Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/98FBACA0244711EDB18BE5F8F1222468.roa
File:                     98FBACA0244711EDB18BE5F8F1222468.roa (raw, json)
Hash identifier:          GvxgpxO2uTOqXuB79uV/xvsyfSgOad4f43w9dGGNP+Q=
Subject key identifier:   73:06:E9:41:5F:75:93:67:CA:0D:45:F3:8A:86:FF:59:90:A9:86:06
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       16EE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/98FBACA0244711EDB18BE5F8F1222468.roa
Signing time:             Thu 25 Aug 2022 07:29:05 +0000
ROA not before:           Thu 25 Aug 2022 07:29:01 +0000
ROA not after:            Sat 31 Dec 2022 07:29:01 +0000
asID:                     133201
IP address blocks:        45.207.64.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5870 (0x16ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 25 07:29:01 2022 GMT
            Not After : Dec 31 07:29:01 2022 GMT
        Subject: CN=630724c1-d416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0c:7c:fc:fe:43:a0:f0:25:af:4c:01:9b:d4:
                    55:34:e3:6d:21:0f:ee:4e:7a:b5:20:72:aa:e5:cc:
                    c6:a1:72:23:3e:dc:72:62:09:a1:97:02:b0:a9:b7:
                    96:ac:57:2d:ed:99:e7:9d:b9:90:59:a5:89:a0:a8:
                    c5:00:f0:0d:41:24:f0:4b:73:d5:47:2b:e5:e2:80:
                    19:92:66:e3:9d:d5:e1:f1:9d:ec:99:dc:d6:00:30:
                    9d:78:54:ba:ed:63:96:a0:c0:7a:07:22:58:0e:05:
                    95:87:14:b5:e6:4e:39:3d:b7:72:11:ba:21:4f:98:
                    e8:ff:8d:b6:85:cb:95:67:c7:9a:5e:a4:c4:eb:de:
                    99:54:00:c6:63:d1:1e:d5:fd:ce:34:a6:f3:ca:cd:
                    2b:03:3e:36:3f:65:d4:19:2c:c6:32:41:ec:80:e6:
                    c7:fd:06:70:45:b7:3e:c0:d1:7e:17:40:7d:b6:b4:
                    6d:dd:66:5a:9b:7d:6a:ff:81:af:ee:1d:6d:5c:8c:
                    14:d0:fa:6b:80:ca:4e:eb:66:9d:21:e2:d3:d6:50:
                    51:d5:bb:d7:d0:cb:47:cf:74:09:1d:76:28:95:10:
                    d1:99:00:66:4c:aa:66:40:28:45:1c:2e:cc:41:92:
                    c6:52:00:a4:2a:0a:db:f4:a3:17:53:68:87:5e:f6:
                    b5:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:06:E9:41:5F:75:93:67:CA:0D:45:F3:8A:86:FF:59:90:A9:86:06
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/98FBACA0244711EDB18BE5F8F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.207.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         4f:ac:93:da:30:98:67:58:92:48:be:46:50:ad:19:64:5c:fe:
         42:c7:c4:61:53:2f:af:af:49:f6:bc:73:7d:1a:30:77:3a:b3:
         82:57:9b:8e:af:c2:ed:ed:d0:21:d9:82:4c:fd:14:d1:2f:4e:
         27:79:65:b5:d6:23:96:f9:c7:34:ee:b1:02:a9:9f:0e:21:ec:
         60:90:96:ab:2a:72:25:26:40:8d:94:66:3f:5a:ec:b6:64:1c:
         08:49:3a:de:74:dd:60:b9:23:ff:73:3a:d9:7d:d9:18:9b:f7:
         d8:3d:4c:ee:82:59:08:df:da:f2:d3:1a:c8:9d:4a:37:85:31:
         f4:1f:7a:7f:ef:93:1b:11:9d:a5:cf:15:09:f3:6f:94:6e:64:
         9b:5a:62:15:59:6a:c9:68:0f:26:89:3a:77:95:7f:2e:e6:16:
         38:c9:8c:04:03:cc:5c:b5:d3:c1:9d:4b:db:86:52:79:10:7f:
         e7:a4:ae:55:a5:d7:38:66:98:64:bd:98:08:c1:b1:86:47:4c:
         db:a3:f0:01:10:03:fa:88:44:f0:0f:3f:2b:1f:fd:e2:92:5e:
         ff:ef:d6:69:7f:08:cc:6d:00:35:26:ba:32:79:46:a9:08:97:
         e9:e2:43:9b:60:d0:f3:dc:5e:f1:03:0a:28:15:ed:8f:4f:57:
         b1:8d:a8:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:22 2023 by rpki-client on console-ams.rpki-client.org