Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B4FCCC8436DD11ECAB18D667D8A014CE.roa
File:                     B4FCCC8436DD11ECAB18D667D8A014CE.roa (raw, json)
Hash identifier:          xi56EXa/rlfc4t7yu4ficfL/QzN5K70zMnWEpq2CJnw=
Subject key identifier:   28:B2:CF:8A:78:69:C0:8F:60:CC:79:A9:12:56:32:62:47:CB:C9:3F
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0B24
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B4FCCC8436DD11ECAB18D667D8A014CE.roa
Signing time:             Wed 27 Oct 2021 04:23:59 +0000
ROA not before:           Wed 27 Oct 2021 04:23:56 +0000
ROA not after:            Thu 27 Oct 2022 04:23:56 +0000
asID:                     58895
IP address blocks:        45.206.86.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2852 (0xb24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 27 04:23:56 2021 GMT
            Not After : Oct 27 04:23:56 2022 GMT
        Subject: CN=6178d45f-1e0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:31:29:c4:9c:c2:92:b2:f7:ff:52:d8:93:54:
                    ef:59:3c:eb:8b:60:32:78:18:b9:00:df:be:d1:b0:
                    9b:84:4b:cc:7f:0d:2e:7f:e3:78:97:bd:1e:8c:49:
                    47:a5:07:cf:09:c8:ee:d1:fa:d8:3a:39:de:1a:2b:
                    87:cc:4e:6d:18:bb:fa:c7:9d:2a:09:e9:38:73:23:
                    6e:20:84:e3:51:06:57:fb:42:49:61:5f:18:21:5f:
                    31:23:9d:47:33:0d:e8:b3:7d:2b:e0:4b:95:ae:22:
                    47:79:0f:f9:44:be:a3:8f:41:10:42:b9:d7:fa:a5:
                    72:d3:0c:bc:33:9f:72:28:4d:fe:91:1e:98:8f:75:
                    12:48:9f:17:9a:d5:d1:18:00:33:c2:78:32:3d:6a:
                    63:ba:2c:13:0a:36:d0:2e:bc:cb:6d:6f:1b:25:9e:
                    b9:6b:71:42:f6:a6:8e:49:82:06:1a:31:62:0c:f7:
                    dc:d6:0b:47:2e:3b:6c:fc:b8:a3:d3:9d:6f:3b:6b:
                    00:7a:ef:c9:da:9f:61:98:6c:4b:14:70:a6:b8:ca:
                    73:ba:0c:02:88:3a:43:32:39:fb:bd:d4:03:2d:08:
                    28:f5:67:12:ec:1f:88:2b:75:0e:a6:21:69:be:a6:
                    00:bb:1d:39:ab:54:1a:ba:84:74:55:61:7a:7d:7f:
                    29:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:B2:CF:8A:78:69:C0:8F:60:CC:79:A9:12:56:32:62:47:CB:C9:3F
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B4FCCC8436DD11ECAB18D667D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.206.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:61:d8:c9:31:d8:62:40:a3:0b:97:33:2d:75:e7:03:a7:b2:
         30:a4:05:19:8a:f2:3f:9a:e5:02:d8:3a:b6:74:8a:42:62:6b:
         16:ac:a9:f0:6f:08:7b:81:c6:c3:56:1a:8e:c4:ac:3b:f6:16:
         60:ea:70:4c:d4:e9:31:ee:79:ea:43:8d:41:e5:37:e9:71:4a:
         a5:34:70:7f:64:2e:3f:86:65:e0:f0:51:5e:21:f7:bc:78:b3:
         2d:13:ce:fe:18:f8:19:02:d6:0e:dd:9a:4f:6c:67:5b:99:bf:
         b3:27:5f:50:3e:6f:02:ff:99:f4:69:cb:8d:37:a9:a0:2e:80:
         52:89:dc:d4:7d:c1:e5:a7:fe:77:9b:ad:e0:3f:68:f5:c4:1f:
         14:42:f6:f8:e4:66:a4:63:0b:82:d4:68:5e:60:e5:29:a0:9a:
         0e:16:e7:ac:c6:d4:49:06:94:c1:1f:82:93:8f:53:c7:60:f1:
         8a:74:7d:48:d6:19:b6:11:0c:7f:14:50:ba:00:42:66:7e:51:
         20:da:23:22:11:1c:14:78:5c:0b:22:f3:33:be:7a:e0:5f:3e:
         0a:09:c4:8d:fb:a5:e9:6d:2f:a1:04:29:da:fd:93:97:84:d1:
         dd:7f:d4:34:5b:13:23:27:11:dd:03:5b:c2:ce:70:9d:1d:db:
         64:9b:64:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:24 2023 by rpki-client on console-ams.rpki-client.org