Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/66DBFDFEC38211EC9BA5EAF6F1222468.roa
File:                     66DBFDFEC38211EC9BA5EAF6F1222468.roa (raw, json)
Hash identifier:          f/zUSf7QyOd2yvCPXQX1bGzTZCtNcvBqhNkwWhdNXlk=
Subject key identifier:   D6:2A:1B:DE:D7:7F:70:05:C7:84:44:73:C5:9F:E1:E0:39:D3:D3:F8
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       1357
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/66DBFDFEC38211EC9BA5EAF6F1222468.roa
Signing time:             Sun 24 Apr 2022 03:55:38 +0000
ROA not before:           Sun 24 Apr 2022 03:55:35 +0000
ROA not after:            Fri 30 Dec 2022 03:55:35 +0000
asID:                     328608
IP address blocks:        45.199.182.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4951 (0x1357)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Apr 24 03:55:35 2022 GMT
            Not After : Dec 30 03:55:35 2022 GMT
        Subject: CN=6264ca3a-f9dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b6:09:9e:94:dc:32:4e:5f:c3:8a:eb:a8:f1:
                    b5:57:c3:fa:9b:53:e3:f8:1f:78:cf:19:c8:78:2f:
                    61:c7:d3:34:d0:a4:c8:b7:a7:61:6a:3e:0c:94:f2:
                    d5:a2:38:f3:72:5a:8c:27:46:43:0d:20:39:53:1a:
                    3c:e0:6a:3b:f2:56:37:72:33:1b:00:86:2a:0b:0b:
                    9c:b6:c7:da:17:90:2c:2e:1e:2f:c3:1c:f6:a4:30:
                    ed:c8:e3:ab:90:2a:e1:a4:06:b2:4e:7d:0e:d8:38:
                    37:f9:0c:82:da:69:cb:e7:1c:bf:b8:57:92:d7:3f:
                    ff:f2:53:f3:15:9f:fd:7e:61:00:1e:60:a5:3a:d2:
                    6e:c6:f9:59:29:74:79:e1:ea:cc:b6:41:da:23:b6:
                    20:f9:06:64:cf:af:03:49:09:9d:31:98:11:d3:f6:
                    74:7d:15:fd:68:ff:38:2a:d8:76:62:f5:13:e7:1c:
                    2b:7d:f9:f8:ae:41:23:c5:56:86:16:62:de:3e:30:
                    68:db:7b:0c:3a:09:bb:aa:d0:29:f4:9e:d3:48:fe:
                    84:6d:0d:12:b6:eb:3e:94:fe:d9:39:8c:3f:6d:93:
                    95:9f:20:e4:58:d8:57:c8:f8:29:84:70:10:76:fc:
                    cf:fe:f9:47:b7:5b:21:86:f0:02:2a:7e:7d:c6:98:
                    b9:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:2A:1B:DE:D7:7F:70:05:C7:84:44:73:C5:9F:E1:E0:39:D3:D3:F8
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/66DBFDFEC38211EC9BA5EAF6F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.199.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:5d:0b:12:bb:24:b7:10:df:7d:8f:9a:51:55:fa:7c:3e:6e:
         ef:c3:26:8d:38:cb:21:c9:d0:e6:f5:6d:8f:06:e5:1b:91:f6:
         fc:32:ac:05:40:5f:24:a9:46:8e:25:69:c6:a5:12:bd:2c:bc:
         0c:cc:49:00:3d:fb:2b:0e:56:ab:ff:9a:04:40:b1:5d:99:0b:
         f2:0e:a8:7b:83:9e:1a:57:a9:3f:c6:e8:bd:59:2e:67:34:73:
         d5:7a:50:ff:18:03:7c:59:1a:6e:76:1f:be:c1:3b:70:3d:c7:
         02:b3:b5:4b:d6:1d:ef:bc:fc:3a:10:80:9b:6d:44:1e:31:32:
         f5:2a:5f:f2:6a:9d:84:b8:f0:d9:bf:9b:ff:64:1f:d5:bd:a9:
         34:4a:5c:b7:a8:14:b9:56:f8:28:38:3d:9c:85:fe:47:5c:a0:
         c1:50:4c:e4:bf:5e:95:87:07:e6:e8:cd:3a:f2:3c:91:5c:7c:
         ad:9c:92:0a:2d:40:06:de:98:f7:b7:76:2f:e7:d8:53:2c:50:
         6b:48:12:d8:5b:52:6c:62:9a:9f:ba:f5:96:24:77:5d:75:d4:
         9d:5d:82:3d:5f:5b:fd:88:01:ee:55:f4:b7:26:5e:01:3f:16:
         e8:ce:53:2b:39:b4:b4:18:98:b6:e6:99:9d:72:45:e1:3b:92:
         f5:3f:7a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:21 2023 by rpki-client on console-fra.rpki-client.org