Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B17ABF700E2411EDAAF1249BF1222468.roa
File:                     B17ABF700E2411EDAAF1249BF1222468.roa (raw, json)
Hash identifier:          4eLYgDuxadNV+9TBumAr/z7v20QnjgIwhoYp7uIOVbU=
Subject key identifier:   F5:BA:70:45:45:46:74:9C:78:7F:2A:3E:56:C0:B3:E5:63:5F:77:73
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       15DB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B17ABF700E2411EDAAF1249BF1222468.roa
Signing time:             Thu 28 Jul 2022 03:23:48 +0000
ROA not before:           Thu 28 Jul 2022 03:23:43 +0000
ROA not after:            Sun 30 Jul 2023 03:23:43 +0000
asID:                     149024
IP address blocks:        45.199.180.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5595 (0x15db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jul 28 03:23:43 2022 GMT
            Not After : Jul 30 03:23:43 2023 GMT
        Subject: CN=62e20144-1b03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ad:58:fc:ad:98:59:a6:52:25:5e:a9:78:22:
                    c2:89:99:36:2f:8a:e6:23:8a:4d:c7:fd:ec:68:e8:
                    6f:3a:cf:1a:a1:d4:6b:7a:f6:d2:a8:ca:37:00:8c:
                    b4:ea:e8:14:03:29:cb:53:89:31:1c:f0:71:e0:c0:
                    5b:bd:85:b7:93:06:0a:ca:b5:a2:1a:cc:8b:f0:2e:
                    64:cf:54:fc:0d:03:0c:4d:05:49:0a:ad:42:e1:0a:
                    fd:e2:b8:cd:1b:22:a8:56:9a:9a:ce:7a:98:f8:14:
                    6c:f9:85:4b:a6:b1:0f:58:67:c8:9b:9b:91:7e:c0:
                    87:2b:f4:e6:a3:cc:5f:92:3b:b5:91:d8:a6:86:76:
                    15:73:64:97:29:e3:d1:f3:27:04:8d:b8:66:cd:05:
                    fd:8e:22:56:a3:31:f1:db:2b:e7:17:73:42:79:5e:
                    9d:f7:14:9a:91:40:7d:5f:2c:a7:87:54:5f:ae:ea:
                    ea:3b:cb:de:87:d6:40:83:21:05:7d:ff:78:fa:26:
                    86:cc:85:cd:29:80:4b:c0:bb:d5:2e:c9:0b:82:c1:
                    75:52:8f:3f:16:71:c0:82:81:c9:7d:0f:c0:2c:c3:
                    af:5d:63:8d:4a:8a:d7:79:3c:c2:62:c7:4b:db:cc:
                    98:25:b3:73:cb:e2:ab:90:ea:1f:57:f3:06:54:0e:
                    34:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:BA:70:45:45:46:74:9C:78:7F:2A:3E:56:C0:B3:E5:63:5F:77:73
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B17ABF700E2411EDAAF1249BF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.199.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:50:c8:d4:f2:47:4d:94:87:25:3f:36:9f:54:97:4e:70:bf:
         3b:6a:19:ae:fc:f9:51:73:5a:64:94:54:61:01:5e:d1:1a:a7:
         dc:0e:4f:37:66:e4:c6:a8:68:70:d3:f8:c5:9f:5c:1d:bf:18:
         c4:c7:83:a1:65:8f:9c:72:a5:3c:12:7e:75:1c:31:e1:94:af:
         cb:56:fb:52:53:ed:aa:13:3d:be:c3:0b:4c:7d:7c:15:be:4d:
         a0:de:e5:2a:0d:7f:3f:46:c0:5d:6a:5c:d0:3b:3d:8a:d8:a4:
         aa:e5:fe:64:4f:b5:67:04:aa:48:dd:07:54:7a:1a:46:77:c2:
         a3:6a:57:ba:62:34:41:4a:7b:b9:53:dc:7c:4c:64:d7:4d:2a:
         5e:46:91:f1:a6:19:23:a4:d1:c7:48:8c:b4:cf:41:c4:0f:98:
         1d:61:17:15:ec:75:f9:12:59:fd:d1:6a:e1:75:52:12:a3:e8:
         87:95:94:e5:00:96:39:a3:ae:d5:08:94:8c:07:d1:57:61:ae:
         68:25:cd:0f:26:11:2a:2d:bc:c7:7a:b8:48:88:2d:a2:9c:5e:
         89:f7:8e:64:54:ff:68:68:58:34:5b:6c:28:38:d4:ec:33:9b:
         f5:da:c7:8e:77:43:be:f9:ff:aa:ee:4b:60:e1:63:2f:7e:3a:
         d8:1e:45:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 31 01:14:45 2023 by rpki-client on console-fra.rpki-client.org