Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8D6DD42A2E6C11EC84843219D8A014CE.roa
File:                     8D6DD42A2E6C11EC84843219D8A014CE.roa (raw, json)
Hash identifier:          w0dMzAmEh5fRMxvX4WD15w7MsTV/ZSOqbuZvod2OFnk=
Subject key identifier:   FA:7A:56:0B:44:47:35:D6:E9:B6:69:D0:10:17:42:53:87:C6:77:8D
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0A26
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8D6DD42A2E6C11EC84843219D8A014CE.roa
Signing time:             Sat 16 Oct 2021 10:33:51 +0000
ROA not before:           Sat 16 Oct 2021 10:33:47 +0000
ROA not after:            Fri 16 Dec 2022 10:33:47 +0000
asID:                     141711
IP address blocks:        45.206.4.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2598 (0xa26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 16 10:33:47 2021 GMT
            Not After : Dec 16 10:33:47 2022 GMT
        Subject: CN=616aaa8f-0010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:92:e6:04:24:77:09:99:15:0c:db:e4:4b:e8:
                    ba:ee:53:a1:33:f8:3c:98:cc:87:d1:8d:d7:f4:7d:
                    fc:a5:15:49:8b:50:53:e4:be:48:f9:20:c8:85:d9:
                    90:d4:03:aa:69:f0:69:da:8d:5f:67:6a:0d:65:16:
                    80:c9:ad:54:1d:31:5e:e1:79:4b:1b:6b:54:31:3f:
                    48:44:59:eb:8f:67:0e:d5:21:b4:f8:76:1b:f3:ed:
                    2d:57:f9:94:12:e2:9a:2b:f7:be:37:0b:94:72:e3:
                    5a:b2:ef:bd:03:24:46:f8:44:69:ce:4f:44:77:e8:
                    d5:7d:51:21:e4:dc:8b:87:2a:28:af:3f:e2:11:0a:
                    63:a4:71:4a:fb:7c:d7:f6:cb:ee:ad:fd:34:28:01:
                    31:eb:df:9d:03:ef:8f:ab:b5:10:1b:28:5d:af:84:
                    7f:a7:b0:74:a1:cc:26:38:fe:9f:b3:65:ff:f4:d7:
                    f9:ed:24:6d:98:7d:2b:d4:cf:dc:3c:88:9d:e8:bc:
                    15:55:e0:0f:e0:21:2b:f0:b0:c2:cd:31:41:85:f5:
                    70:f8:57:21:2b:33:cf:ff:7b:76:15:03:14:fc:9b:
                    a6:68:8e:07:45:45:6e:bd:7a:b7:57:7f:95:d0:0a:
                    df:fc:47:48:69:24:8c:0d:2f:3a:46:9c:28:71:e5:
                    a0:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:7A:56:0B:44:47:35:D6:E9:B6:69:D0:10:17:42:53:87:C6:77:8D
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8D6DD42A2E6C11EC84843219D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.206.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:3b:28:02:53:cc:b2:ac:61:9d:d3:63:a9:8a:5a:2a:f8:36:
         13:c5:09:44:01:84:09:ce:2a:16:76:4b:00:4f:3e:03:af:69:
         13:33:c7:d2:41:d4:3e:85:00:6d:59:cc:29:8b:f9:73:93:81:
         34:2e:fb:c2:7a:c3:42:73:e0:00:1a:c4:3b:b9:b9:f6:62:28:
         07:24:95:1c:9f:21:65:fe:ae:a1:84:41:68:6d:dd:09:77:c0:
         0b:1f:e8:ad:22:d4:4a:6c:94:82:b1:34:19:1e:bc:e1:04:d0:
         e8:02:d9:3e:fa:c3:39:7d:8e:cf:60:93:0a:c5:86:d3:e7:af:
         62:53:2c:dc:bb:39:62:07:59:cd:c8:31:62:0f:5e:fd:91:6c:
         99:65:3e:49:53:0b:39:d0:f9:1c:76:ef:ee:86:90:dd:9e:d2:
         d2:0d:e5:47:16:79:76:43:9b:dd:9c:7f:42:1e:86:bc:90:c8:
         df:72:0e:2d:50:2f:36:31:23:ca:44:41:e2:2e:71:89:bd:e6:
         d6:4c:e3:32:8d:0d:7f:f4:c9:45:30:c1:7f:91:9b:5b:bc:47:
         d0:6a:62:08:5f:ae:e1:8a:52:f6:e9:99:79:1f:83:ce:5d:76:
         44:0e:cb:eb:8e:9a:b5:66:43:04:63:bb:5d:35:fe:9e:52:7e:
         9d:5d:35:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:24 2023 by rpki-client on console-fra.rpki-client.org