Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/92DDA25AC39E11ED941BB2A8F1222468.roa
File:                     92DDA25AC39E11ED941BB2A8F1222468.roa (raw, json)
Hash identifier:          0Ngfho8yvoChW0F0yKXi50EOnSV2J0uCKT7/XWz5rQY=
Subject key identifier:   3A:42:54:D7:BA:96:6D:9B:A8:BB:EF:D5:A3:57:6E:E9:70:94:D9:5C
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       1D46
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/92DDA25AC39E11ED941BB2A8F1222468.roa
Signing time:             Thu 16 Mar 2023 02:02:16 +0000
ROA not before:           Thu 16 Mar 2023 02:02:10 +0000
ROA not after:            Sat 26 Aug 2023 02:02:10 +0000
asID:                     140883
IP address blocks:        45.195.150.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7494 (0x1d46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Mar 16 02:02:10 2023 GMT
            Not After : Aug 26 02:02:10 2023 GMT
        Subject: CN=641278a7-63b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:54:28:c4:3f:93:5d:9e:92:19:e8:50:35:80:
                    d3:88:cf:9d:e0:96:e9:23:ce:86:57:a8:2d:68:8b:
                    f4:2e:d0:fd:bc:2a:86:70:e1:f1:33:7d:bf:4b:65:
                    54:d0:a6:f6:75:9b:10:3d:53:3a:3e:05:15:c2:62:
                    02:18:59:83:cc:f2:c0:7d:01:a0:3b:5f:99:c1:f6:
                    dc:21:5a:7f:07:5a:91:91:e6:87:3a:8b:25:0c:00:
                    8c:17:39:f9:7d:96:7d:8f:9f:2e:c1:c0:6e:06:57:
                    1b:61:6e:23:89:94:d8:c3:46:06:85:9c:14:e5:f3:
                    6e:fa:7f:f1:d6:fa:06:04:03:f2:56:5a:05:61:d7:
                    ce:a8:c8:02:0a:b9:ed:ce:e1:e5:d5:fd:aa:ef:2f:
                    ed:fb:4f:f6:11:46:4c:06:b8:52:6c:1b:d7:2a:41:
                    cf:c6:79:33:aa:1b:dd:f1:9a:ff:5c:5a:6f:d8:35:
                    fd:89:8f:55:37:54:81:6f:cd:1a:8c:5f:33:4d:e4:
                    34:b2:52:ac:fb:b0:75:a1:84:44:65:b5:f3:4c:80:
                    0b:86:bd:96:40:69:0d:40:cf:f1:48:2c:92:05:6c:
                    40:d4:8b:58:09:ed:30:d2:25:08:41:a6:0d:ec:01:
                    19:3a:e3:ec:02:27:32:4e:0f:42:67:26:17:ef:d2:
                    51:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:42:54:D7:BA:96:6D:9B:A8:BB:EF:D5:A3:57:6E:E9:70:94:D9:5C
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/92DDA25AC39E11ED941BB2A8F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:dc:b0:ef:26:a5:5f:3a:7f:9d:88:a7:76:04:6b:66:b0:61:
         9c:14:0f:e1:07:f7:c7:4d:64:90:93:60:5a:82:66:bf:e2:94:
         dc:7d:65:91:80:44:6b:4d:40:16:dc:88:1d:9d:9a:55:ea:92:
         59:30:0e:40:dd:3b:0e:62:71:33:56:10:ce:95:cd:ad:d1:0d:
         1d:7d:46:5e:6b:99:4a:ac:e7:92:89:fa:33:80:a7:fe:41:74:
         ae:28:ba:cb:91:fc:bb:a0:98:54:9b:5d:0d:27:7a:f8:15:18:
         84:06:79:f7:62:79:f4:83:a6:58:6c:92:be:5f:fc:0b:b7:39:
         6d:05:d0:63:8b:04:ff:d0:e9:93:06:a4:60:01:56:c0:00:e1:
         15:35:aa:f0:ff:20:8e:69:48:05:a8:f7:c7:4a:88:4d:db:9f:
         db:f4:27:f4:a8:52:6c:8a:27:80:07:b5:b3:de:11:16:26:e2:
         36:bc:1f:1a:86:7c:4f:58:72:b9:74:2a:97:98:d7:01:aa:24:
         93:3f:bd:ea:3c:7f:40:36:e4:53:d5:32:75:38:32:a5:83:78:
         79:a6:a7:90:85:59:6c:f4:ee:f0:41:67:e8:4c:c5:19:8e:e8:
         32:e8:b5:fb:39:54:5e:c6:c5:35:f5:48:91:7a:33:d8:81:c0:
         de:ca:2a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 26 08:11:39 2023 by rpki-client on console-fra.rpki-client.org