Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A61C81E636CE11ECBC0D734ED8A014CE.roa
File:                     A61C81E636CE11ECBC0D734ED8A014CE.roa (raw, json)
Hash identifier:          hiH49gHh+NRdYv2JrNJpmpzlIdtokeHPYIg081btm18=
Subject key identifier:   34:CB:D1:02:88:03:83:42:15:9C:5E:A0:68:7C:0E:9C:C2:F5:FC:A3
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0AD2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A61C81E636CE11ECBC0D734ED8A014CE.roa
Signing time:             Wed 27 Oct 2021 02:36:12 +0000
ROA not before:           Wed 27 Oct 2021 02:36:08 +0000
ROA not after:            Thu 27 Oct 2022 02:36:08 +0000
asID:                     58895
IP address blocks:        45.206.218.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2770 (0xad2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 27 02:36:08 2021 GMT
            Not After : Oct 27 02:36:08 2022 GMT
        Subject: CN=6178bb1c-4b23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f9:81:a3:ef:f6:35:c3:96:34:96:be:aa:73:
                    2c:bd:17:22:0c:ce:2d:c6:2e:17:13:a9:da:b5:69:
                    da:a5:9b:b9:48:56:bd:51:eb:08:6b:f8:2d:56:4d:
                    5f:13:1a:3b:91:4a:11:98:2c:f0:83:15:1d:22:fe:
                    98:96:c0:a9:7d:4d:2e:fb:1a:28:c2:f0:3c:b8:57:
                    41:e0:87:b3:e6:51:ce:2c:4f:67:4a:a4:63:82:a5:
                    c2:34:c6:7a:ff:45:9f:e2:b1:0c:ec:80:cf:18:a4:
                    8a:f6:10:d2:39:bb:01:62:27:8b:38:25:fd:c0:78:
                    0c:00:0d:6d:2d:04:7e:f7:cb:ea:c0:a4:49:16:7f:
                    f6:7a:87:09:f4:50:2f:2b:f6:72:a0:a3:a5:78:53:
                    2e:dc:90:38:95:56:20:5a:fa:f5:dc:cf:e1:df:d3:
                    ab:b3:97:2e:87:6c:dc:04:a3:af:1c:42:bf:38:3e:
                    9a:b9:9e:7c:41:37:ff:3b:b7:7e:b8:89:1e:d4:7b:
                    6e:5f:ea:52:b6:1d:3a:9c:71:a8:6f:f1:91:16:d1:
                    7a:4a:34:f9:07:d1:ef:55:59:c2:3e:19:f2:97:fe:
                    1c:ca:da:e3:42:6d:06:22:21:53:8a:29:4c:eb:9e:
                    86:eb:d2:7a:67:da:cb:a3:b7:bd:30:19:8b:5c:15:
                    a8:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:CB:D1:02:88:03:83:42:15:9C:5E:A0:68:7C:0E:9C:C2:F5:FC:A3
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A61C81E636CE11ECBC0D734ED8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.206.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:7d:fc:d0:10:14:c3:db:53:52:73:4d:39:1e:1f:ce:c0:f4:
         36:10:2a:3c:ba:73:c3:99:f3:72:3e:52:c7:8b:0b:87:fd:37:
         03:60:1c:29:f4:c2:87:33:3b:50:a4:ed:2b:88:0a:ca:c3:22:
         0d:ec:2a:92:58:da:8e:8d:32:15:64:f9:64:92:07:e6:5c:da:
         a9:f8:e0:17:05:eb:8f:fc:2f:43:c0:a5:cf:f0:ec:ca:e5:5a:
         3b:ab:2a:20:01:bf:a8:51:6a:fe:1a:00:d4:ed:e4:6a:6d:bb:
         24:20:2f:d9:67:8c:da:76:cf:52:8b:96:10:19:14:07:26:28:
         e7:5e:da:a1:0a:3c:d7:a2:24:4e:7e:c9:4a:d3:c4:2e:4d:24:
         4d:33:b0:26:07:e3:76:a1:5f:2d:1a:82:66:a3:91:02:45:07:
         f1:ef:47:7a:b6:c0:a7:c7:69:99:9b:89:74:75:89:10:26:a7:
         25:d3:b5:ff:0f:f0:38:51:5b:38:b2:1b:66:3b:d9:42:68:ac:
         f2:44:1c:db:65:82:a2:4d:ae:21:0d:fd:c8:9d:e7:5a:ad:7d:
         f3:48:d8:65:96:77:55:b5:bc:7d:2c:2d:71:c9:bc:a1:cd:bc:
         63:a4:f0:3a:16:a1:14:d2:58:dc:a5:29:82:c9:6e:0a:58:2e:
         e6:ca:69:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:23 2023 by rpki-client on console-ams.rpki-client.org