Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B5A2EED636D611EC8642085DD8A014CE.roa
File:                     B5A2EED636D611EC8642085DD8A014CE.roa (raw, json)
Hash identifier:          R6u3QwfZ/XwChFMSqDBSYC2X2+7kjdorFVNCVfltC94=
Subject key identifier:   15:10:23:65:7C:7C:1F:52:51:65:3F:91:7B:22:05:8F:C2:92:12:BB
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0AF8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B5A2EED636D611EC8642085DD8A014CE.roa
Signing time:             Wed 27 Oct 2021 03:33:54 +0000
ROA not before:           Wed 27 Oct 2021 03:33:50 +0000
ROA not after:            Thu 27 Oct 2022 03:33:50 +0000
asID:                     58895
IP address blocks:        45.206.41.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2808 (0xaf8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 27 03:33:50 2021 GMT
            Not After : Oct 27 03:33:50 2022 GMT
        Subject: CN=6178c8a2-4801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:62:de:a1:84:87:48:ab:c4:2b:75:70:cf:b1:
                    19:bd:f1:b3:0f:85:51:53:29:46:e2:2f:11:28:bb:
                    d5:07:41:d9:0c:d3:ba:c8:53:15:29:57:17:89:31:
                    3f:83:97:ab:26:3c:d0:c0:f8:e2:9c:31:e0:6c:74:
                    67:69:86:e1:1c:66:e5:eb:f6:d8:f4:8b:69:c4:18:
                    51:d1:a3:b7:65:a6:f5:64:91:d8:c9:5d:72:1a:40:
                    61:0e:f0:74:90:34:1d:fe:fc:a7:85:f7:25:67:81:
                    64:29:66:a5:c3:c2:d8:a5:7d:92:de:8f:33:8b:d8:
                    7a:72:ec:19:8f:3e:ef:de:75:23:16:80:f1:08:7e:
                    c1:b2:cc:7c:ac:74:29:0b:a1:86:ad:62:d6:f0:15:
                    a3:7e:da:71:22:ed:d4:c2:50:bf:6c:b3:b0:a3:95:
                    dd:41:99:48:95:32:a2:01:cf:02:41:6d:52:05:94:
                    fe:e0:06:37:75:9b:41:1b:2c:c9:8a:d9:62:79:7a:
                    a3:f3:81:1a:ed:85:10:bc:97:93:51:67:58:89:52:
                    32:2b:32:5a:4e:d1:3b:0b:90:2a:17:7a:12:e8:95:
                    82:35:e8:be:72:3a:73:35:58:6c:f7:c1:18:69:b3:
                    a2:fa:1b:af:96:be:ab:d6:5f:0d:88:a4:cf:c9:7c:
                    cd:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:10:23:65:7C:7C:1F:52:51:65:3F:91:7B:22:05:8F:C2:92:12:BB
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B5A2EED636D611EC8642085DD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.206.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:cf:bb:4e:bf:01:e2:c5:a4:be:b7:49:90:a6:e7:be:9d:1a:
         66:ff:fc:37:cb:d2:77:c5:a0:7e:6f:a3:36:ba:0c:f1:8e:da:
         4a:cf:44:55:03:3f:32:82:1b:0a:65:91:2b:5e:5e:9d:ed:5c:
         66:eb:2b:a2:81:0b:5b:ab:62:7c:58:27:a8:8a:80:c1:8c:39:
         73:f3:ba:1c:96:04:95:d4:cc:44:91:21:8f:99:a2:e4:80:73:
         1b:d6:d8:5a:54:f7:48:b5:d6:d6:7c:f1:e3:5d:c0:bf:07:73:
         42:0a:c0:f2:ef:ec:84:b2:f0:d0:e7:12:25:c9:67:fe:70:e0:
         c3:8c:4b:13:10:1c:6f:3d:97:c5:6e:d1:94:01:6e:60:19:01:
         2d:c8:88:19:13:6c:bb:f0:bf:44:38:9a:10:22:87:e0:60:56:
         37:03:15:66:da:f9:7c:b9:c9:ed:19:03:78:e9:0a:cf:c6:c4:
         85:bf:da:f9:ff:c0:db:5d:0e:de:89:b0:11:4f:76:ff:bd:8c:
         a5:74:a3:3b:66:f6:bd:67:3c:ec:07:f1:c1:4d:01:91:c0:9b:
         f5:cd:c5:db:cc:78:86:0f:e8:fd:03:67:b1:ea:e8:97:67:08:
         e7:b6:cc:dd:c0:b3:d7:34:b8:83:97:a5:3d:e5:6a:ac:d2:70:
         39:2c:b9:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:26 2023 by rpki-client on console-fra.rpki-client.org