Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/790DCB9C36DD11EC9B197567D8A014CE.roa
File:                     790DCB9C36DD11EC9B197567D8A014CE.roa (raw, json)
Hash identifier:          sMumv1vndcaybLqfrFeY9L4H5Y8OMALZFLK8y56NfyM=
Subject key identifier:   3A:86:CE:A9:C1:CE:7F:FE:36:85:17:F0:10:04:0B:DA:D9:46:1A:76
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0B1A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/790DCB9C36DD11EC9B197567D8A014CE.roa
Signing time:             Wed 27 Oct 2021 04:22:19 +0000
ROA not before:           Wed 27 Oct 2021 04:22:15 +0000
ROA not after:            Thu 27 Oct 2022 04:22:15 +0000
asID:                     58895
IP address blocks:        45.206.169.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2842 (0xb1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 27 04:22:15 2021 GMT
            Not After : Oct 27 04:22:15 2022 GMT
        Subject: CN=6178d3fb-cfba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e3:cc:5d:9f:67:a0:86:0e:3a:8f:19:9c:ef:
                    e3:c2:dc:48:9f:10:b6:7f:45:9b:c8:f6:46:99:e9:
                    bd:d3:03:75:94:9b:1e:1c:8f:ce:10:08:af:9e:25:
                    1f:9b:6f:2f:7e:fc:f3:d2:b3:4d:c6:59:a5:cd:8e:
                    a7:f2:b4:b2:ce:ff:89:e8:46:fe:6a:a9:4d:76:0a:
                    5a:91:cb:05:e6:51:42:8d:98:b8:8d:6f:db:02:11:
                    2b:77:b0:f9:d1:0a:c2:33:65:e5:8a:18:5c:61:ca:
                    32:95:85:87:fd:ce:e9:04:ad:81:d0:70:3a:07:fc:
                    7c:31:59:52:bd:64:94:97:d3:f9:40:b9:5b:04:0c:
                    e3:d6:c7:d2:47:e5:62:4d:c5:24:11:d0:73:65:21:
                    e0:96:d1:94:a5:54:15:4d:7a:b1:b6:5d:39:3f:9c:
                    3d:ea:55:67:54:0a:65:f2:d8:73:f4:6d:d7:43:e7:
                    90:09:c8:37:8a:a6:e7:42:9e:58:55:07:3f:e4:2a:
                    76:10:a2:ee:14:4f:7b:ef:9b:f8:8f:e3:07:fd:fe:
                    af:a0:df:28:da:05:1a:aa:34:ca:47:4e:ed:f3:04:
                    f0:ec:7f:e1:3a:58:ed:5d:4e:38:2c:fa:c6:6d:e6:
                    2a:1d:34:7d:55:bd:5b:10:c5:07:51:fc:87:fe:10:
                    ad:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:86:CE:A9:C1:CE:7F:FE:36:85:17:F0:10:04:0B:DA:D9:46:1A:76
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/790DCB9C36DD11EC9B197567D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.206.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:d5:cc:de:2e:1c:92:d3:86:fc:a6:16:f4:db:9f:3f:5a:02:
         fe:bc:80:d8:51:f7:f1:2c:c0:ed:23:99:a9:cf:dc:c3:79:02:
         69:be:e2:43:41:75:80:8e:64:da:f9:bf:fd:8e:82:ce:08:a9:
         c8:36:e7:95:cf:03:f1:f2:68:e8:48:4f:3b:fd:d8:07:f0:b3:
         4d:fe:6d:6f:18:96:62:44:91:cd:5c:bf:bf:7c:66:d7:47:be:
         11:e6:b9:ed:ca:c1:2b:08:5c:66:23:91:34:1f:73:f2:7f:b8:
         d1:19:bc:aa:44:ad:b3:60:49:b9:a6:ee:ec:01:02:8d:a2:c1:
         ab:85:a3:f2:66:3f:6c:b8:9b:20:c4:31:b6:15:75:67:56:d8:
         93:1c:1d:dd:8b:e9:67:09:b9:2f:4d:65:ab:93:14:52:d1:6d:
         7d:3d:92:35:47:da:ea:63:73:a5:1a:c3:3f:44:79:b8:45:b9:
         02:3a:e8:1f:42:e6:b0:8c:3c:a8:86:8c:07:8f:8e:0e:65:30:
         20:22:b7:d3:fc:27:ff:72:ec:84:0d:bf:65:43:52:19:ce:30:
         41:e7:51:4e:94:78:f4:19:bf:7f:e4:bc:e2:b5:bf:1e:36:be:
         f7:2a:45:ec:d3:ee:df:c9:16:7f:c7:6d:e9:af:53:fc:08:78:
         0b:9d:d9:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:22 2023 by rpki-client on console-fra.rpki-client.org