Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A05211C817C811ED86AD05C1F1222468.roa
File:                     A05211C817C811ED86AD05C1F1222468.roa (raw, json)
Hash identifier:          S6pVevvhD2MLvUQLLEJhaxSEZohoLcn5ESNY9QN0Xa4=
Subject key identifier:   39:E0:B0:70:26:E0:AE:4B:BC:B1:13:88:E5:AB:73:D7:67:A7:81:16
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       16B9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A05211C817C811ED86AD05C1F1222468.roa
Signing time:             Tue 09 Aug 2022 09:49:57 +0000
ROA not before:           Sat 20 Aug 2022 09:49:54 +0000
ROA not after:            Mon 10 Jul 2023 09:49:54 +0000
asID:                     138905
IP address blocks:        45.201.232.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5817 (0x16b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 20 09:49:54 2022 GMT
            Not After : Jul 10 09:49:54 2023 GMT
        Subject: CN=62f22dc5-7974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f8:f5:7f:f2:c7:37:3d:d4:78:42:ae:09:ea:
                    02:b1:e4:34:59:04:d7:fd:cc:d3:4f:d3:58:d7:f6:
                    29:3f:12:28:33:ca:81:e7:8b:c0:8b:b0:10:2f:49:
                    b6:ed:7d:b8:ad:a5:f3:dc:9b:3e:92:71:7e:29:25:
                    3d:22:35:3d:fc:1e:6f:bc:08:00:3d:0d:90:8c:79:
                    2e:73:8e:71:f4:e9:47:09:f1:68:c9:31:4d:68:b4:
                    ee:57:94:6a:0e:ac:24:84:a9:4d:34:cb:aa:9b:98:
                    c8:da:86:9c:6c:2f:0c:77:f3:af:e2:b4:b4:ce:2e:
                    85:91:9b:7d:85:11:5c:07:7b:c9:fb:39:97:4a:ce:
                    34:90:a6:11:34:7f:95:e7:b0:25:38:8c:12:12:6c:
                    d9:81:d3:b7:35:85:0a:a5:ca:71:13:cf:e8:1e:b2:
                    1a:fb:ff:c4:98:41:d1:df:1a:86:89:bc:05:e4:74:
                    a8:21:fe:1b:78:ef:e5:69:3d:59:2e:c2:39:e1:a5:
                    d8:f6:87:47:2d:94:0a:0f:5f:d7:be:30:75:e5:6e:
                    50:57:0a:bf:03:49:e4:81:87:5a:ea:f3:11:64:87:
                    32:93:25:2e:bf:23:bb:54:71:83:40:01:7c:3a:36:
                    c7:e0:46:c3:d3:f4:0b:ad:34:53:2a:53:59:89:9c:
                    3a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:E0:B0:70:26:E0:AE:4B:BC:B1:13:88:E5:AB:73:D7:67:A7:81:16
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A05211C817C811ED86AD05C1F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.201.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b2:da:5c:28:5d:81:cb:db:75:22:74:51:30:14:63:3a:95:22:
         89:94:a1:9c:a8:4b:b0:71:c7:88:d7:81:39:08:2f:f7:cd:60:
         02:76:aa:63:9f:cb:01:56:92:40:33:fe:5f:9c:44:44:5a:03:
         03:5f:05:13:78:82:5b:2d:1a:29:af:ec:a2:f4:af:26:b4:31:
         a0:7c:c4:f9:93:b0:6e:85:ec:9d:e6:37:f3:a8:23:fb:ef:81:
         b2:21:13:27:6a:49:f1:28:17:a6:e9:8a:d2:33:bf:99:4b:d1:
         9b:f2:87:de:c4:22:07:2b:6a:08:8d:5a:fc:e8:a9:a7:1d:f8:
         b0:9f:9a:4b:68:85:6f:c5:a4:cb:d3:ef:fd:0c:0a:29:55:bf:
         8c:98:cb:5b:97:4e:08:b5:14:a9:f6:ac:af:91:44:17:c4:f7:
         c4:e6:0a:5d:6a:7d:b1:b0:51:a3:69:fd:95:a7:42:5a:ea:79:
         cf:5b:a6:19:94:bb:55:7b:ad:5f:17:a8:79:7b:8b:b0:52:3e:
         1a:1b:9a:6d:86:ef:e1:b6:09:49:d1:56:da:3b:b2:7e:e8:91:
         d1:a4:2a:c1:0d:c3:5c:5f:0b:6b:dc:54:41:ed:09:93:00:85:
         37:21:24:ef:f1:86:58:4a:33:be:a1:3d:34:dd:bd:e1:ff:01:
         08:a9:3d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:25 2023 by rpki-client on console-fra.rpki-client.org