Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/548D5F4036CD11ECA5ECA14BD8A014CE.roa
File:                     548D5F4036CD11ECA5ECA14BD8A014CE.roa (raw, json)
Hash identifier:          Z/rROSE9d6tfU2hab3yF2n0JQgCVEC0qavGJlMaACaQ=
Subject key identifier:   0C:E3:3D:AB:DD:93:1C:A6:5E:4E:BB:F3:5E:44:15:02:7C:ED:65:7E
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0A7A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/548D5F4036CD11ECA5ECA14BD8A014CE.roa
Signing time:             Wed 27 Oct 2021 02:26:46 +0000
ROA not before:           Wed 27 Oct 2021 02:26:42 +0000
ROA not after:            Thu 27 Oct 2022 02:26:42 +0000
asID:                     58895
IP address blocks:        45.206.201.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2682 (0xa7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 27 02:26:42 2021 GMT
            Not After : Oct 27 02:26:42 2022 GMT
        Subject: CN=6178b8e6-fed2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0f:91:0e:c3:fe:66:29:41:ca:6b:22:f1:b7:
                    5a:6b:be:db:7f:04:ce:07:8a:2f:84:bd:8d:5b:8b:
                    17:01:61:f6:c2:a1:75:51:1e:32:72:96:af:ff:1b:
                    9a:89:0d:77:87:0f:5f:3f:9f:04:df:ed:fb:e8:45:
                    66:b7:a4:22:99:e3:9a:c8:7b:b2:ba:9c:d1:cd:83:
                    58:85:f9:80:f4:86:33:72:86:b0:38:e7:cc:f3:da:
                    01:ca:c3:b5:27:02:2a:e2:ab:2a:8b:23:e8:76:80:
                    10:71:8c:36:75:8b:ef:cd:11:a2:66:87:ff:bb:f2:
                    be:b1:96:99:c4:31:9d:df:30:a1:85:00:9c:c5:02:
                    bd:af:55:a4:69:cf:d3:f3:72:ab:0d:e4:11:80:d5:
                    42:6b:3e:de:07:09:33:98:e1:78:90:12:13:71:14:
                    d3:41:5b:ae:f3:8e:38:87:e4:d6:f5:4e:1f:79:d7:
                    fe:6f:2b:c9:15:e7:dc:f7:b7:14:8d:b5:14:88:fa:
                    c2:86:bf:a6:bf:3c:ff:fd:bb:ee:34:9f:51:08:d0:
                    ac:ef:d0:a1:92:da:d7:36:de:a8:66:e3:b6:e5:3d:
                    59:27:37:2f:be:5e:b0:bc:91:0b:bf:29:39:48:bd:
                    27:ba:de:20:f2:98:5f:21:bc:bf:2d:07:8a:47:af:
                    d5:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:E3:3D:AB:DD:93:1C:A6:5E:4E:BB:F3:5E:44:15:02:7C:ED:65:7E
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/548D5F4036CD11ECA5ECA14BD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.206.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:9b:a9:c5:84:f0:d0:e9:51:c1:16:46:e1:42:57:8c:dd:ce:
         85:bc:4f:53:55:88:b9:8a:c2:b9:57:b1:ca:1c:a2:b8:03:1a:
         bd:c6:d8:c6:7c:4d:ec:a6:0a:e8:07:5f:7b:a5:2d:ab:6f:7a:
         24:d7:bf:fb:66:ce:5c:2d:aa:38:9e:e1:30:57:91:0f:e9:68:
         f7:c1:ae:19:2a:ff:ff:57:d9:82:9b:02:04:81:c4:8f:39:9a:
         e7:80:18:3a:87:11:df:a1:e6:7e:1a:63:37:78:b0:5c:50:08:
         f9:e8:de:12:06:0d:63:9f:a8:83:b4:59:ef:3f:8d:cd:68:68:
         6f:2b:8f:c6:8f:4a:b9:29:d6:2f:d7:cb:cb:f8:37:88:bf:99:
         1a:77:c3:c2:fd:9e:2e:68:ff:dd:26:dd:b8:04:07:20:44:30:
         da:83:b8:d7:6f:ea:31:d3:05:52:4c:ee:c0:67:fe:f6:6b:00:
         e3:8a:6a:da:f6:2f:e1:a0:f9:3e:88:22:36:d4:ea:aa:2d:77:
         a5:93:a9:86:14:71:25:db:aa:fe:6e:f3:7e:e0:ec:da:47:8d:
         eb:77:6c:b8:b0:4e:41:2e:b2:a3:0d:79:26:08:9c:8f:74:b8:
         d2:3f:bf:00:76:7a:a2:1f:a4:79:ac:7c:4b:c4:dc:44:2e:d7:
         84:14:88:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:20 2023 by rpki-client on console-fra.rpki-client.org