Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8EA0AF04BA5111ECBEB4A4945A40D577.roa
File:                     8EA0AF04BA5111ECBEB4A4945A40D577.roa (raw, json)
Hash identifier:          8Awbwk/GD0qYVFbz2TZsiSsKJD54SzYGxJ1t2qci/Mw=
Subject key identifier:   EB:6E:4A:17:3C:91:89:47:B1:B2:F1:AF:19:13:C8:F5:19:03:74:81
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       1308
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8EA0AF04BA5111ECBEB4A4945A40D577.roa
Signing time:             Tue 12 Apr 2022 11:13:19 +0000
ROA not before:           Tue 12 Apr 2022 11:13:15 +0000
ROA not after:            Wed 31 May 2023 11:13:15 +0000
asID:                     132513
IP address blocks:        45.200.151.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4872 (0x1308)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Apr 12 11:13:15 2022 GMT
            Not After : May 31 11:13:15 2023 GMT
        Subject: CN=62555ecf-fedf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:db:c6:24:26:0a:05:07:94:75:93:67:95:08:
                    60:a4:3d:49:06:6a:4a:c8:46:d1:b6:78:eb:71:32:
                    74:33:d2:f0:5b:d1:a2:5e:c3:6c:76:ff:64:ca:68:
                    a1:2a:16:cd:e0:df:e1:99:13:bb:16:d0:e3:e8:4e:
                    5d:de:ea:3e:bb:a4:31:05:b8:94:15:08:fc:c6:68:
                    0b:47:8b:b4:c4:42:a0:4d:31:34:6c:96:77:a9:47:
                    9d:f8:7e:f8:1c:55:4f:e4:65:2d:39:84:8a:36:63:
                    d2:57:bc:e5:34:79:ac:6b:36:4b:f4:ff:6e:a5:dc:
                    c7:a3:7b:75:0f:e8:a4:0a:4c:48:d3:0e:7d:07:8f:
                    17:82:ae:a9:2f:bd:26:18:09:3d:a6:ab:a1:81:36:
                    95:47:c6:b0:ea:8b:ac:ba:42:60:c7:ee:80:d2:48:
                    c8:1b:87:41:61:07:4c:4c:a1:8d:f3:b6:03:a6:33:
                    05:dd:73:20:92:04:39:65:1a:17:a3:7c:bd:46:e6:
                    b3:7f:d8:c1:23:8b:d7:39:7e:cc:80:1e:4b:b3:c8:
                    d7:df:9a:35:a5:a6:85:aa:0f:66:9b:bf:58:a4:93:
                    41:01:28:27:ee:c7:d4:4f:bb:a6:f5:2f:53:b0:d5:
                    a6:ad:31:a3:12:c3:f5:37:60:66:0f:cd:da:06:0d:
                    0e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:6E:4A:17:3C:91:89:47:B1:B2:F1:AF:19:13:C8:F5:19:03:74:81
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8EA0AF04BA5111ECBEB4A4945A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.200.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:c7:7a:88:44:6b:f6:d0:c7:de:ee:6d:05:c7:97:a5:e9:e3:
         19:38:5b:c8:2e:17:da:58:4c:be:47:17:b6:9e:be:3c:f9:11:
         12:39:3b:8c:cf:8f:8b:fd:51:5f:2c:04:b0:73:ae:9e:ed:1c:
         dc:cb:e2:97:c4:ec:3e:d8:0d:d2:ff:60:b3:a4:1a:63:80:14:
         52:78:d9:10:8e:50:04:27:48:f2:f6:3e:ab:a2:d7:f5:38:40:
         1c:3b:77:88:0a:c9:3d:15:dc:5e:63:ef:70:7a:c3:03:15:f4:
         39:a7:9d:9d:3a:7b:32:5c:61:26:ef:8c:de:a1:01:d5:55:0c:
         21:72:b5:78:f3:72:a8:46:a6:e2:ca:1f:e9:2e:d1:31:57:3c:
         89:04:02:d8:df:d2:5f:54:67:72:39:33:6b:cf:00:58:01:1b:
         a2:72:8d:8a:60:1c:3d:8f:c5:38:70:98:f5:3f:20:5b:fb:0f:
         eb:1c:12:bf:28:ef:c5:67:26:64:4c:ed:44:1f:65:8e:97:a3:
         0c:5a:3d:aa:7f:b1:f6:75:b0:1c:1e:56:84:6f:24:82:99:b4:
         c7:a9:f8:fd:66:57:b3:cb:e7:cb:94:19:17:32:51:da:d4:8e:
         93:ad:fb:3c:d1:66:71:ac:bd:03:15:7b:64:cd:62:11:43:2a:
         7a:d7:7a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:24 2023 by rpki-client on console-fra.rpki-client.org