Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8878D5C8FB5411EB995E1D56D8A014CE.roa
File:                     8878D5C8FB5411EB995E1D56D8A014CE.roa (raw, json)
Hash identifier:          5qkkUavVpys96WuSd1b4wltNxD1TpT6DvTQ8yrBNcZc=
Subject key identifier:   48:5D:5A:4C:D9:6B:F3:E2:9D:AC:65:F7:95:9E:F6:F8:18:15:DE:13
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0894
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8878D5C8FB5411EB995E1D56D8A014CE.roa
Signing time:             Thu 12 Aug 2021 10:04:07 +0000
ROA not before:           Thu 12 Aug 2021 10:03:53 +0000
ROA not after:            Fri 12 Aug 2022 10:03:53 +0000
asID:                     35916
IP address blocks:        45.195.1.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2196 (0x894)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 12 10:03:53 2021 GMT
            Not After : Aug 12 10:03:53 2022 GMT
        Subject: CN=6114f217-bc0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c4:2b:34:76:01:d8:55:3a:4e:85:06:a4:07:
                    01:39:2f:71:58:01:25:4e:83:27:72:ab:47:cd:ca:
                    30:4a:20:15:7e:21:b8:fb:7b:59:e7:4d:7b:50:55:
                    7e:16:d4:bd:97:c5:a0:39:a5:da:6e:8e:2c:3b:2c:
                    c9:cd:f9:13:b2:b6:97:3f:ca:19:c6:64:13:69:56:
                    4c:cf:18:20:67:44:55:24:4f:78:81:10:a9:55:54:
                    38:d5:b1:81:87:36:55:a3:38:bd:89:46:ae:ab:82:
                    70:2e:c3:0a:dd:c1:b7:0d:1e:93:9d:7c:df:f6:e9:
                    c3:c3:1a:8d:ff:63:1d:c5:d1:4c:a0:1e:8a:70:a5:
                    e9:f0:61:02:e5:6a:11:6b:09:7e:a1:1c:3f:e1:8a:
                    ac:1b:fb:8e:b1:62:2c:3a:ce:f8:61:90:09:10:ab:
                    2e:d5:33:36:75:a9:3f:51:87:99:a5:f9:bc:03:af:
                    02:13:38:36:44:c2:69:b1:83:20:5f:e7:6c:95:28:
                    21:a5:c6:4f:ea:b1:20:ef:3e:2e:bf:6d:2d:bd:d2:
                    f4:b1:79:5f:a1:5b:4e:54:df:70:ed:38:e2:ee:4a:
                    98:29:2b:cb:cb:bc:be:e6:7e:18:de:81:7c:ef:44:
                    7e:e9:15:3a:c7:e7:04:07:cb:9a:57:76:66:8d:6c:
                    b3:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:5D:5A:4C:D9:6B:F3:E2:9D:AC:65:F7:95:9E:F6:F8:18:15:DE:13
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8878D5C8FB5411EB995E1D56D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:20:f7:c6:c1:35:42:7e:e2:ea:17:c7:17:68:42:20:6d:56:
         90:23:90:a7:58:9c:1d:7e:71:8c:e3:c7:62:6b:cd:c6:10:b9:
         0f:0d:1f:ee:91:7c:7b:26:5b:97:f7:39:2f:06:80:37:80:56:
         56:c0:fb:ca:7d:71:71:3f:cd:b2:b9:fa:c0:53:37:89:aa:b0:
         6c:2b:8a:26:d1:75:a8:c4:b4:40:58:6f:07:87:0f:7c:72:28:
         58:1d:7a:da:e7:c1:15:73:6f:7a:af:1b:18:79:f7:9b:83:34:
         20:d0:ce:b1:bb:c4:df:0d:6e:83:e8:66:e5:b4:1d:4a:65:da:
         f5:4f:af:cc:8e:ff:70:94:16:9b:c2:de:fd:80:3c:6c:00:66:
         33:64:99:32:0e:4d:53:36:ea:2b:b8:ea:33:e8:23:0a:f8:2a:
         20:94:2d:7f:59:28:75:6e:7e:d7:a5:de:48:e2:cc:5e:39:c2:
         56:a1:dc:9f:51:21:c6:a3:e7:75:2a:fd:c7:a0:f1:64:56:df:
         f2:de:cf:60:d0:82:f5:51:f7:c2:94:1f:d9:60:6e:bc:f3:ae:
         a9:9b:25:fd:19:b5:2b:d0:3b:ef:44:fe:8b:14:d5:14:3e:a6:
         11:0e:a3:53:2b:bf:43:3c:b8:2c:19:c5:b5:59:50:a8:be:c5:
         5c:5b:bd:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:21 2023 by rpki-client on console-ams.rpki-client.org