Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4F9FB84E36EA11EC9BAA8F7CD8A014CE.roa
File:                     4F9FB84E36EA11EC9BAA8F7CD8A014CE.roa (raw, json)
Hash identifier:          Hz0YRm7amerCZRcXCcLUd7ZEBg6dx9ApwPCZp9M5HyQ=
Subject key identifier:   B5:54:05:D9:A3:AB:2C:70:96:2D:24:1B:05:80:DB:4D:F1:81:75:46
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0BEB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4F9FB84E36EA11EC9BAA8F7CD8A014CE.roa
Signing time:             Wed 27 Oct 2021 05:54:13 +0000
ROA not before:           Wed 27 Oct 2021 05:54:10 +0000
ROA not after:            Thu 27 Oct 2022 05:54:10 +0000
asID:                     58895
IP address blocks:        45.206.56.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3051 (0xbeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 27 05:54:10 2021 GMT
            Not After : Oct 27 05:54:10 2022 GMT
        Subject: CN=6178e985-acf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:8f:d4:19:5b:c2:ab:c2:db:67:56:18:ee:81:
                    6d:84:1d:f2:7f:92:40:4c:39:b6:58:a1:ad:67:8a:
                    e0:10:be:23:02:99:b7:34:8e:41:91:63:3f:16:a3:
                    85:e6:b8:33:7c:5d:a7:55:88:12:8f:fd:f4:e1:46:
                    aa:36:0c:b4:a7:04:28:9d:d5:39:23:bf:7e:58:40:
                    20:d2:4b:3a:0a:5a:15:a0:ff:bc:db:76:57:1e:74:
                    7a:87:9f:9e:4a:7f:1e:40:32:99:5f:83:eb:7c:58:
                    2d:7f:09:ef:e0:b3:3e:5c:34:e3:f8:9f:09:ba:77:
                    55:d6:bb:82:87:44:6a:a3:87:74:15:ac:e3:e9:d1:
                    a6:64:ce:e5:a4:f7:16:8b:42:3c:33:76:6f:76:d1:
                    22:de:37:63:67:f2:e6:d3:d2:ac:12:d1:cb:69:76:
                    bf:b3:1d:7a:7f:0a:0d:8a:c4:9a:fd:c4:4b:f9:8a:
                    bc:17:57:7e:03:53:13:ef:d0:e2:68:b6:bf:6d:d3:
                    d8:da:57:f1:fe:80:3c:6b:e6:bc:e1:a0:75:db:09:
                    73:d1:2c:9e:cc:a0:ae:9d:37:13:be:d9:1d:d4:89:
                    96:ba:73:18:c8:7b:89:3d:c5:4d:93:e1:f5:cc:6a:
                    fe:7c:f7:08:08:f8:16:e7:ce:cc:b7:3c:e9:a5:4c:
                    81:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:54:05:D9:A3:AB:2C:70:96:2D:24:1B:05:80:DB:4D:F1:81:75:46
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4F9FB84E36EA11EC9BAA8F7CD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.206.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:80:09:42:6c:51:39:9a:bb:bf:2e:36:3f:52:e1:bb:10:7d:
         73:3e:30:34:02:f3:aa:e8:cf:4b:53:4d:9c:a8:5b:af:42:9d:
         d7:95:03:6e:35:ff:9a:21:5f:8c:e2:af:f9:a5:0a:f4:64:3c:
         60:0c:f0:62:b4:08:4d:9b:22:ea:a2:17:58:ac:e2:8d:1a:a7:
         1a:ca:f5:96:d3:2f:c0:56:ad:73:aa:92:76:02:ff:15:b4:ce:
         f4:48:ef:67:5c:cb:f0:95:0e:70:f7:fa:b5:e2:20:76:66:2d:
         c4:a0:16:0f:3d:67:2a:ad:31:9f:91:ed:51:79:0a:1c:ea:32:
         53:ab:63:16:dd:de:ed:30:06:7a:c9:6c:50:17:94:69:19:ad:
         dc:48:73:3c:30:0e:4f:40:7d:47:bc:7a:f6:60:6b:cc:6b:0f:
         1b:9f:6e:66:e0:fb:4e:75:8b:e8:28:15:ce:ad:8f:71:c9:f6:
         ba:17:53:71:70:ab:16:8f:3b:51:f8:5a:7b:8e:c4:a5:e8:f8:
         1f:1b:0a:a1:bd:ac:5c:be:f1:be:99:e6:f9:fa:27:8d:92:0d:
         ba:af:f9:40:91:da:0f:0c:bc:74:86:ba:a1:d6:93:84:33:9d:
         9e:56:43:a5:18:ac:03:8a:c1:27:7b:20:39:2c:a5:a3:91:3a:
         5b:fb:66:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:18 2023 by rpki-client on console-ams.rpki-client.org