Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6F4404EA34DA11ED931622B9F1222468.roa
File:                     6F4404EA34DA11ED931622B9F1222468.roa (raw, json)
Hash identifier:          xf0UY1p9XRoK4J5f/XSGW4ed+3N2+Pl6K1VBk83+gVY=
Subject key identifier:   59:16:92:DC:6D:5D:47:4C:B7:80:67:7F:28:A5:2F:E6:8D:3C:65:C6
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       17BA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6F4404EA34DA11ED931622B9F1222468.roa
Signing time:             Thu 15 Sep 2022 09:40:29 +0000
ROA not before:           Thu 15 Sep 2022 09:40:26 +0000
ROA not after:            Wed 31 May 2023 09:40:26 +0000
asID:                     1239
IP address blocks:        45.194.64.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6074 (0x17ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 15 09:40:26 2022 GMT
            Not After : May 31 09:40:26 2023 GMT
        Subject: CN=6322f30d-74c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:19:8c:70:69:05:08:7d:42:be:ef:5f:51:34:
                    5e:03:4d:32:0c:f4:71:0c:3c:0a:70:4d:f6:99:d7:
                    b0:d2:ed:c8:64:fa:05:8e:63:89:d0:96:54:06:a1:
                    91:79:2e:4d:e0:49:c1:cf:aa:bc:c8:aa:96:88:16:
                    4c:ab:20:e8:39:67:01:c5:4e:f5:d0:15:54:62:1f:
                    a0:78:72:ac:96:ce:62:e9:9a:c4:4b:b2:84:49:37:
                    ab:95:ae:50:19:ab:d0:19:cc:4e:b2:ea:53:4b:64:
                    99:32:e5:64:d2:64:d6:e1:40:af:51:0e:37:9a:2a:
                    65:f7:00:ec:85:10:af:b6:78:ef:a8:4c:c4:29:f4:
                    f5:e9:a7:fa:ee:4a:1e:da:1a:be:e6:79:58:da:97:
                    99:c3:24:52:10:b2:48:65:a1:5e:92:63:ce:f6:5e:
                    71:7b:84:45:a6:a3:b2:70:cd:4c:ab:90:e5:8d:58:
                    f2:e4:14:88:f8:a9:67:b0:dc:b5:84:b1:34:35:1f:
                    0d:50:f1:28:de:bd:2b:1f:e8:e1:ee:47:5c:0d:5f:
                    77:3f:68:3c:0b:da:3f:b4:fd:8e:bc:e1:94:27:ef:
                    1e:fa:02:ee:b8:b5:cd:62:e6:c8:3d:b5:1a:30:a0:
                    da:8d:3d:03:d9:34:c3:ac:bd:e3:7a:55:60:e1:5c:
                    52:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:16:92:DC:6D:5D:47:4C:B7:80:67:7F:28:A5:2F:E6:8D:3C:65:C6
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6F4404EA34DA11ED931622B9F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b8:40:78:59:ae:2f:b1:ec:05:f2:be:83:66:11:a9:41:7f:37:
         91:1c:10:da:68:a7:09:a4:48:ae:2c:1e:45:b4:9c:59:ac:fa:
         01:5b:7e:15:b5:7c:83:70:53:4f:5d:a4:59:11:cc:95:df:50:
         69:2d:85:2a:99:7e:e7:ee:c5:a0:68:60:ff:f4:c5:66:df:31:
         c0:9c:95:b6:77:7c:8a:ae:fe:0b:43:35:f2:f5:d7:c9:ce:a1:
         44:2a:12:3c:2c:6f:e9:02:d2:c1:fe:23:9b:f7:bb:f6:37:d8:
         20:53:cc:df:3d:39:5f:02:93:9d:7f:af:91:77:dd:d6:41:9b:
         c5:da:39:0b:45:6a:19:e2:81:36:9f:04:dc:44:3a:30:72:09:
         0a:93:49:12:d9:21:0f:94:03:50:03:63:0b:8a:fa:32:f4:a0:
         d6:ba:ff:c0:4f:df:d5:61:e8:d9:26:d9:01:fe:c3:7c:12:56:
         32:09:9e:31:55:7f:eb:66:3d:58:3a:7e:1d:43:0c:04:19:c7:
         24:ce:84:4a:00:f8:db:e3:69:e8:a5:d0:a7:ee:7f:3f:fc:4d:
         27:90:db:b1:04:aa:22:13:cf:b5:d8:6a:86:d1:2b:8f:6b:84:
         3a:5d:78:c2:ce:5a:15:25:63:71:43:72:7b:54:16:c5:96:1b:
         81:b9:6e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:20 2023 by rpki-client on console-ams.rpki-client.org