Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9CD80B32066211ED974EB8F0F1222468.roa
File:                     9CD80B32066211ED974EB8F0F1222468.roa (raw, json)
Hash identifier:          3cg7SYWV9X1WQkd/luF6MYdjOgQHysj8C+IPUptUyX0=
Subject key identifier:   3F:D6:1E:F9:F9:0F:BC:77:F5:D7:6C:10:B0:87:C8:EE:CB:06:2D:E3
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       156D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9CD80B32066211ED974EB8F0F1222468.roa
Signing time:             Mon 18 Jul 2022 06:26:53 +0000
ROA not before:           Mon 18 Jul 2022 06:26:47 +0000
ROA not after:            Sun 15 Jan 2023 06:26:47 +0000
asID:                     21859
IP address blocks:        45.194.96.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5485 (0x156d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jul 18 06:26:47 2022 GMT
            Not After : Jan 15 06:26:47 2023 GMT
        Subject: CN=62d4fd2d-4c8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:db:7b:6a:f0:a5:af:e2:ba:e9:e0:44:89:58:
                    36:a7:c9:c9:ca:20:e6:de:61:75:39:3c:41:36:f1:
                    5f:9f:51:b8:53:e4:c4:8a:69:66:ed:8e:67:00:50:
                    c2:f7:34:cd:5d:b4:f6:10:76:6e:9e:b8:50:03:78:
                    e6:dc:f3:9d:a8:32:db:e5:04:e4:bc:1b:ee:52:bf:
                    72:c9:5b:51:e2:28:ca:84:3d:d1:3d:a8:b1:fe:85:
                    44:fc:bd:a5:80:7c:f7:58:ce:be:64:d4:29:89:31:
                    90:7e:79:02:a0:59:a2:8e:c3:cd:36:d6:ad:ce:25:
                    ab:af:d4:dd:32:59:b9:95:c9:ec:76:b3:8b:6b:61:
                    98:87:da:86:97:5c:ef:fd:d4:e6:bd:f3:ed:bf:fd:
                    c2:72:62:15:02:8f:d9:39:11:ba:89:b1:2b:0e:8b:
                    7b:69:af:2a:81:85:e6:f3:f8:d6:76:73:cd:cf:70:
                    45:42:91:b4:1b:74:7a:be:35:05:b0:00:14:ff:fd:
                    f5:68:bf:8b:5d:d0:7b:f4:77:37:b9:44:dd:10:f5:
                    02:fa:b4:d5:7c:ec:8b:ba:a9:0c:02:94:6c:f4:fe:
                    83:92:81:14:5e:5d:42:d2:00:46:81:4c:29:5f:5b:
                    fd:d6:56:85:40:d8:68:1e:51:1d:33:6e:06:40:03:
                    3c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:D6:1E:F9:F9:0F:BC:77:F5:D7:6C:10:B0:87:C8:EE:CB:06:2D:E3
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9CD80B32066211ED974EB8F0F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:ad:42:35:dc:df:59:32:b5:b5:e6:d7:b5:50:ff:71:24:f8:
         c3:bf:d7:a3:f8:c8:cb:55:fa:c6:04:fa:3f:39:66:37:0a:db:
         77:2e:f4:06:33:ea:fe:9f:63:52:43:c8:b2:73:8a:85:ba:ba:
         4e:ee:b4:e1:64:0c:4c:0a:5e:3f:67:5e:f5:32:73:73:41:fa:
         2d:10:43:aa:29:47:f7:bb:d0:22:f0:43:57:71:8b:e7:8e:8e:
         e6:23:69:2d:e3:54:0f:a1:ea:48:c2:13:e5:b3:8f:84:6b:86:
         81:8d:bb:79:37:67:e4:73:86:e9:0b:2b:da:79:26:bd:d9:bc:
         c6:43:73:01:88:d4:d0:5b:df:2f:14:9b:3b:5a:21:42:b4:35:
         51:a9:22:d3:35:d7:02:4e:8d:c4:83:94:7c:6b:18:71:01:6f:
         59:91:d2:db:28:3f:e4:cf:39:a5:75:6b:05:c2:ad:95:0a:bd:
         ba:d4:c9:44:fd:c8:72:4d:f2:12:78:8f:04:c2:0c:fd:00:81:
         5b:81:96:5c:bb:6d:38:d6:5a:36:b1:c8:19:66:89:3e:cd:2b:
         ae:af:ae:38:19:11:45:89:1d:3d:2f:6c:49:15:60:43:18:3f:
         d6:2b:46:17:d7:bf:a5:33:70:66:d5:30:fe:ba:ac:2e:c4:98:
         d4:aa:fa:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:24 2023 by rpki-client on console-fra.rpki-client.org