Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9FE9974636CE11EC99D7544ED8A014CE.roa
File:                     9FE9974636CE11EC99D7544ED8A014CE.roa (raw, json)
Hash identifier:          WmUBB10YtVaFwV13d4gRCtxXQ5ghEIB2Fxu6j2l1wZ0=
Subject key identifier:   65:C2:CB:05:D3:EB:00:9B:BD:08:1F:D0:6F:C5:E2:50:38:4E:50:F0
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0AD0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9FE9974636CE11EC99D7544ED8A014CE.roa
Signing time:             Wed 27 Oct 2021 02:36:02 +0000
ROA not before:           Wed 27 Oct 2021 02:35:58 +0000
ROA not after:            Thu 27 Oct 2022 02:35:58 +0000
asID:                     58895
IP address blocks:        45.206.162.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2768 (0xad0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 27 02:35:58 2021 GMT
            Not After : Oct 27 02:35:58 2022 GMT
        Subject: CN=6178bb11-e6e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:33:56:d2:78:aa:11:e7:07:67:57:f0:7c:71:
                    f0:9f:7e:fb:da:37:f4:a0:ef:42:16:35:e4:88:b3:
                    7b:3e:84:69:45:6b:ec:c6:4d:24:ae:7a:8f:6a:c2:
                    fb:c6:40:38:4e:5c:3d:df:d2:64:69:15:b5:c4:fc:
                    d9:58:bd:fe:b8:09:a7:db:93:4d:df:41:94:ef:03:
                    22:5e:9e:b8:7e:bd:f9:55:b6:b9:76:d0:91:ce:7c:
                    9a:a2:de:4d:65:0a:ab:82:b3:6a:6c:6d:13:fd:d8:
                    46:a4:46:d5:f3:1b:33:4b:e0:ef:1c:23:2d:7b:11:
                    86:e6:15:a6:7c:8b:d4:e6:28:f5:0d:79:b5:03:05:
                    6d:a9:46:fe:2b:9b:5f:26:76:46:62:be:54:74:79:
                    00:0c:00:71:d6:33:ec:7f:00:97:b2:3c:6e:4a:b8:
                    8c:1c:a7:57:41:aa:8e:6f:3f:45:ca:a0:d0:bd:84:
                    14:d8:7f:04:b3:d7:5d:88:ef:f8:d0:40:7e:1f:bd:
                    88:3a:f2:1c:a0:fb:39:1d:a0:43:22:38:e5:e9:c3:
                    8a:b3:71:50:f6:08:be:e1:f1:f4:9a:99:69:f0:15:
                    76:e8:d0:04:71:9e:14:6f:6b:ad:e6:63:03:ce:88:
                    19:04:53:d1:dd:b5:7b:e5:ee:8f:07:71:15:bc:c3:
                    eb:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:C2:CB:05:D3:EB:00:9B:BD:08:1F:D0:6F:C5:E2:50:38:4E:50:F0
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9FE9974636CE11EC99D7544ED8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.206.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:35:d0:fd:f2:70:67:9a:5f:cb:93:c9:ee:37:14:dd:03:3f:
         36:04:ba:9c:58:75:a9:2d:a5:66:c5:24:bc:0d:42:d5:61:62:
         b9:31:01:04:12:d4:6b:f3:c6:38:94:f3:2f:48:d8:a3:43:30:
         87:4b:46:98:95:9d:ea:74:66:18:92:63:bc:71:f3:58:aa:ef:
         75:71:16:9e:92:1d:30:9f:82:db:b2:15:f6:92:03:4a:7c:07:
         7a:0f:f8:7c:9c:6b:d3:80:7c:04:e7:cf:f7:4f:47:d8:dc:de:
         ff:02:72:7c:1b:81:ef:e9:a4:2f:2f:c6:da:25:35:d5:a3:9e:
         a1:b0:b0:04:7c:48:2a:f6:30:5c:fb:63:8c:54:f7:17:4e:3b:
         7f:07:e7:33:5c:6b:ca:29:cd:ef:b2:bd:e0:b7:c1:63:90:2c:
         87:99:f2:b6:be:6d:29:2e:35:09:bb:02:74:3f:6a:52:45:e2:
         c2:ae:08:b0:27:79:0c:60:f5:84:a3:63:29:c0:2d:f8:d5:f3:
         ca:3f:42:df:18:5f:78:8f:57:3c:9b:78:92:14:de:c5:2b:04:
         92:43:9a:f3:a6:bf:75:c7:a4:2d:52:ee:80:b4:5a:f8:6a:30:
         c7:8c:f1:b0:ff:f0:17:fd:b6:cc:96:04:85:05:6e:21:9a:f2:
         00:ac:b3:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:23 2023 by rpki-client on console-ams.rpki-client.org