Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5AD2B50036DF11ECBCDC0E6BD8A014CE.roa
File:                     5AD2B50036DF11ECBCDC0E6BD8A014CE.roa (raw, json)
Hash identifier:          HdP2e2Gk+yup9mm5VYKYT+4WXehRcm+3noZu62YxhF4=
Subject key identifier:   44:8B:86:A2:B5:5D:DB:D8:62:B6:FD:A2:A4:4D:4F:46:8F:0C:81:A2
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0B75
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5AD2B50036DF11ECBCDC0E6BD8A014CE.roa
Signing time:             Wed 27 Oct 2021 04:35:47 +0000
ROA not before:           Wed 27 Oct 2021 04:35:44 +0000
ROA not after:            Thu 27 Oct 2022 04:35:44 +0000
asID:                     58895
IP address blocks:        45.206.106.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2933 (0xb75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 27 04:35:44 2021 GMT
            Not After : Oct 27 04:35:44 2022 GMT
        Subject: CN=6178d723-78ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:9d:02:2c:82:b0:4a:61:e4:a9:72:7d:f7:59:
                    00:93:95:1c:2b:81:97:cc:2d:48:9b:b8:72:9d:9f:
                    63:10:d1:42:39:47:ba:7b:a6:b2:e4:61:83:50:d8:
                    2b:96:34:f2:ee:92:42:e4:eb:ff:1d:73:9f:6b:c1:
                    44:d8:a4:65:04:6c:13:30:bc:7f:4f:4a:6f:32:da:
                    66:07:a5:5d:fd:59:4d:23:a2:b7:51:6f:93:ae:8d:
                    12:d8:33:73:f7:fc:e8:ba:34:8d:39:86:d1:e9:d5:
                    77:3c:85:55:1e:68:9b:38:24:38:06:a3:0d:34:81:
                    a9:c7:f4:b7:b3:44:81:bc:23:16:ff:24:e5:6d:69:
                    ad:37:6e:c0:bf:ff:93:1d:da:18:70:30:3e:6f:25:
                    c6:a5:6b:52:96:8d:a6:b5:dd:23:7e:7e:3b:7b:f2:
                    a6:ed:bd:b0:14:a7:c4:e0:47:d9:e6:58:51:86:52:
                    cf:0f:3e:7f:94:bb:b6:e5:c7:ef:0a:fc:c1:b8:aa:
                    42:9d:4f:44:01:6a:58:88:b8:59:77:dc:77:0c:0e:
                    f0:1e:ed:cd:7d:c4:a3:c5:e4:b5:25:7a:05:34:59:
                    86:d7:8c:c1:00:e4:7f:40:f7:76:ca:d2:67:5b:11:
                    8d:d0:a0:2a:c8:82:13:b2:73:36:11:aa:10:95:5f:
                    f6:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:8B:86:A2:B5:5D:DB:D8:62:B6:FD:A2:A4:4D:4F:46:8F:0C:81:A2
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5AD2B50036DF11ECBCDC0E6BD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.206.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:5b:4c:b9:3f:52:41:35:1a:07:30:76:d8:93:ce:3e:14:56:
         1e:d4:c1:a6:16:66:33:b1:1b:9b:03:4c:42:6a:71:da:d8:95:
         1a:0d:f1:87:0f:b8:b9:8c:a8:9c:17:78:66:ea:07:aa:da:bf:
         fe:ba:04:b0:d3:3d:8c:af:62:cd:51:a6:22:e6:2e:fb:9a:5d:
         3b:30:a0:20:4a:12:a5:96:95:07:89:b1:1b:88:03:e3:dc:18:
         d3:28:5b:d0:1e:b7:77:dc:3f:d6:bd:3f:1d:7f:c8:de:fd:85:
         ce:bf:a9:b8:23:99:0a:61:b9:a2:b7:70:6a:af:68:5c:f2:ed:
         f6:a4:6f:34:c1:09:76:62:5d:85:bc:8e:0d:68:2b:24:15:d2:
         8b:af:1b:f1:8c:f6:41:e2:e0:7e:dc:d3:71:a3:8b:6c:c9:b3:
         9b:94:e4:4a:34:ed:13:0a:78:7f:90:6c:2d:98:62:50:ec:27:
         6b:4c:3c:e0:6f:d6:82:36:45:4f:07:fd:a5:13:9a:18:c7:ba:
         da:75:88:53:a0:bc:34:c7:48:43:48:17:99:6f:be:05:36:a0:
         b8:8c:62:b5:71:60:c3:55:37:7a:3c:d5:04:e2:1d:c3:6c:32:
         35:d8:f3:e7:53:8b:8f:84:23:3d:1f:ab:19:2a:28:5e:a0:1f:
         89:b0:a4:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:20 2023 by rpki-client on console-fra.rpki-client.org