Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/73B3787836EB11ECAC853800D8A014CE.roa
File:                     73B3787836EB11ECAC853800D8A014CE.roa (raw, json)
Hash identifier:          /0QOc9ia50/0chEHoFREFYa9gIQ67VJF6KevYw4cB+U=
Subject key identifier:   50:C0:40:DE:E9:E4:52:F0:D8:9E:3A:F1:BA:E9:90:D9:17:C9:B1:14
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0C1F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/73B3787836EB11ECAC853800D8A014CE.roa
Signing time:             Wed 27 Oct 2021 06:02:23 +0000
ROA not before:           Wed 27 Oct 2021 06:02:19 +0000
ROA not after:            Thu 27 Oct 2022 06:02:19 +0000
asID:                     58895
IP address blocks:        45.206.69.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3103 (0xc1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 27 06:02:19 2021 GMT
            Not After : Oct 27 06:02:19 2022 GMT
        Subject: CN=6178eb6f-d9f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ab:76:33:4f:46:c4:5b:18:73:c1:0e:2f:51:
                    ce:b8:98:3c:f9:e2:2b:00:eb:86:b5:9c:39:f6:dc:
                    48:56:39:fc:17:23:da:93:33:74:ed:d0:ae:24:96:
                    98:e1:71:42:93:89:f2:7f:7b:ff:e0:d4:e0:14:cf:
                    d4:6c:15:c4:ce:13:c0:24:3d:f5:16:c8:89:f6:41:
                    e9:77:9e:f8:4e:33:35:e2:b7:ed:aa:1f:2f:34:52:
                    44:13:8a:e5:75:c2:20:ab:d9:4c:5e:34:b3:2e:9a:
                    0a:e6:dc:a3:e1:df:30:4d:f6:d6:21:7a:97:0c:a1:
                    d4:68:c2:8e:46:d3:38:d1:ff:72:70:8f:bb:e9:21:
                    65:fd:c6:c4:b6:65:34:45:fd:5e:a8:e5:3c:9d:93:
                    58:79:35:3a:15:cc:5f:6f:0c:b0:8e:ad:ee:5f:19:
                    8d:9d:00:91:ff:40:18:02:4c:5f:d2:46:ea:64:d8:
                    11:2e:75:bd:58:ba:e5:5b:0b:7e:c3:96:42:76:bf:
                    27:68:79:c6:dd:13:a7:8d:de:0e:82:84:ae:13:d5:
                    23:c1:f7:c9:ab:f6:00:06:94:b2:3e:4b:fd:5e:f7:
                    48:2b:f2:7c:ec:65:ea:e0:09:8c:72:03:f4:56:be:
                    ce:14:15:08:f6:d2:c4:ee:f7:0e:44:6a:1e:10:1d:
                    ca:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:C0:40:DE:E9:E4:52:F0:D8:9E:3A:F1:BA:E9:90:D9:17:C9:B1:14
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/73B3787836EB11ECAC853800D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.206.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:8f:8b:5c:09:2e:04:9e:bc:de:7b:45:a4:82:46:72:3f:17:
         4c:30:01:7a:19:2e:0c:ff:94:3a:ce:74:59:d3:32:c3:df:4e:
         c9:5e:a8:42:dd:ff:5a:9a:f2:77:55:70:48:3e:d4:24:82:28:
         54:86:22:cf:d6:43:14:17:5b:0f:5e:a8:2e:ae:93:fb:29:31:
         ff:75:73:5c:d3:d0:0a:88:23:27:60:25:4e:e0:63:09:26:c2:
         6d:9a:db:46:94:4f:61:e0:96:71:98:e9:a9:b0:40:d8:8c:61:
         fd:dd:6f:d8:ef:ef:30:31:25:67:1e:03:c7:8d:5c:17:2a:98:
         23:e7:6c:37:28:8c:37:99:e2:24:88:ac:17:11:23:c7:56:c1:
         b2:da:d2:26:e9:60:b3:13:bb:bc:38:c9:da:04:74:78:e8:e1:
         8c:18:63:5e:57:b8:cf:02:dd:98:f2:db:ab:22:73:99:ed:81:
         1e:98:8a:9f:f3:2e:09:6c:e5:da:34:d4:28:d6:ef:45:a7:8f:
         a4:ca:ed:9d:40:68:d4:d6:9d:28:04:68:52:bd:b0:6a:e5:50:
         fa:7d:10:be:71:0c:81:e2:75:75:2b:6c:dc:db:9e:59:15:07:
         26:e3:78:1b:dc:33:c9:3c:40:63:cb:71:49:50:43:36:dd:ae:
         2e:86:7b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:20 2023 by rpki-client on console-ams.rpki-client.org