Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/553BA75C1E9511ED9C87DFD8F1222468.roa
File:                     553BA75C1E9511ED9C87DFD8F1222468.roa (raw, json)
Hash identifier:          RdgCznXL0VEHYsdMzW+jFkXk7uO26c9UbYp94vBqSH8=
Subject key identifier:   29:BB:36:4C:F5:45:8C:47:F9:1D:24:A8:D3:EE:1E:A2:A8:B3:6D:FF
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       16D8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/553BA75C1E9511ED9C87DFD8F1222468.roa
Signing time:             Thu 18 Aug 2022 01:30:25 +0000
ROA not before:           Thu 18 Aug 2022 01:30:20 +0000
ROA not after:            Fri 18 Aug 2023 01:30:20 +0000
asID:                     21859
IP address blocks:        45.199.185.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5848 (0x16d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 18 01:30:20 2022 GMT
            Not After : Aug 18 01:30:20 2023 GMT
        Subject: CN=62fd9631-172e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:77:0c:f2:b2:34:f0:bf:e6:fb:3e:b6:d5:84:
                    d9:38:04:9a:43:7b:72:d0:a1:22:fe:6d:5d:2d:88:
                    b5:13:2a:09:77:3a:0e:ed:69:ff:5a:8d:26:ed:7c:
                    37:c7:97:59:b9:6b:b1:04:ff:a7:4a:27:d7:4d:b2:
                    98:96:81:58:7a:ed:fc:d5:88:cb:b5:86:7a:88:10:
                    22:5c:9c:01:36:c9:44:34:36:45:ca:b3:25:d3:68:
                    d7:19:c5:fc:7b:93:62:d4:36:f5:23:51:07:14:84:
                    65:33:0f:a7:56:11:a3:f2:6c:41:9c:b2:ae:ee:5a:
                    b4:8b:e8:60:50:18:4e:41:0c:ea:f0:90:0d:a1:bc:
                    fb:51:5c:ab:1b:53:c2:11:1f:01:7c:7c:b1:94:55:
                    fd:14:0a:2b:e1:6b:f7:a6:29:b3:27:b8:31:6d:07:
                    4f:d0:a2:ca:83:b4:4b:3b:bf:f8:bd:42:b8:62:97:
                    c9:87:77:52:bc:3e:45:14:b9:95:38:b6:66:d4:f2:
                    b7:1c:ca:08:cb:5a:81:55:d1:bc:f6:09:fc:87:e3:
                    86:d9:94:87:f6:51:eb:fc:90:c1:cb:28:0f:71:3c:
                    24:2e:c0:27:50:cd:a0:4c:a2:22:f1:3a:bf:64:2a:
                    82:a8:89:ba:ac:f2:1f:c9:98:5f:3c:0d:3f:f9:82:
                    d2:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:BB:36:4C:F5:45:8C:47:F9:1D:24:A8:D3:EE:1E:A2:A8:B3:6D:FF
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/553BA75C1E9511ED9C87DFD8F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.199.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:ca:53:c2:d1:0e:d2:4e:be:0c:65:4b:37:24:f3:11:8b:03:
         67:41:9b:f5:d1:89:ec:42:44:04:46:c9:00:7b:c3:ed:df:c2:
         3d:eb:2a:ec:e5:c3:5e:19:e0:b7:d3:63:dc:1c:4c:28:82:86:
         78:90:35:b9:91:f9:d3:b7:bb:a4:ff:60:6b:76:5f:ba:4e:34:
         a9:65:ae:5b:6b:58:87:99:75:68:85:68:42:2f:1f:8a:b1:2f:
         2b:1f:2b:0d:52:3d:fe:96:b9:f1:35:e0:c0:0b:57:34:5c:07:
         d8:76:e0:8a:9e:96:c3:c0:e3:05:df:3e:46:61:46:0c:3b:9b:
         f3:8e:db:2d:97:74:38:0d:97:f2:dc:1c:3b:ba:fd:d3:3b:83:
         4f:97:e6:71:5d:b7:aa:fa:da:e7:4b:bf:02:f3:33:2d:d3:2e:
         e6:7c:46:6f:7a:fd:14:9c:04:a8:04:a5:c0:c5:72:7d:be:01:
         13:5e:53:74:21:65:a6:53:83:cc:95:50:5a:4e:23:d4:69:fe:
         7b:84:c9:cb:fd:be:59:b3:fd:b9:d3:fc:43:c9:14:b9:f0:4e:
         0b:9d:d8:c9:33:f7:9d:ed:ec:27:be:28:ab:7f:5b:10:1f:d5:
         d6:05:7d:35:38:07:2a:11:fd:5c:d5:64:aa:9d:39:ff:38:4d:
         1f:80:8d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 18 06:55:31 2023 by rpki-client on console-fra.rpki-client.org