Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/51968FF8740F11EC89900FCF5A40D577.roa
File:                     51968FF8740F11EC89900FCF5A40D577.roa (raw, json)
Hash identifier:          XAILjThwLCweBVKXO7sOvIl2gyKo+P57/WuD54AfbmI=
Subject key identifier:   33:22:7F:80:C6:C8:D3:45:92:ED:F9:EE:A6:02:3E:CD:D9:2F:16:63
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       1166
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/51968FF8740F11EC89900FCF5A40D577.roa
Signing time:             Thu 13 Jan 2022 01:22:48 +0000
ROA not before:           Thu 13 Jan 2022 01:22:44 +0000
ROA not after:            Tue 30 Aug 2022 01:22:44 +0000
asID:                     138456
IP address blocks:        45.194.96.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4454 (0x1166)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 13 01:22:44 2022 GMT
            Not After : Aug 30 01:22:44 2022 GMT
        Subject: CN=61df7ee8-424c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a6:69:87:a1:2a:14:85:cf:5f:4d:74:d0:ad:
                    fa:d5:b5:32:28:1f:a8:cb:f0:ba:92:41:15:20:15:
                    bc:5d:db:4d:28:8d:09:84:27:b5:14:bd:ed:4e:e7:
                    9f:91:85:f9:92:db:a5:be:22:58:72:8d:5a:87:ad:
                    26:55:c5:54:a5:c8:48:20:1c:c7:fe:ef:ad:5a:4d:
                    ad:6f:11:4d:a0:6c:05:39:71:3b:9c:37:d1:8f:5a:
                    d4:39:e0:35:96:2d:21:a4:b6:87:4c:2b:38:6c:2a:
                    b4:c0:94:a5:ba:6e:92:f8:25:08:06:78:fe:70:cd:
                    fc:87:25:d7:75:d5:a2:84:97:12:bc:34:32:e4:5c:
                    05:b9:64:bf:53:0a:82:c9:a6:d0:c8:cd:50:d2:00:
                    e4:24:61:80:6b:55:6e:44:00:b6:17:2f:b3:20:ad:
                    c7:3b:33:10:df:c1:2b:14:16:2b:4c:b1:26:6c:29:
                    db:54:3f:17:23:ec:ec:c7:6e:bd:80:1e:a2:f7:fe:
                    ba:9c:60:e1:16:a4:49:ad:e2:75:74:42:9e:70:84:
                    ba:b1:c0:2e:03:4d:a1:cd:b3:01:70:82:75:f3:4f:
                    0d:90:69:87:86:b6:51:ec:35:77:aa:17:c9:06:f5:
                    0a:ab:24:1e:e3:87:43:5e:7d:86:1c:39:d1:71:ca:
                    01:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:22:7F:80:C6:C8:D3:45:92:ED:F9:EE:A6:02:3E:CD:D9:2F:16:63
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/51968FF8740F11EC89900FCF5A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         88:e3:9c:c3:5f:64:68:fd:b5:c4:1c:17:99:f4:f7:8d:d9:bd:
         0d:a6:b9:84:d1:c6:46:44:fc:cc:2e:d6:fb:f5:d0:4c:22:e1:
         06:66:17:0e:c5:82:93:72:66:07:72:a7:dc:c3:71:ce:6b:b4:
         cc:69:d6:3e:de:42:31:7c:b8:ad:15:8e:3f:7f:4b:f1:46:3e:
         fc:01:6a:1a:aa:ec:ab:d7:6b:83:0e:42:83:a4:54:62:85:cb:
         1e:93:b1:5a:8c:96:24:de:60:2b:ab:ff:b2:45:e8:98:e9:5b:
         a2:f2:30:53:75:10:dc:db:76:ad:c6:ea:ae:3b:e8:93:c8:5e:
         27:1b:9e:9a:f6:05:18:02:2e:1c:11:3e:1a:c6:89:cf:89:7c:
         f3:f9:cb:42:c1:c8:cc:f1:e7:16:69:76:4f:8e:80:d8:65:dc:
         79:61:9e:7c:51:45:80:a7:ad:bd:fc:ab:34:3e:d2:b1:36:05:
         67:7c:ff:42:53:e2:c1:fb:de:d5:c5:fc:27:48:f1:6a:cd:a8:
         fc:a2:e6:70:65:b0:6f:c7:06:e9:e9:11:95:6c:4c:c6:4e:51:
         dd:25:e1:9f:69:69:d9:5f:1e:70:7b:d2:fc:50:91:3f:2d:d7:
         e7:8f:2e:52:b4:95:d8:55:bf:7f:31:e6:93:27:23:cb:1e:1b:
         60:91:05:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:20 2023 by rpki-client on console-fra.rpki-client.org