Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/91C10D0A487311ECA3103F17D8A014CE.roa
File:                     91C10D0A487311ECA3103F17D8A014CE.roa (raw, json)
Hash identifier:          BgmXgT3IfTDB/dvMSBx2VcdFIzjtorTV2LgKJ2Sr810=
Subject key identifier:   72:CA:02:D9:55:01:55:67:1B:EE:46:75:C1:92:DA:B8:8B:C4:E0:7A
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0CA6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/91C10D0A487311ECA3103F17D8A014CE.roa
Signing time:             Thu 18 Nov 2021 13:29:35 +0000
ROA not before:           Thu 18 Nov 2021 13:29:31 +0000
ROA not after:            Tue 27 Dec 2022 13:29:31 +0000
asID:                     56309
IP address blocks:        45.195.0.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3238 (0xca6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 18 13:29:31 2021 GMT
            Not After : Dec 27 13:29:31 2022 GMT
        Subject: CN=6196553e-31d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0a:70:6e:51:66:55:ec:79:9a:2b:74:05:e2:
                    24:20:05:4d:da:35:10:cc:01:f3:4f:09:d8:e7:99:
                    a4:49:c3:cc:f5:c7:ad:2f:95:d3:66:ae:8d:32:31:
                    15:11:fd:28:af:22:f5:9a:d5:2f:fe:52:64:78:da:
                    e5:7a:b2:09:33:59:48:42:c7:54:d2:21:62:ff:91:
                    d6:89:34:7c:88:25:ab:17:28:b3:29:06:f3:2e:64:
                    e7:c5:bc:3c:ae:f8:67:e0:e1:c8:19:69:8f:9a:03:
                    7b:7b:f5:13:66:8d:8e:36:ba:eb:4e:77:32:62:aa:
                    4e:70:9b:e9:18:f3:64:6d:37:ff:39:91:94:bf:96:
                    99:21:de:8d:1c:48:03:79:2c:15:25:d7:f7:2b:b7:
                    fb:9f:1d:3a:e4:56:51:de:d6:7c:dd:77:b5:80:d6:
                    0d:a6:42:19:4c:a7:87:7c:45:ff:c7:bc:cb:f5:1a:
                    a2:cd:d9:9f:89:16:6f:3a:c3:3e:02:fc:68:8d:bb:
                    2c:bc:08:57:bf:6e:88:5c:fa:cf:98:f3:1a:64:78:
                    03:10:7f:b3:06:06:dc:6a:c1:56:e4:bb:d2:37:64:
                    e3:99:0b:48:aa:ce:5c:29:b0:9a:bc:f3:9b:2c:f6:
                    0f:8e:d1:40:88:7d:3b:14:fe:45:ea:f5:80:af:13:
                    08:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:CA:02:D9:55:01:55:67:1B:EE:46:75:C1:92:DA:B8:8B:C4:E0:7A
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/91C10D0A487311ECA3103F17D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:7a:42:41:2a:f3:3c:ab:0b:ce:e0:7a:4a:ab:85:bc:d4:f2:
         10:0c:bb:35:3a:11:44:90:d7:37:59:16:f5:b5:48:d1:11:b3:
         4d:83:ad:7c:ed:ba:49:e7:7c:d5:e3:dd:5a:73:44:9c:66:23:
         26:2f:ed:df:29:b2:05:ae:7d:97:4c:a1:c4:3e:7a:58:2a:e5:
         67:b0:2e:c1:b2:ac:1d:15:f5:da:73:aa:98:cc:ff:53:9e:e4:
         0a:64:11:e5:20:4d:a9:44:25:7e:e5:09:92:3f:af:b6:7d:62:
         94:39:6d:63:65:f2:f3:da:56:4e:d8:e1:85:21:5e:b5:9b:d4:
         4a:c0:e3:21:b2:6b:f6:85:d8:fe:18:bc:5f:1a:9f:72:8c:a5:
         f9:1e:bb:ae:4b:ca:ea:aa:ee:52:e6:f2:b2:43:8c:a4:b1:70:
         df:e4:20:fc:7c:09:c0:6c:a3:e3:9f:cb:7e:93:1c:2c:f3:2c:
         c3:e9:4a:4f:ea:29:d8:ff:d5:84:5f:fe:10:3b:0a:2f:c8:a4:
         25:02:54:eb:66:60:59:85:f7:b4:eb:18:81:83:95:84:f8:3e:
         38:df:51:e6:eb:ab:48:41:81:5b:03:e5:7f:fa:01:15:4f:ac:
         92:25:37:07:7a:e4:86:67:5a:dc:ef:93:1d:79:34:15:9f:72:
         7f:80:40:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:22 2023 by rpki-client on console-ams.rpki-client.org