Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/67B001AE2E6C11EC9DF4F218D8A014CE.roa
File:                     67B001AE2E6C11EC9DF4F218D8A014CE.roa (raw, json)
Hash identifier:          y9AsWbTf2vfLZJMCtf3aeximAracTiobF/+1LD2e/Eo=
Subject key identifier:   5A:F1:45:CC:22:17:1A:8E:39:F0:A4:67:BA:F5:33:50:66:A3:80:3D
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0A21
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/67B001AE2E6C11EC9DF4F218D8A014CE.roa
Signing time:             Sat 16 Oct 2021 10:32:47 +0000
ROA not before:           Sat 16 Oct 2021 10:32:44 +0000
ROA not after:            Fri 16 Dec 2022 10:32:44 +0000
asID:                     141711
IP address blocks:        45.206.2.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2593 (0xa21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 16 10:32:44 2021 GMT
            Not After : Dec 16 10:32:44 2022 GMT
        Subject: CN=616aaa4f-3888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e1:a5:33:d7:7a:c7:fb:d0:26:38:fc:c4:5e:
                    ae:cb:2c:85:4e:39:19:aa:91:70:e2:fb:f2:58:da:
                    2f:67:f9:3b:3b:53:ba:4c:bc:e9:d7:7c:63:f9:3e:
                    dc:20:6b:f4:65:66:e5:e7:1f:eb:89:bd:45:f0:9e:
                    b3:63:65:3d:62:ce:a9:31:b4:7b:66:0c:bd:7c:73:
                    81:83:73:f8:f0:78:60:3d:5c:1a:2a:ac:11:66:47:
                    10:d3:80:80:b8:c7:d5:39:bd:68:fb:35:ba:ce:dd:
                    d4:bc:29:83:46:82:19:f2:ec:83:e5:87:ea:3e:b7:
                    4a:ca:33:9c:45:53:27:f6:3d:8e:8f:6c:c2:04:03:
                    a1:b8:d6:88:02:64:ce:a9:13:f2:10:99:19:0e:a9:
                    12:a5:06:36:99:0a:31:bc:bf:f8:cb:9b:86:e4:90:
                    e2:18:8b:4e:76:e5:ae:c9:e7:57:a8:0a:94:37:bf:
                    66:26:4c:81:26:70:1c:75:72:63:11:bb:73:6c:ef:
                    f5:12:2d:ff:20:aa:0e:1f:d9:54:e7:bd:22:e3:8b:
                    e7:43:49:66:40:f1:ff:f1:16:6c:54:f4:6a:2d:53:
                    9a:f3:55:49:4d:28:63:e2:14:75:0c:94:de:cb:2f:
                    17:80:b5:36:a3:6b:a8:1d:83:4c:64:00:fe:b5:43:
                    e2:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:F1:45:CC:22:17:1A:8E:39:F0:A4:67:BA:F5:33:50:66:A3:80:3D
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/67B001AE2E6C11EC9DF4F218D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.206.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:f2:f0:27:9b:5f:57:c6:a7:d9:ea:b3:8d:b8:8d:51:db:42:
         69:df:7f:a3:c6:1b:49:7a:e5:be:2e:17:7c:95:5b:61:e3:29:
         dd:48:f9:fb:d5:ca:55:5e:a7:1c:0a:b8:88:16:34:d2:3c:b4:
         0a:3e:e0:4b:01:10:0e:b0:a4:7d:b1:0b:af:10:66:a9:b1:b0:
         ce:15:65:d3:86:96:f5:e7:28:14:88:2c:3d:25:db:80:d0:89:
         65:fd:71:2b:4c:39:bc:3b:a1:37:5c:c1:64:3c:49:60:23:37:
         e6:7e:d4:2d:a4:d0:36:f9:dd:2e:6a:e1:a0:d6:09:76:43:1d:
         c2:b0:65:13:e3:6d:34:d7:0c:f2:bb:7c:b3:ac:7d:fc:be:45:
         98:b1:64:ce:50:d6:30:d6:e0:25:db:b5:f1:d9:8c:0f:36:0c:
         cf:b1:3d:e1:71:5d:be:c2:fd:e5:84:f5:8c:b3:07:59:d0:c2:
         bc:c4:8f:0f:bc:d3:37:1c:66:1d:55:9c:b3:37:f1:ae:57:1d:
         8a:02:1d:f5:72:e8:cf:7d:79:85:1b:da:c7:0f:b6:e8:44:85:
         08:65:26:d4:d5:c7:a0:57:a0:a0:d2:fb:6f:3d:57:93:ad:c9:
         2c:43:cb:e7:c2:d0:9f:69:ad:f8:17:1e:03:95:dd:cd:48:da:
         49:ba:db:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:20 2023 by rpki-client on console-ams.rpki-client.org