Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B14C9A9E36E011EC8277816DD8A014CE.roa
File:                     B14C9A9E36E011EC8277816DD8A014CE.roa (raw, json)
Hash identifier:          vwqZfSo55uZWcJqsc8JjMGOCLrnYGzPzVTT1o7Rv6b0=
Subject key identifier:   1C:36:36:55:C4:E7:8A:07:2E:F7:74:33:B3:DC:95:4E:50:88:6B:68
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0B9B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B14C9A9E36E011EC8277816DD8A014CE.roa
Signing time:             Wed 27 Oct 2021 04:45:22 +0000
ROA not before:           Wed 27 Oct 2021 04:45:18 +0000
ROA not after:            Thu 27 Oct 2022 04:45:18 +0000
asID:                     58895
IP address blocks:        45.206.122.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2971 (0xb9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 27 04:45:18 2021 GMT
            Not After : Oct 27 04:45:18 2022 GMT
        Subject: CN=6178d962-0f36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:05:c2:30:fa:54:a8:5e:41:b7:ae:e5:d9:5c:
                    3e:c1:01:a6:68:c4:ff:bd:7b:36:78:a8:67:c4:33:
                    de:f1:e5:9e:1e:9e:da:3c:76:e8:98:22:9f:2d:21:
                    c7:81:46:06:a5:51:24:03:30:c5:ff:7f:b5:45:25:
                    d6:aa:68:67:ec:31:41:72:40:5b:0c:c7:b0:1f:b9:
                    52:61:c6:44:3e:0c:be:f4:5b:64:f5:c4:50:3c:e9:
                    4a:26:c3:7b:8c:f5:d4:54:7a:b2:e6:54:10:2d:6b:
                    63:65:24:56:c6:7b:62:b1:7b:46:71:83:da:ff:67:
                    ad:4b:ba:da:b6:c7:48:7e:e6:73:4e:0f:9a:2d:40:
                    40:ce:3d:92:56:8e:3b:ab:3a:eb:2a:59:bb:5b:4d:
                    25:46:26:96:35:bc:47:7b:54:7a:6b:91:72:c8:51:
                    3e:35:e7:b2:ae:e0:d8:41:b4:da:93:f8:ac:64:0a:
                    b1:41:d3:99:ee:a1:95:6d:01:c8:10:5e:b8:e8:98:
                    68:62:3b:d7:34:56:cd:9b:a1:2e:99:a2:0b:b3:e7:
                    ec:72:c0:07:4d:4a:68:a0:1e:30:37:f0:55:0b:51:
                    65:8c:76:57:a8:7c:e5:53:b6:12:98:54:d7:d4:60:
                    67:40:27:26:5e:77:19:5e:27:d9:e7:30:51:68:3c:
                    2f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:36:36:55:C4:E7:8A:07:2E:F7:74:33:B3:DC:95:4E:50:88:6B:68
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B14C9A9E36E011EC8277816DD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.206.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:4d:02:7b:98:7d:e3:84:94:b2:51:66:94:b3:6a:4f:3c:d2:
         e0:26:88:7e:e0:dd:30:8b:38:e4:3b:31:26:b2:f5:2b:fe:75:
         b2:14:ea:00:77:49:f4:73:26:dc:55:33:6d:24:1a:9d:87:83:
         3c:ee:b8:85:1a:a8:e7:a8:b0:85:fa:bf:de:35:31:d1:1a:1a:
         7e:ef:d5:ce:67:62:41:f8:8b:af:ee:9a:95:36:11:4c:95:6e:
         63:0a:5c:df:ea:51:9d:62:14:4d:a0:0b:7e:79:4e:1d:50:45:
         37:f1:42:09:f7:d4:9e:a7:3a:e1:b4:84:57:70:64:eb:92:fc:
         18:8c:0d:b6:8f:9a:b1:53:8b:88:8b:a0:4d:3d:f5:4b:d6:80:
         f1:d1:2b:57:c1:a7:6d:64:1e:11:36:ae:46:a3:6a:7d:75:b0:
         2c:e9:93:92:14:bb:d8:e4:a2:89:01:a2:37:75:aa:cc:c3:3e:
         27:ef:c5:ce:d6:66:74:1b:ee:36:69:fa:09:52:89:fe:78:6e:
         1e:ea:50:6f:8b:cf:60:ba:90:04:83:92:01:d0:d2:35:25:3c:
         40:7a:f6:f6:a2:d7:8c:f5:fd:22:93:92:9e:d0:f4:e5:79:6f:
         d5:16:6b:f0:0a:37:6e:2e:d9:1b:7d:1c:fc:54:9f:b0:1d:b2:
         f4:d2:8c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:25 2023 by rpki-client on console-fra.rpki-client.org