Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/64A6F62657EC11ECA4C6D48C5A40D577.roa
File:                     64A6F62657EC11ECA4C6D48C5A40D577.roa (raw, json)
Hash identifier:          r78f+O+4Lkp80cJX/fN8BmGLlnL+x0u0E0ulZj3Sjlk=
Subject key identifier:   27:AA:19:14:A0:4D:0E:1A:DA:56:5F:5B:6E:7F:2B:64:CF:AD:61:C5
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       10B3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/64A6F62657EC11ECA4C6D48C5A40D577.roa
Signing time:             Wed 08 Dec 2021 06:02:15 +0000
ROA not before:           Wed 08 Dec 2021 06:02:11 +0000
ROA not after:            Sun 30 Oct 2022 06:02:11 +0000
asID:                     135386
IP address blocks:        45.204.96.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4275 (0x10b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec  8 06:02:11 2021 GMT
            Not After : Oct 30 06:02:11 2022 GMT
        Subject: CN=61b04a67-37ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:52:19:64:e1:ad:5c:fc:dd:66:9f:74:d9:d2:
                    77:3c:34:ba:22:15:a0:20:b9:fb:e5:57:ad:7c:4a:
                    89:45:7e:7a:d2:92:a8:3d:b8:97:0f:46:e0:d1:c6:
                    1c:e7:39:af:1d:34:96:0a:ac:19:57:f0:13:cc:58:
                    40:ad:ac:28:8a:b6:4c:32:b4:a7:0e:5b:21:a9:24:
                    57:40:57:bb:52:2c:ef:2c:ef:e8:73:c5:02:66:30:
                    bc:a7:5c:22:b7:52:1f:ea:99:4c:a3:a0:24:fd:34:
                    5f:7d:ac:0f:e3:c5:77:8f:0b:01:0a:16:b5:66:b9:
                    88:0c:37:f6:2f:1a:06:96:4c:69:40:f2:f0:9b:2a:
                    c9:21:d0:23:c6:d3:e6:bd:6a:66:a7:07:e6:e6:78:
                    9f:92:f3:ae:93:b1:4e:90:16:14:10:ea:37:7c:cb:
                    f6:41:f5:0a:be:00:b9:16:2b:ee:8a:77:2b:ef:6a:
                    c5:aa:12:bf:3a:3c:b9:f5:84:b0:8a:f4:95:f4:fe:
                    d3:86:dc:b0:3b:6b:fb:6f:1b:a1:05:75:03:3c:92:
                    9d:de:43:d7:84:ba:e9:07:e3:a6:f1:2e:21:fe:e5:
                    08:52:7a:a6:a7:d2:c7:8b:c8:09:b3:30:42:30:71:
                    b9:56:db:46:71:3f:66:0a:4c:7a:71:db:e3:23:8f:
                    08:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:AA:19:14:A0:4D:0E:1A:DA:56:5F:5B:6E:7F:2B:64:CF:AD:61:C5
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/64A6F62657EC11ECA4C6D48C5A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.204.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         7c:5a:3d:ba:40:bf:c8:cd:21:3d:4b:43:17:6c:55:aa:ef:d2:
         13:e1:81:5c:5e:95:c0:9d:ba:38:b4:1b:59:cc:8a:5e:84:97:
         c2:2c:36:93:1d:3a:a8:f8:20:01:ab:24:c9:b1:7c:d1:93:f6:
         0e:92:61:ce:8d:fe:1e:f8:28:ed:3a:59:dd:b6:79:4b:80:e8:
         ca:5a:7d:5f:ce:90:b7:e3:60:86:e5:97:4f:ca:4b:21:4c:9b:
         e6:b2:c6:c4:0f:29:0a:0d:85:81:7e:df:60:1f:93:e7:9f:28:
         de:d9:e9:4a:8d:31:d3:4a:45:bc:37:53:b0:a3:11:1e:84:50:
         f6:c5:1b:8f:b2:67:83:8b:44:39:f4:46:81:63:f3:14:95:94:
         cb:5c:cd:28:17:f2:98:c4:20:fe:3a:42:63:b3:7d:26:d6:92:
         47:02:46:4c:aa:ac:44:b6:ee:2e:3e:96:4c:17:85:56:4c:93:
         cc:0e:dc:ce:9a:a6:2e:83:8e:73:60:20:43:01:da:1e:4f:30:
         2a:dd:1c:5a:01:d6:b4:a8:f7:88:a0:d6:47:ca:ee:7d:4c:ed:
         4d:15:29:38:a5:81:76:9c:2f:cb:be:25:8c:80:17:dc:57:93:
         3c:bd:9f:10:43:24:17:e2:bd:b4:d4:58:15:b0:1d:2a:60:b9:
         a3:eb:59:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:19 2023 by rpki-client on console-ams.rpki-client.org