Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9F09DCA036EC11ECA4907E02D8A014CE.roa
File:                     9F09DCA036EC11ECA4907E02D8A014CE.roa (raw, json)
Hash identifier:          aE0zufErHVTgjvVjV9XoufpJ3qDH/YOhYeGpggUhOpE=
Subject key identifier:   77:D9:F9:A8:EE:ED:CB:75:62:A7:3A:CD:B1:7D:59:52:E9:07:8D:7A
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0C45
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9F09DCA036EC11ECA4907E02D8A014CE.roa
Signing time:             Wed 27 Oct 2021 06:10:46 +0000
ROA not before:           Wed 27 Oct 2021 06:10:41 +0000
ROA not after:            Thu 27 Oct 2022 06:10:41 +0000
asID:                     58895
IP address blocks:        45.206.255.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3141 (0xc45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 27 06:10:41 2021 GMT
            Not After : Oct 27 06:10:41 2022 GMT
        Subject: CN=6178ed65-6adc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8a:f9:96:dc:9a:d6:53:50:f9:e5:5b:7d:2e:
                    f8:28:a7:24:33:33:3b:f1:be:61:b7:c2:13:f4:d0:
                    94:b5:9f:6e:04:53:c6:ca:25:1f:58:da:6c:0d:5d:
                    50:fa:9b:a0:ca:70:1a:27:31:51:b1:61:ee:f1:ac:
                    ab:ad:12:d2:55:21:a6:2f:ef:59:42:f9:13:a4:3c:
                    3e:c3:c6:14:9b:bb:5f:e0:ce:4b:98:d9:c3:b8:79:
                    d2:6a:e0:d0:f0:8f:91:51:cc:6c:4f:8c:de:bd:d3:
                    65:1a:ff:59:3f:f2:fd:73:df:3d:d3:a1:ed:d7:01:
                    2d:ac:d9:14:6b:56:04:4a:e1:2e:fb:1f:66:47:50:
                    ce:92:95:65:2c:cd:36:b6:22:a0:e7:f5:c9:cf:f4:
                    b0:de:a3:ca:43:2a:29:33:4d:9e:b9:89:b4:9b:d6:
                    2e:4d:c2:e4:e6:d3:f8:b1:f8:fb:5d:65:00:88:c2:
                    51:c9:05:4e:aa:c0:16:04:87:ff:38:55:7b:d2:11:
                    7d:7e:f8:6f:e7:74:bb:e4:87:e0:ab:75:fb:67:3f:
                    79:3b:39:53:2d:a9:85:24:49:b6:fe:e7:c3:14:de:
                    4e:90:e1:20:d8:68:e1:f6:63:fd:57:94:89:ae:6d:
                    f3:91:4c:15:64:60:4f:c7:25:94:f8:7c:7c:fa:92:
                    95:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:D9:F9:A8:EE:ED:CB:75:62:A7:3A:CD:B1:7D:59:52:E9:07:8D:7A
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9F09DCA036EC11ECA4907E02D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.206.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:ea:61:57:d6:6f:da:a1:af:cf:ef:5a:42:fb:c9:1d:61:5c:
         ca:66:58:e6:99:dd:a8:5b:e1:72:9a:11:08:72:46:43:e1:05:
         e1:36:3e:48:bc:8d:cc:9f:19:bb:f6:c7:91:03:f6:13:08:94:
         85:cb:63:d7:ed:3b:3d:b3:7f:88:b6:59:c1:7d:05:e7:ab:c9:
         cd:aa:ed:50:2d:26:00:d1:e9:2c:8d:f9:ec:19:70:57:14:e9:
         78:36:05:f7:04:7e:06:56:10:5a:9c:a8:32:b4:87:72:b2:2b:
         b8:69:40:54:b7:5e:41:b0:65:af:28:a4:e8:ee:4d:74:8c:e0:
         a0:a4:ad:96:c5:9a:f0:a0:e2:73:31:92:44:77:86:f8:f9:9a:
         45:8f:4a:fb:e8:25:1c:df:c6:7d:f9:0a:fe:6b:a0:9f:3e:4b:
         db:97:8b:79:1a:73:da:14:b9:00:74:15:b2:58:98:75:cf:33:
         c2:72:89:74:ec:47:51:66:5b:7e:fa:b5:6e:42:3f:7c:a5:98:
         7a:e5:36:3c:e3:1c:d2:fb:c7:1d:1f:ad:ec:2d:4c:05:d4:2f:
         57:91:97:d1:ec:79:3f:7c:8e:d9:ef:46:37:f3:9a:0d:56:8c:
         a2:ac:9a:6a:3e:86:6e:0f:79:5d:20:00:7d:c3:3d:ea:3f:79:
         ee:47:ed:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:22 2023 by rpki-client on console-ams.rpki-client.org