Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/85D9568451C211EC9D97CF63D8A014CE.roa
File:                     85D9568451C211EC9D97CF63D8A014CE.roa (raw, json)
Hash identifier:          byS3Whzyljo7/VqtJG1Z77B2QtFrrkMZ62/fThVmbsU=
Subject key identifier:   02:F8:BA:3E:8F:34:4F:01:F7:55:3B:C0:01:10:C0:4D:B9:9E:2B:E0
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0FD8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/85D9568451C211EC9D97CF63D8A014CE.roa
Signing time:             Tue 30 Nov 2021 09:47:26 +0000
ROA not before:           Tue 30 Nov 2021 09:47:21 +0000
ROA not after:            Fri 30 Dec 2022 09:47:21 +0000
asID:                     9009
IP address blocks:        45.192.158.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4056 (0xfd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 30 09:47:21 2021 GMT
            Not After : Dec 30 09:47:21 2022 GMT
        Subject: CN=61a5f32d-05ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:48:bd:a7:98:48:3e:c4:5e:9a:85:8d:17:09:
                    b6:0c:49:51:15:8a:a3:07:94:56:a7:71:bb:db:2f:
                    2b:ee:41:15:ca:8b:6d:56:e4:8e:07:00:ea:2c:62:
                    6f:00:dc:f3:76:30:95:ed:55:ea:07:bb:da:8e:25:
                    01:08:7b:64:2c:cd:f5:fd:e7:af:2d:f8:f0:8f:48:
                    00:b1:9a:55:11:b3:98:d8:3d:bb:bd:87:25:33:43:
                    0b:ff:ce:1f:df:43:84:08:10:a5:96:4c:9b:02:bd:
                    94:6c:fa:53:3a:ac:a1:60:02:a6:53:3e:88:f9:07:
                    9b:1c:80:83:96:e8:0a:2a:77:4f:03:f7:0a:01:1d:
                    e4:36:d7:44:8b:49:c2:4d:b7:8c:bf:d8:45:94:ea:
                    d1:99:ef:7b:fe:ec:02:db:bd:28:76:5a:90:a6:a1:
                    a3:cd:9f:81:d2:e6:c0:7d:b4:4d:3c:04:bf:59:76:
                    5b:91:60:a5:04:6d:a0:b4:ac:13:3b:27:68:22:2c:
                    09:fb:3d:a1:53:2e:26:59:55:f9:22:bb:1b:e4:06:
                    31:7d:ce:7b:2d:29:a1:88:2d:d9:aa:b1:5a:9f:eb:
                    b0:87:d4:c6:8d:0d:e1:c4:97:4e:fc:c9:c8:d0:9f:
                    1c:be:d6:8d:8a:40:2c:cc:67:4a:cd:eb:83:5f:07:
                    a7:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:F8:BA:3E:8F:34:4F:01:F7:55:3B:C0:01:10:C0:4D:B9:9E:2B:E0
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/85D9568451C211EC9D97CF63D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:89:82:55:aa:b3:90:e4:60:39:3d:3b:9d:22:67:06:14:3f:
         7d:70:12:a0:ce:62:d6:ac:5b:13:ac:cb:c4:0b:27:11:7b:43:
         64:86:e1:a0:f9:b1:3b:74:3b:e6:bb:4d:aa:37:1c:fc:40:f1:
         94:b4:30:5c:ec:99:14:69:e6:6e:8b:9d:06:5b:7b:dc:c3:b1:
         36:ae:a2:98:35:bb:81:b5:41:2b:95:63:a1:24:ce:99:55:55:
         8f:a9:f6:97:71:65:91:c4:d5:8a:04:38:a6:d5:61:d1:c3:55:
         ef:7b:3c:4f:1f:d5:dd:98:90:2e:80:2e:3a:dc:1a:dc:00:79:
         45:2f:44:89:6d:7c:80:91:a9:5c:98:1e:07:85:ab:86:26:1b:
         79:e1:93:4a:70:bb:9e:16:d5:28:86:9b:2a:09:73:ea:09:34:
         bb:aa:47:b1:33:9e:df:4c:43:06:20:85:ca:8b:9e:98:8e:18:
         8d:63:40:76:a2:08:21:23:da:23:4b:55:ec:ce:6e:c3:bc:8e:
         5d:e1:69:c0:da:e5:69:db:c2:bf:7c:d3:80:76:c0:05:1c:1a:
         c5:21:d4:95:cf:7f:e5:39:c7:ec:15:52:1c:fa:54:d4:8e:8d:
         53:e2:72:7e:80:d2:47:ff:8b:fd:1d:53:13:9e:a9:21:e9:ec:
         e6:b2:2a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:23 2023 by rpki-client on console-fra.rpki-client.org