Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD82257048E211EF92B5C16B762E951A.roa
File:                     AD82257048E211EF92B5C16B762E951A.roa (raw, json)
Hash identifier:          aEug8FXFJFVTZbqtaxtIwB2LACWI1EfPV8lW/KtcqBw=
Subject key identifier:   D0:B7:EC:2F:55:29:68:77:A7:C7:E0:11:22:0C:3B:08:9D:D3:4B:E5
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       9EB6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD82257048E211EF92B5C16B762E951A.roa
Signing time:             Tue 23 Jul 2024 10:59:48 +0000
ROA not before:           Fri 26 Jul 2024 10:59:45 +0000
ROA not after:            Fri 02 Aug 2024 10:59:45 +0000
asID:                     44559
IP address blocks:        45.200.148.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40630 (0x9eb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jul 26 10:59:45 2024 GMT
            Not After : Aug  2 10:59:45 2024 GMT
        Subject: CN=669f8d24-966d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d4:98:a0:06:e2:f9:5e:60:4a:ac:15:68:94:
                    c4:e5:49:20:3e:48:dc:88:f0:f3:4a:6b:3d:4f:81:
                    7f:e1:c1:74:bf:26:f8:c3:07:f8:f7:ee:12:1a:6e:
                    f1:3b:7e:48:a6:f4:09:0a:55:b2:7d:03:ae:57:d3:
                    2b:50:2c:cd:b8:3e:f9:ce:4a:bd:e1:f7:d4:0b:e2:
                    e7:76:3e:d1:5d:af:12:c0:39:73:be:45:bd:bf:16:
                    f9:9a:2c:6d:c2:5f:ed:82:29:02:1b:38:e9:65:64:
                    35:7e:ab:cb:af:8e:15:60:2d:7d:73:eb:14:ba:47:
                    6d:96:38:91:8e:00:09:1d:c1:0b:97:6a:33:ad:ac:
                    49:3b:8d:fe:a0:72:fa:60:15:45:87:76:fe:19:f8:
                    9e:be:51:c9:6d:c9:c7:fd:d7:97:bb:8d:68:86:e1:
                    62:a3:39:f2:38:5d:e4:ee:5f:35:db:e0:1b:be:8c:
                    fe:02:1e:21:ba:ee:7d:e7:49:76:4e:02:c7:1c:e2:
                    eb:bb:28:8c:c0:b7:63:65:13:2f:aa:55:06:ed:5a:
                    c9:d0:45:0a:83:a7:f6:f1:bb:11:d6:3d:1e:cc:9b:
                    f6:00:83:06:02:ae:19:a7:6a:c5:d3:d1:07:22:3c:
                    2c:81:eb:06:31:69:f8:d8:27:3f:84:a8:f3:70:ef:
                    0c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:B7:EC:2F:55:29:68:77:A7:C7:E0:11:22:0C:3B:08:9D:D3:4B:E5
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD82257048E211EF92B5C16B762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.200.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:e3:bb:2f:48:87:66:cd:0c:4e:68:bb:d4:50:8d:90:52:4a:
         72:fc:b7:e7:4c:6d:a8:6b:31:27:69:f0:f7:36:22:60:1b:b6:
         b8:88:ae:85:85:5e:37:e0:58:78:1e:86:d2:22:68:c2:1f:8f:
         47:76:32:72:1a:ac:11:3b:a2:69:e6:0a:e0:b4:d2:53:8b:f8:
         68:21:a8:f7:75:bd:94:ba:97:b7:ad:57:4f:4e:00:dd:48:e3:
         52:79:54:16:2a:a2:04:a6:2b:f0:8f:a6:4e:2f:46:a6:2e:28:
         b4:96:fd:f7:e2:8d:72:79:10:82:03:77:75:38:cc:2e:bf:61:
         75:cd:19:c8:22:bf:13:82:d4:13:1f:21:03:4f:82:ec:66:a9:
         ef:71:44:72:91:dd:f8:95:86:33:fb:b9:55:f8:21:5b:cb:34:
         f6:0b:2c:75:8d:56:b5:0a:85:46:2b:50:f0:bd:80:bb:db:07:
         2a:93:53:9b:06:7b:0d:fe:55:88:19:3d:1e:43:a4:80:66:dd:
         3d:10:40:c7:cd:64:f4:6d:de:ad:c8:35:cc:cf:4c:a9:aa:cf:
         c6:5a:7d:ae:1b:70:ec:b5:58:d3:0b:d4:21:2b:fa:93:3c:f1:
         72:c5:be:4f:f8:17:ff:44:e7:ef:1a:8a:ed:c0:f1:82:da:01:
         ae:8a:11:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 2 14:56:25 2024 by rpki-client on console-ams.rpki-client.org