cjdt8egjMqFq9eWbActwwrSPjm4L+8VhRzguWmxmhksC
dZsAZl6yKJxb/g8ZZYLG9HT4KP/RftVejrKOlcutAsce5itdk626B9/LJUHGG1u7
Pubk+B6628WaSaKlESCrscRVVkE=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:19 2023 by rpki-client on console-fra.rpki-client.org