Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AE0D674AD10B11EB859F7561F8AEA228.roa
File:                     AE0D674AD10B11EB859F7561F8AEA228.roa (raw, json)
Hash identifier:          5IGat+hPkcreXznF1JBQlOPMXiKFLco0GZMzqTibRUw=
Subject key identifier:   B9:6B:AE:56:43:9F:29:E6:22:00:8F:1D:B2:D1:46:B6:D4:CE:B0:18
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       068B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AE0D674AD10B11EB859F7561F8AEA228.roa
Signing time:             Sat 19 Jun 2021 14:36:06 +0000
ROA not before:           Sat 19 Jun 2021 14:36:00 +0000
ROA not after:            Tue 09 Aug 2022 14:36:00 +0000
asID:                     201411
IP address blocks:        45.195.225.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1675 (0x68b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jun 19 14:36:00 2021 GMT
            Not After : Aug  9 14:36:00 2022 GMT
        Subject: CN=60ce00d6-cab2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:5a:7d:8d:dc:99:5a:ec:1d:77:10:14:47:34:
                    67:a6:04:37:54:d7:9c:d3:39:20:86:fa:78:93:fe:
                    26:ba:39:cc:a2:64:8f:5f:c3:62:90:0c:d3:b7:e5:
                    ae:bf:14:5a:3a:4a:aa:7a:cd:1f:97:64:8e:14:6f:
                    9a:69:1c:5e:53:3c:38:ec:a7:a7:e0:fc:8e:42:76:
                    d6:ad:de:c8:6e:81:83:9f:01:38:98:a4:95:31:06:
                    4d:da:48:d8:02:9f:49:ee:0a:c7:9f:65:06:c2:89:
                    59:d3:ac:ed:f2:dc:14:c7:d1:fa:b1:a0:ac:77:67:
                    50:34:b6:95:a6:4c:ef:5c:72:c6:b3:ed:d0:b1:c6:
                    75:32:ee:8e:51:c2:a0:eb:f1:7f:77:62:02:d3:f3:
                    a9:a5:6e:07:5d:33:99:5b:68:9e:13:c9:95:20:25:
                    f2:55:58:f5:0c:69:ed:13:bf:f3:51:b4:04:f4:35:
                    5c:4a:f0:19:f6:12:c1:24:63:50:3a:41:9c:3d:17:
                    ff:6a:f5:b5:4f:f0:e8:f9:f7:a7:c4:e4:7e:e9:ce:
                    59:c5:97:72:a2:f0:bc:2d:08:4a:7a:6b:ca:3a:80:
                    34:f4:3d:44:fe:8e:05:4f:da:61:aa:dd:61:67:6b:
                    98:a5:9d:cf:fe:a8:5d:f8:2d:34:a2:57:52:8f:db:
                    83:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:6B:AE:56:43:9F:29:E6:22:00:8F:1D:B2:D1:46:B6:D4:CE:B0:18
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AE0D674AD10B11EB859F7561F8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:0e:a4:50:7c:59:78:ea:7a:22:af:e6:b5:21:80:c9:67:a5:
         bd:f8:f7:a4:72:d9:ac:c1:84:fe:a5:71:c7:be:fa:c3:d0:95:
         35:27:22:0f:54:47:b7:23:10:10:8d:67:8a:78:b6:53:46:43:
         70:ac:e4:a5:ae:d2:7e:da:36:0e:38:dc:37:15:e0:d6:8c:05:
         87:ec:b4:5e:10:76:ca:81:12:14:98:48:8a:64:f7:90:90:1c:
         8e:04:23:b4:1f:31:5e:c4:e6:9d:54:9b:d5:00:66:35:c8:fb:
         5c:97:d2:6d:92:b9:4e:58:c7:32:7a:1a:c4:55:44:8c:d9:8c:
         78:4e:42:3c:de:db:10:07:66:db:b2:85:69:52:00:18:9f:53:
         86:27:14:6d:6d:51:94:5a:e5:d4:fa:d4:ad:49:80:31:dd:1f:
         2d:6f:a2:ae:47:a3:a7:ae:af:6e:e8:f3:91:22:58:6e:13:46:
         23:aa:4c:aa:81:c3:0c:52:6b:71:d7:32:5f:52:e5:47:15:ad:
         a4:32:53:20:ad:c4:29:2e:bd:5d:2f:ac:94:c4:d3:5b:05:e7:
         da:e1:d0:99:41:3a:15:f2:d0:93:d1:7c:b7:e8:84:0c:1a:bd:
         77:b8:57:c1:fa:1e:ea:11:ce:f7:49:3a:3d:e3:d7:a8:46:1b:
         36:18:25:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:23 2023 by rpki-client on console-ams.rpki-client.org