Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/87847C1636DD11ECB6D88C67D8A014CE.roa
File:                     87847C1636DD11ECB6D88C67D8A014CE.roa (raw, json)
Hash identifier:          Vk7WSRPTazVp7em0NXcGluC/FNhVHjg4ScYWpuVwGts=
Subject key identifier:   CD:90:FD:D1:1C:1E:4E:AF:BC:6B:D0:16:26:43:21:02:5E:38:C4:EF
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0B1C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/87847C1636DD11ECB6D88C67D8A014CE.roa
Signing time:             Wed 27 Oct 2021 04:22:43 +0000
ROA not before:           Wed 27 Oct 2021 04:22:40 +0000
ROA not after:            Thu 27 Oct 2022 04:22:40 +0000
asID:                     58895
IP address blocks:        45.206.84.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2844 (0xb1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 27 04:22:40 2021 GMT
            Not After : Oct 27 04:22:40 2022 GMT
        Subject: CN=6178d413-d1b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:57:41:82:ee:13:bb:eb:be:e5:4c:e1:da:c6:
                    d6:e3:f8:54:b4:9a:e3:fe:97:0e:db:35:d2:81:b9:
                    55:1e:82:8c:12:0b:74:0a:f8:72:4c:e5:ed:91:ad:
                    61:a7:f0:dc:0a:9e:87:77:6d:f5:8b:c4:96:35:a5:
                    db:44:79:e3:08:18:c1:3f:06:62:ae:e6:33:53:ef:
                    ea:3f:0a:81:57:ca:91:94:6b:8b:5a:e0:2c:9f:b1:
                    74:b0:c0:61:77:59:24:c1:1e:91:5a:5d:1f:df:f1:
                    ee:cc:f4:c3:6c:34:47:30:8f:6e:9c:a2:49:01:b2:
                    d8:bf:d4:d2:55:1d:16:f4:bf:a5:1e:d4:a9:a0:ca:
                    fc:0f:54:f4:1d:bc:3a:9e:97:23:c0:9a:f7:5b:4f:
                    74:03:16:a5:29:1c:83:1e:47:40:a0:05:5a:ab:ba:
                    b9:b1:2d:c2:97:bd:6e:d4:5f:ae:62:91:2e:8b:f8:
                    2b:52:e3:c9:ad:ee:55:c4:c9:7a:5f:17:f2:ae:c2:
                    9f:ae:6f:15:51:ec:5c:0a:27:04:c6:5f:99:31:d5:
                    24:2e:24:83:1a:cc:39:55:b3:1f:29:59:cd:cb:95:
                    c0:5c:89:9b:ae:86:41:ac:92:52:12:7f:62:fe:ff:
                    91:ff:0b:b6:9f:43:77:6e:6b:99:bc:b7:c9:3f:58:
                    fd:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:90:FD:D1:1C:1E:4E:AF:BC:6B:D0:16:26:43:21:02:5E:38:C4:EF
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/87847C1636DD11ECB6D88C67D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.206.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:a2:37:7a:cd:ff:26:0c:f7:95:a3:46:a5:92:44:b1:80:95:
         31:c5:17:32:e5:51:fd:cd:8c:08:35:fb:e5:e2:fd:2d:97:56:
         fb:52:b9:b9:5a:24:dc:b0:87:32:00:b6:0f:d6:0a:c9:fd:29:
         4b:4c:42:15:80:6e:70:be:3f:73:40:bf:ea:4a:57:fb:33:b8:
         0a:c8:00:9c:2b:24:81:a9:cd:27:3a:e1:8d:dd:8f:f9:2f:c9:
         44:55:28:9a:68:46:86:c3:14:1a:2e:bd:81:90:20:56:59:35:
         37:5f:9e:2b:f5:a7:15:a7:aa:c4:82:37:7c:cd:f6:a7:5f:ae:
         2f:2d:ac:a2:bd:84:91:33:d0:da:30:e6:71:d7:4a:ec:df:da:
         83:30:15:46:db:a8:85:69:ce:f0:d9:d3:9a:ea:1e:f6:3c:ce:
         9f:78:20:e4:bf:6a:a4:f3:5a:51:d2:8b:65:8e:50:5c:09:da:
         3d:4e:b9:5e:6a:81:7a:2f:d5:f0:03:c5:8d:86:a8:45:ad:1c:
         69:ec:3e:cd:8b:ce:02:cf:69:1f:e2:34:22:71:ee:0e:63:e0:
         4d:9c:9c:de:9f:76:29:bc:0d:7d:27:5a:a3:4a:c1:d3:87:2c:
         97:52:12:46:f9:f1:5c:62:cb:c6:0a:6c:8b:63:f1:7e:50:47:
         79:ae:ab:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:23 2023 by rpki-client on console-fra.rpki-client.org