Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9FAA36AC36D611ECA275F35CD8A014CE.roa
File:                     9FAA36AC36D611ECA275F35CD8A014CE.roa (raw, json)
Hash identifier:          4AjImy/FqBnEEeFKx2wjxePBaLvNUvmdiawGI1JLlyY=
Subject key identifier:   87:D5:39:4E:71:F5:67:97:6A:D5:70:68:16:DD:17:B9:BC:B7:BF:F8
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0AF6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9FAA36AC36D611ECA275F35CD8A014CE.roa
Signing time:             Wed 27 Oct 2021 03:33:17 +0000
ROA not before:           Wed 27 Oct 2021 03:33:14 +0000
ROA not after:            Thu 27 Oct 2022 03:33:14 +0000
asID:                     58895
IP address blocks:        45.206.40.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2806 (0xaf6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 27 03:33:14 2021 GMT
            Not After : Oct 27 03:33:14 2022 GMT
        Subject: CN=6178c87d-aa98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:46:3d:74:3f:66:54:a4:e0:c3:32:52:c6:76:
                    7d:b3:18:58:76:e6:cd:2e:89:c2:2c:42:fe:21:6e:
                    3b:3c:ac:59:57:a8:72:47:55:aa:c2:54:73:f2:d8:
                    5b:03:2c:21:e6:f4:e9:ea:86:8e:74:8c:54:15:9c:
                    b4:de:ec:ee:da:3e:16:6a:f1:0f:5f:b5:06:2c:56:
                    af:be:3a:73:92:6e:39:96:26:bd:11:27:01:7e:98:
                    f8:b3:15:07:e7:24:51:a9:67:48:41:be:a1:ee:43:
                    56:f0:5c:96:99:bb:ee:c6:2b:f8:44:0c:17:20:9a:
                    56:77:57:57:90:fc:a4:e4:7a:d7:69:62:df:c8:64:
                    5d:6f:51:bc:3b:a9:52:43:2a:0a:ff:66:44:4b:48:
                    a1:a8:5c:a2:5c:19:2c:06:c3:de:9c:7b:99:f2:f1:
                    7d:67:4f:ad:fa:f2:3c:14:6e:a1:b7:cc:bf:ea:88:
                    86:51:e8:79:4f:40:fe:ae:e5:ea:c8:5d:15:b6:4f:
                    6e:cd:f2:33:59:da:ba:36:7f:75:ff:dc:d0:68:bd:
                    0c:2b:2f:2a:7f:d6:18:71:51:eb:89:86:35:10:0b:
                    1b:3c:3d:5e:50:54:72:9c:9f:a1:df:7e:63:c7:38:
                    22:75:1b:34:8c:aa:cd:76:76:e2:b6:92:ce:c3:69:
                    37:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:D5:39:4E:71:F5:67:97:6A:D5:70:68:16:DD:17:B9:BC:B7:BF:F8
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9FAA36AC36D611ECA275F35CD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.206.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:aa:18:29:39:f7:90:49:a8:0f:4a:b3:91:d0:b3:65:f0:5a:
         cc:8c:6d:de:ec:39:34:0f:e7:c2:b5:06:96:59:53:ce:0a:6d:
         59:bf:47:a3:22:30:81:19:66:14:fc:b6:db:06:f4:37:65:32:
         63:2c:c4:92:c7:85:67:56:8a:cc:9b:c3:a0:36:4a:ee:78:27:
         95:cd:b6:7e:f8:7a:9b:a6:8b:e1:4b:27:39:03:38:4a:75:c4:
         78:62:85:df:14:12:42:7e:09:14:9b:91:8a:34:f1:3e:78:6f:
         91:78:84:0a:e8:1f:0e:12:15:42:f5:5d:2d:3a:6e:58:26:f0:
         6c:02:fa:9e:83:84:be:84:6b:64:05:80:e8:10:2e:a4:fe:f2:
         0a:69:fc:5b:ca:70:07:b0:b8:c6:d0:63:b1:ed:11:3c:ba:24:
         b4:82:33:37:bb:ee:cc:85:cb:21:ab:a2:19:01:fa:5e:a1:b5:
         b3:60:cd:e4:d5:bd:29:d1:ff:bb:d0:86:e3:8c:30:5a:a6:1c:
         43:b0:5c:73:3d:18:1b:c9:a6:37:65:82:34:04:46:07:d0:ad:
         2c:ec:31:c6:d8:2f:d9:b1:fd:98:33:87:34:be:a3:71:17:c3:
         ea:7b:60:39:c9:f1:c9:a8:18:aa:da:ee:ef:58:32:e2:4f:ae:
         87:11:2e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:25 2023 by rpki-client on console-fra.rpki-client.org