Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/79E1A08636EA11EC87FEDA7CD8A014CE.roa
File:                     79E1A08636EA11EC87FEDA7CD8A014CE.roa (raw, json)
Hash identifier:          w+4LrkGVfx8a3Yn1Drze5XGbNQ66fqZ7gsyoyY/MoVQ=
Subject key identifier:   D9:46:C5:E6:08:D5:96:51:1D:F4:28:C4:A6:E4:56:81:DD:C3:9D:90
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0BF3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/79E1A08636EA11EC87FEDA7CD8A014CE.roa
Signing time:             Wed 27 Oct 2021 05:55:24 +0000
ROA not before:           Wed 27 Oct 2021 05:55:20 +0000
ROA not after:            Thu 27 Oct 2022 05:55:20 +0000
asID:                     58895
IP address blocks:        45.206.58.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3059 (0xbf3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 27 05:55:20 2021 GMT
            Not After : Oct 27 05:55:20 2022 GMT
        Subject: CN=6178e9cc-5ad3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d7:94:18:b0:ed:32:c9:4a:fb:1a:08:1a:bb:
                    08:81:19:e9:07:d8:64:2c:a2:7d:1d:97:59:21:1f:
                    0f:a8:cd:92:25:f1:eb:ec:ee:49:04:17:97:58:40:
                    c0:4c:3d:4b:06:06:95:a9:1f:fc:a5:f3:7e:b4:45:
                    80:81:51:6f:ee:ff:64:90:b9:c6:78:75:bc:d6:67:
                    7f:98:11:52:08:bf:c0:9f:91:e0:a0:8e:71:e0:81:
                    56:60:97:da:87:d3:e6:54:0c:d6:30:d3:5d:54:b1:
                    a8:1e:3e:d4:cf:fc:52:5f:dd:50:07:e6:90:7b:08:
                    59:1d:53:fb:f5:9c:92:2f:ff:18:25:96:c7:58:03:
                    2c:ee:0e:20:86:00:58:99:74:7c:98:4c:73:2d:66:
                    85:45:8c:60:a6:cd:a8:81:99:36:a3:61:91:db:4e:
                    9d:e2:32:e8:86:db:02:a7:b5:10:72:cc:ac:7b:7f:
                    85:19:c0:5f:f2:97:ff:ea:76:61:aa:0a:be:1d:bd:
                    71:24:4c:2f:09:5f:ac:d9:d0:6a:35:6c:b3:a2:00:
                    41:19:9f:33:17:d7:92:72:ce:5e:00:56:1b:6b:f4:
                    bd:36:af:b8:8f:8a:27:c6:29:a8:63:88:45:02:03:
                    46:cf:47:90:1a:c2:b5:36:4b:fc:2e:47:16:9f:44:
                    9d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:46:C5:E6:08:D5:96:51:1D:F4:28:C4:A6:E4:56:81:DD:C3:9D:90
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/79E1A08636EA11EC87FEDA7CD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.206.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:60:0c:68:84:70:d4:43:0d:2e:c8:cd:2e:14:15:07:a3:49:
         6a:c8:bc:c1:7a:4f:ee:5a:fd:e8:36:37:14:40:2d:62:0e:a9:
         e7:47:24:46:f4:c3:97:8b:fb:76:66:14:0d:75:6f:7d:2b:93:
         ad:0c:16:ad:b6:78:07:27:f9:83:e8:6b:30:f2:23:df:63:80:
         1f:7f:ad:76:3c:51:2b:01:df:2a:74:9e:91:56:cd:02:de:b5:
         6c:20:a2:22:5e:75:6a:98:82:b3:fd:71:f7:91:de:34:a0:c3:
         77:b7:34:94:ba:67:34:d0:04:eb:46:1b:cd:03:bc:fd:a4:8a:
         17:74:f5:e7:0c:df:66:7a:c0:39:f0:1d:c2:69:1c:c3:22:6e:
         47:0c:5b:d8:ca:65:50:4a:5b:e2:3c:68:ac:4c:52:1d:05:42:
         ba:65:8d:ae:dc:f9:8e:1b:00:4f:15:ff:40:da:54:e2:8c:87:
         27:52:c2:93:be:bc:13:6e:a2:cd:80:8f:31:ac:de:68:75:9b:
         11:1d:60:09:3b:01:4b:a8:e7:36:1c:34:6f:be:36:2e:f3:f4:
         ab:52:26:1e:5d:cd:4f:4c:72:16:42:0b:29:43:64:f4:e1:6c:
         16:9c:1b:c5:90:ad:60:86:10:86:8f:22:4d:84:ef:01:bf:21:
         4a:e5:60:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:22 2023 by rpki-client on console-fra.rpki-client.org