Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8FED12BE3E2A11ED8F5189F6F1222468.roa
File:                     8FED12BE3E2A11ED8F5189F6F1222468.roa (raw, json)
Hash identifier:          MoGcrepu+ED+LOXFsAphvJk2lNrx+9+S3uaiDJb0RD0=
Subject key identifier:   C0:F7:CD:26:27:84:AD:59:76:0D:37:99:B0:80:43:33:02:2D:BA:53
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       187D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8FED12BE3E2A11ED8F5189F6F1222468.roa
Signing time:             Tue 27 Sep 2022 06:06:44 +0000
ROA not before:           Tue 27 Sep 2022 06:06:41 +0000
ROA not after:            Sun 15 Jan 2023 06:06:41 +0000
asID:                     1239
IP address blocks:        45.197.160.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6269 (0x187d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 27 06:06:41 2022 GMT
            Not After : Jan 15 06:06:41 2023 GMT
        Subject: CN=633292f4-ac26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b0:8f:69:2b:94:bf:32:90:91:ba:bf:df:38:
                    76:34:9e:dd:14:ef:4f:f1:1a:0f:16:20:93:0b:a2:
                    ee:24:0d:98:0a:ca:61:93:05:90:b9:be:34:8e:9f:
                    c5:4a:03:66:ac:23:78:a8:9e:49:c1:7e:d3:51:48:
                    c5:e2:d0:0b:23:e7:56:5e:6e:cd:c4:8e:28:93:b9:
                    61:69:cc:8c:03:0c:23:21:a1:35:58:70:0d:64:21:
                    1b:d0:90:63:75:c9:6e:59:0e:8e:8e:eb:69:1f:9b:
                    f1:87:a3:19:be:26:f2:25:b0:0e:48:8d:5e:6b:8b:
                    a4:fb:ea:c6:3f:7c:a6:db:98:df:64:76:13:5b:75:
                    1f:50:91:98:a8:f3:83:98:aa:4c:62:bc:91:c0:86:
                    c5:25:f2:4e:5b:02:bb:c5:44:22:37:af:0f:9d:ad:
                    5f:89:16:9e:1d:85:85:78:d7:f5:b5:85:cf:74:ab:
                    ce:49:cb:8f:4e:8a:8c:ad:86:6b:5c:2a:e5:7f:49:
                    2e:f1:ed:38:57:b2:08:70:36:12:d9:4b:d4:e9:57:
                    a8:49:29:b5:a1:17:5f:56:65:58:8c:33:b1:1f:42:
                    1d:e0:da:97:25:3e:c8:b3:0a:ad:02:25:7a:7f:bb:
                    e0:b6:6f:b1:dc:e7:b6:39:9b:69:66:45:fb:08:b4:
                    2c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:F7:CD:26:27:84:AD:59:76:0D:37:99:B0:80:43:33:02:2D:BA:53
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8FED12BE3E2A11ED8F5189F6F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.197.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8f:3e:e2:d8:e4:86:9b:31:e0:66:18:11:84:24:1c:bd:c6:ac:
         6c:5e:96:78:b4:38:90:91:c6:9c:e7:c8:77:9d:75:f6:7e:d3:
         8f:04:ab:99:22:ff:ec:b0:d9:c7:6d:db:46:d1:0e:57:a0:88:
         4f:14:b7:32:27:4c:2e:6b:6f:03:bc:91:86:46:38:c7:a4:52:
         30:55:e7:c8:6e:4f:4c:4e:26:a9:ae:82:40:6e:7b:4a:ca:38:
         68:ec:3a:ec:64:70:06:06:7c:71:d4:8b:93:30:28:d5:15:56:
         3d:7c:3d:43:15:b2:18:86:af:7c:4d:77:d4:0b:75:4a:17:26:
         de:ba:d8:9a:14:d3:18:85:68:bd:56:05:dd:30:6a:68:19:98:
         24:77:73:5a:10:bb:37:85:86:36:61:5d:5e:19:6a:3f:8c:35:
         25:2e:d3:e7:3f:81:ba:ad:dd:8d:12:17:08:ac:90:6b:a0:42:
         e6:f6:43:c6:6f:fb:cd:fc:a8:f3:de:0c:8d:23:cd:a0:96:aa:
         c1:0f:90:2d:8a:c2:08:5c:c6:b5:d7:1b:1b:87:9f:4f:f3:ae:
         64:68:ec:74:5d:7d:48:48:f7:aa:16:bc:79:b9:dd:d5:b6:71:
         72:3c:07:98:08:ab:c1:66:ad:8a:e2:cc:38:da:16:a0:36:37:
         56:b5:3c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:24 2023 by rpki-client on console-fra.rpki-client.org