Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/985276AEC1EA11EC983928F2F1222468.roa
File:                     985276AEC1EA11EC983928F2F1222468.roa (raw, json)
Hash identifier:          ia782pseWMdnwE1FTBbW6SO89vby+IvVT21eK6Dp4jw=
Subject key identifier:   92:6F:C8:07:04:AA:6E:FD:BD:C6:5C:1F:1D:C4:DF:56:AE:54:51:EF
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       1336
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/985276AEC1EA11EC983928F2F1222468.roa
Signing time:             Fri 22 Apr 2022 03:16:26 +0000
ROA not before:           Fri 22 Apr 2022 03:16:23 +0000
ROA not after:            Fri 30 Dec 2022 03:16:23 +0000
asID:                     328608
IP address blocks:        45.207.31.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4918 (0x1336)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Apr 22 03:16:23 2022 GMT
            Not After : Dec 30 03:16:23 2022 GMT
        Subject: CN=62621e0a-5b05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c3:c0:3b:1f:b8:95:35:cf:41:ab:06:01:0a:
                    5d:ed:7d:29:37:d3:56:59:88:9a:62:c4:04:78:49:
                    91:de:1c:d8:a7:a6:a8:e7:a1:9e:e6:97:bc:74:02:
                    ee:70:d4:56:2c:cc:39:17:68:0a:53:7c:ad:c1:ba:
                    55:1f:69:cd:eb:30:0d:25:df:6f:0c:23:c7:c0:16:
                    41:fe:e2:2b:94:55:4d:19:5a:78:0e:32:86:ef:5a:
                    97:5d:e1:2f:75:0e:37:d5:16:b3:98:93:79:5e:ec:
                    84:32:7d:4c:14:95:7c:03:1d:8f:88:e8:9f:98:80:
                    a5:0c:84:c8:e4:84:1b:ef:bd:4b:e4:c9:3f:7c:47:
                    32:3a:75:73:b5:3a:db:e4:a0:3c:fa:a4:35:15:22:
                    24:2a:a1:6f:51:26:c1:60:c5:61:71:72:da:5b:9c:
                    44:75:60:db:56:e2:b4:f5:62:2a:a3:e2:f5:67:63:
                    84:82:94:29:bc:40:a3:18:92:3c:4e:81:39:6d:6a:
                    fc:28:9a:4e:9e:99:fa:26:d8:84:3a:2d:58:45:7d:
                    4c:f8:9a:65:3a:f7:b9:4c:c6:23:a6:e1:9c:95:b2:
                    c2:fc:48:cb:a0:af:cc:fc:c0:07:48:be:5a:d5:1d:
                    03:2f:a3:c7:ec:a9:33:f6:ad:a1:6a:33:cd:18:ac:
                    63:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:6F:C8:07:04:AA:6E:FD:BD:C6:5C:1F:1D:C4:DF:56:AE:54:51:EF
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/985276AEC1EA11EC983928F2F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.207.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:3c:21:39:a2:a7:06:3e:33:f9:24:f5:11:4f:89:7a:85:a8:
         cc:11:d5:0b:3a:c5:06:fa:7c:b8:68:04:e1:30:dd:51:79:0a:
         07:11:eb:79:ed:c2:f4:9c:70:3c:97:f2:f9:3e:25:11:3d:c0:
         76:4d:d4:37:ec:eb:ca:e2:f0:a6:dc:d1:11:0a:e4:ae:0c:eb:
         8f:2a:7a:41:88:a7:43:45:7f:be:5d:28:88:12:24:08:73:fe:
         f3:0f:58:0a:ea:dc:d7:29:c5:25:e4:23:2a:4e:86:15:7d:51:
         ec:c7:85:10:ad:f7:12:94:e5:02:53:85:ae:77:7c:43:54:d9:
         b7:07:0e:d7:54:f4:05:11:6b:5c:5a:8e:e1:9a:da:12:3f:7b:
         39:fc:b8:a2:fb:03:10:be:67:0a:b3:2f:1c:65:f2:1b:f8:bf:
         ba:06:76:93:75:cc:01:44:56:f2:4c:cf:f1:5c:23:66:8c:2c:
         c2:75:a1:16:81:c3:1b:01:28:d8:e8:fc:97:b3:bc:67:68:ce:
         9d:5e:40:a4:be:09:4d:38:96:41:e5:54:2e:8a:d5:55:7c:90:
         d5:b6:3d:f4:bb:ea:88:b2:28:2e:6a:a9:de:65:83:81:3c:82:
         77:02:0f:32:cf:17:0e:f9:da:81:74:be:e5:e0:52:8f:7d:d6:
         ce:dc:85:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:24 2023 by rpki-client on console-fra.rpki-client.org