Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B3C5A26436CE11EC92A47B4ED8A014CE.roa
File:                     B3C5A26436CE11EC92A47B4ED8A014CE.roa (raw, json)
Hash identifier:          MsDuLJ6sb0znimj9C8fIlqiSssnYSi6067Y917e4OZA=
Subject key identifier:   18:76:51:D0:C6:E8:AB:0F:81:64:CD:23:C9:F0:F7:A2:8D:DF:B9:E6
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0AD4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B3C5A26436CE11EC92A47B4ED8A014CE.roa
Signing time:             Wed 27 Oct 2021 02:36:35 +0000
ROA not before:           Wed 27 Oct 2021 02:36:32 +0000
ROA not after:            Thu 27 Oct 2022 02:36:32 +0000
asID:                     58895
IP address blocks:        45.206.163.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2772 (0xad4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 27 02:36:32 2021 GMT
            Not After : Oct 27 02:36:32 2022 GMT
        Subject: CN=6178bb33-2285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:95:7f:ec:11:6c:7a:06:27:d0:6d:49:5e:5d:
                    bf:7a:0a:1c:90:3c:5e:0c:9d:30:e3:61:c1:e9:ca:
                    9e:53:be:e0:5f:a3:b5:95:de:37:7e:b4:70:3e:c1:
                    46:46:bd:75:f9:09:f0:66:61:f9:71:61:c7:f4:c7:
                    01:ac:d1:3c:f8:38:ed:41:7e:19:27:9a:0e:7d:f2:
                    13:76:fe:3d:ae:ff:2e:3f:ff:54:db:b4:eb:e6:6f:
                    48:75:96:1d:a3:8a:4a:05:da:dc:5f:7b:66:6e:8e:
                    bb:2d:70:3c:ab:80:fd:69:96:41:0b:2b:4f:c2:e2:
                    6f:53:61:25:9b:a0:03:93:1a:dd:fc:82:bf:af:a0:
                    46:fa:0e:7d:29:20:95:75:78:11:f4:82:d1:6e:6f:
                    f8:25:73:a1:20:a3:75:c9:e6:6a:d6:e2:ba:73:07:
                    b6:ca:13:4f:93:a5:22:4a:a6:cf:78:6b:16:02:fe:
                    0b:73:a4:2f:2e:c0:1e:57:eb:b3:5f:f5:f1:71:09:
                    ab:89:0b:dd:73:fe:8d:33:0f:65:41:c1:e6:f3:31:
                    55:2d:0c:c5:80:d7:6c:62:b9:db:a7:e5:fe:05:22:
                    b2:9f:15:ce:3e:40:34:1f:6e:55:fd:e2:48:35:04:
                    a4:d3:b2:b9:8f:8a:e4:e6:9c:56:bb:fa:69:13:81:
                    40:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:76:51:D0:C6:E8:AB:0F:81:64:CD:23:C9:F0:F7:A2:8D:DF:B9:E6
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B3C5A26436CE11EC92A47B4ED8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.206.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:77:8a:9d:a0:fc:a1:fb:d3:90:47:a9:fe:d4:71:de:9b:f0:
         30:7e:f3:6a:0e:18:23:06:8c:67:63:68:9a:36:41:ed:8a:d5:
         0d:7e:4b:1e:3d:30:85:f0:3e:f5:54:2a:77:89:0c:20:79:e5:
         43:05:0b:5c:78:32:e3:47:0a:2f:98:53:20:60:59:e7:66:f2:
         c1:9b:10:36:95:50:58:9b:a7:3d:7d:da:55:23:a0:d9:72:ee:
         7c:6f:ba:59:2f:0f:f1:bf:df:32:0f:b5:c5:c8:20:7d:80:62:
         dc:17:19:64:3d:74:4d:3f:2c:70:23:ef:7a:17:d6:af:72:ea:
         03:c1:00:7b:06:33:20:0b:57:d5:fe:27:e8:df:6c:29:d9:21:
         5f:53:5b:3a:01:c6:4b:53:e8:bb:c9:44:e1:7f:5f:38:73:65:
         5a:ce:90:41:73:14:93:a3:93:ef:b0:29:06:5b:e7:35:c9:c7:
         f1:b3:6c:f3:4d:01:0c:ec:0f:17:88:73:0b:3f:72:d0:a0:50:
         6b:52:b5:49:55:3c:d3:37:98:ac:b7:3e:f9:b4:a6:be:a1:15:
         b7:bc:47:17:fe:b9:9c:11:c5:a6:6a:8e:d3:77:9f:cf:ab:73:
         8e:0c:e4:97:19:5f:45:df:aa:06:3f:e4:1c:c5:03:ce:b3:6c:
         a2:58:0c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:26 2023 by rpki-client on console-fra.rpki-client.org