Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/66CFC67436CE11EC9C42024ED8A014CE.roa
File:                     66CFC67436CE11EC9C42024ED8A014CE.roa (raw, json)
Hash identifier:          Cua4zAm4IHpVcncEXZNUbaVtabcCBtfYoNbuY1IiQcA=
Subject key identifier:   54:83:77:42:8C:7F:AE:63:8A:40:34:07:22:FC:90:6A:69:0E:0A:AB
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0AC5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/66CFC67436CE11EC9C42024ED8A014CE.roa
Signing time:             Wed 27 Oct 2021 02:34:26 +0000
ROA not before:           Wed 27 Oct 2021 02:34:22 +0000
ROA not after:            Thu 27 Oct 2022 02:34:22 +0000
asID:                     58895
IP address blocks:        45.206.215.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2757 (0xac5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 27 02:34:22 2021 GMT
            Not After : Oct 27 02:34:22 2022 GMT
        Subject: CN=6178bab2-1143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:65:f0:07:27:9f:74:2f:e3:63:83:84:cb:07:
                    3d:47:9b:74:cc:4d:a1:af:fc:5f:8f:b6:db:86:58:
                    f1:be:e7:53:84:24:d9:06:da:30:da:1b:9c:a8:9a:
                    cd:6a:4b:c6:d3:d7:79:79:79:4a:19:c2:7d:4d:93:
                    e8:79:6f:3e:77:66:c5:3a:58:89:e8:5c:f0:cf:81:
                    e4:5d:1e:2f:82:33:6e:79:b8:02:b2:ef:f6:38:0a:
                    cc:db:dd:2a:46:f3:96:46:29:be:65:7a:21:72:fe:
                    6c:48:b0:33:68:b9:74:e3:55:01:d1:0d:26:03:0f:
                    ed:b6:72:08:08:e7:eb:0f:37:6b:d1:b0:17:a5:c2:
                    69:15:12:82:35:be:f7:53:8b:ba:9c:86:80:cd:7c:
                    c6:ec:b3:ed:12:0f:04:bd:de:1c:90:d2:5d:91:8d:
                    c0:f8:32:2e:b1:5c:d6:19:d5:8b:d8:9a:e7:c8:9d:
                    ce:38:06:b2:07:08:34:8f:2a:ce:80:11:8d:9c:3c:
                    a2:8d:f4:2b:ae:b3:c0:0e:3e:98:01:1e:12:03:48:
                    f5:d6:3e:e2:90:12:96:d7:40:6c:8b:8e:ec:2c:c4:
                    0e:68:cd:b8:b3:d8:da:59:81:19:33:16:fa:df:56:
                    ef:6d:66:23:e3:18:b1:b3:fe:d2:9a:27:6b:3c:71:
                    10:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:83:77:42:8C:7F:AE:63:8A:40:34:07:22:FC:90:6A:69:0E:0A:AB
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/66CFC67436CE11EC9C42024ED8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.206.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:e3:ac:68:bd:00:4f:37:53:cf:bd:b9:61:cc:16:ec:fa:0d:
         d8:36:a0:51:45:78:9c:af:ae:54:30:6e:0e:cb:44:2e:65:f5:
         90:55:43:6b:9f:82:2c:cc:bd:4c:76:20:68:72:2f:cf:b7:25:
         3b:1a:ba:50:25:b8:c0:7e:3e:8b:a2:ef:1e:d1:1b:cd:a5:ff:
         f7:16:10:04:6e:73:c5:62:14:24:37:9e:15:a9:85:df:8b:6f:
         e2:35:bc:fc:d2:85:96:7b:07:54:ab:08:29:fe:19:b8:e7:bc:
         7c:46:94:09:d6:50:a0:4f:6b:70:9c:df:b1:d4:13:c2:1d:ed:
         c7:42:ef:90:ed:7c:6c:5e:03:ac:3a:60:1f:1e:04:ca:b5:f9:
         13:37:cf:df:d5:f7:20:6a:e3:4c:38:91:38:95:7a:16:a4:e8:
         b3:5b:bb:55:80:91:0d:64:e3:8a:63:b7:f1:eb:63:8a:82:94:
         64:01:65:01:9e:fe:55:58:cf:7e:85:ba:45:ad:97:f1:fa:a8:
         e5:28:09:0d:e0:84:7a:f8:b6:46:02:6d:0f:71:4f:80:69:81:
         eb:83:d4:33:a3:4d:ac:7e:2d:ce:42:63:77:08:d4:e5:93:fb:
         07:66:54:9b:03:0a:8d:d2:a4:62:f3:85:11:6d:07:c3:97:9a:
         66:22:12:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:20 2023 by rpki-client on console-ams.rpki-client.org