Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/63BBC28E57CC11EC9E612CAB5A40D577.roa
File:                     63BBC28E57CC11EC9E612CAB5A40D577.roa (raw, json)
Hash identifier:          kIUECxi1PXywEUuUzJDHKlOPYCOEoHeBP2t6zWdJONs=
Subject key identifier:   47:DB:FD:F1:C0:11:71:A1:E2:E8:B1:1A:E8:13:C6:D1:F4:BD:D4:23
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       105C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/63BBC28E57CC11EC9E612CAB5A40D577.roa
Signing time:             Wed 08 Dec 2021 02:13:10 +0000
ROA not before:           Wed 08 Dec 2021 02:13:07 +0000
ROA not after:            Fri 30 Dec 2022 02:13:07 +0000
asID:                     9009
IP address blocks:        45.192.138.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4188 (0x105c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec  8 02:13:07 2021 GMT
            Not After : Dec 30 02:13:07 2022 GMT
        Subject: CN=61b014b6-903a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c4:2b:fc:49:56:78:56:53:87:64:55:a0:0f:
                    af:67:b6:5f:7d:79:19:99:0e:93:89:f1:67:97:c2:
                    bb:bb:84:76:cf:66:72:a0:f1:5c:00:f7:83:16:c7:
                    e1:ad:3e:de:33:8c:bd:90:fe:e0:f4:f1:13:9c:74:
                    52:70:ee:bc:ab:65:6e:e3:aa:18:75:02:9a:07:b3:
                    d5:f0:15:f6:a5:7e:d1:94:c3:cb:f4:3f:a2:30:23:
                    55:13:78:13:51:f9:db:c6:4b:f1:fc:8a:00:4c:17:
                    d9:e4:83:3c:09:04:23:3a:06:06:9a:8e:cd:ae:2d:
                    55:ef:d8:6a:f4:b5:6e:a1:85:d4:34:22:b2:a7:09:
                    aa:03:57:7b:4c:3a:8c:b2:83:0d:21:b4:d4:eb:cb:
                    a0:47:ad:65:d0:12:15:44:3b:c6:fe:ed:dd:05:a7:
                    24:29:04:43:2f:e1:8f:40:45:fc:15:42:76:7d:fb:
                    ef:4e:70:58:4b:a9:eb:b6:56:6e:7a:3a:b6:f1:9f:
                    1c:ab:db:93:ca:35:2b:08:a7:39:38:83:f9:73:52:
                    61:98:ea:7c:ee:32:80:3d:b2:25:7b:22:33:3f:e5:
                    43:7d:a2:36:27:f0:74:6f:8a:a8:a6:3b:4c:49:4e:
                    ba:e7:7b:62:85:85:57:04:b3:e3:34:93:43:13:16:
                    1d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:DB:FD:F1:C0:11:71:A1:E2:E8:B1:1A:E8:13:C6:D1:F4:BD:D4:23
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/63BBC28E57CC11EC9E612CAB5A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:55:96:88:fe:bc:ca:6e:cf:d2:9d:c0:36:84:d7:01:2d:e2:
         fb:89:9f:25:42:6f:9f:35:8f:c8:ad:99:aa:e1:ad:97:bd:f4:
         53:07:a8:8a:f0:62:59:48:8f:58:4a:2b:96:1e:d6:39:e6:d4:
         55:2d:73:c2:a2:76:30:c9:7c:b4:9a:cc:c4:1f:1b:b6:f1:db:
         25:ca:f8:52:fe:b8:aa:0f:1f:7d:18:b1:4b:bb:b0:bf:f4:c2:
         11:cf:74:42:96:97:cf:53:c5:bb:14:8a:e8:bc:4e:5d:c0:a4:
         84:48:cc:95:55:a0:e5:05:ca:ae:fb:a3:52:03:ee:13:fe:4b:
         79:f7:ba:f7:52:ab:3f:a8:67:22:0e:c1:6c:15:d9:b0:24:78:
         0e:bd:0d:55:88:26:e4:80:c0:a0:89:75:e7:f7:f3:57:a1:19:
         c0:f9:dd:17:09:40:e9:89:cc:5d:f6:82:8f:ae:3b:09:73:98:
         2c:f4:ba:30:97:f5:9f:97:9a:68:a8:13:7d:b9:5b:05:5f:ee:
         99:cb:d5:23:96:fa:55:35:c8:cb:4b:e3:a7:6e:6d:18:01:3d:
         b6:53:77:bb:fe:82:a8:41:f7:8d:31:f3:da:c8:66:41:16:0d:
         58:ed:db:a7:c6:36:68:0c:6f:a3:73:1b:90:19:0e:95:07:d0:
         b9:98:d5:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:21 2023 by rpki-client on console-fra.rpki-client.org