Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA058BCC36DC11ECB6CD0766D8A014CE.roa
File:                     BA058BCC36DC11ECB6CD0766D8A014CE.roa (raw, json)
Hash identifier:          Of2pykovN1EHMePl9bNohjf+J5mPfQWHS6LAW0vKZVg=
Subject key identifier:   CE:1B:6F:E3:BA:0A:85:CD:84:24:A1:69:AF:09:45:38:6C:95:23:44
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0B00
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA058BCC36DC11ECB6CD0766D8A014CE.roa
Signing time:             Wed 27 Oct 2021 04:16:59 +0000
ROA not before:           Wed 27 Oct 2021 04:16:54 +0000
ROA not after:            Thu 27 Oct 2022 04:16:54 +0000
asID:                     58895
IP address blocks:        45.206.71.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2816 (0xb00)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 27 04:16:54 2021 GMT
            Not After : Oct 27 04:16:54 2022 GMT
        Subject: CN=6178d2ba-061f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:84:51:5c:de:57:50:51:41:84:01:c5:10:38:
                    67:38:ce:f3:4d:c9:4c:0b:38:15:ac:d1:2f:a6:0b:
                    ea:ed:9c:4e:07:ad:0d:fb:96:0b:83:e9:36:a3:99:
                    00:62:d3:fb:c5:76:ae:40:5c:3b:b4:06:5c:20:a1:
                    52:cf:53:c9:ef:41:2c:2f:d0:aa:14:b2:2a:af:70:
                    0e:f0:d2:40:be:8d:f1:58:91:31:ab:e7:ae:44:f7:
                    ab:15:38:20:1b:e2:76:0a:ac:87:78:b3:23:db:12:
                    80:c8:03:72:39:b7:9a:aa:8b:d1:e9:b4:cd:0a:53:
                    a4:ec:63:04:a8:dc:72:40:db:ed:64:49:2b:21:96:
                    47:21:6d:5c:0f:06:a6:e7:3b:9d:bd:a7:52:99:d8:
                    c6:e5:d6:99:43:f8:aa:d9:a3:9e:33:a8:de:9e:1b:
                    bc:6c:22:94:1e:77:4e:29:45:63:6f:1b:0a:98:9e:
                    c1:c5:ba:7b:30:c1:01:69:81:99:2b:4b:7a:3c:31:
                    24:5d:a2:36:0f:bc:67:28:32:7c:6a:c9:0e:8d:04:
                    82:31:f2:13:5b:50:02:19:b2:13:65:6e:93:b3:a3:
                    c3:a4:66:50:5a:d9:e8:bc:bd:8c:74:45:fe:2e:92:
                    ca:0d:54:28:3e:8d:98:e3:5f:9d:04:b7:14:38:1d:
                    cf:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:1B:6F:E3:BA:0A:85:CD:84:24:A1:69:AF:09:45:38:6C:95:23:44
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA058BCC36DC11ECB6CD0766D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.206.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:ec:39:94:24:a5:3d:fa:61:37:a8:df:88:7d:19:14:32:6d:
         00:1a:36:d8:5e:5e:81:1c:6e:5d:a9:2d:2a:8e:83:27:be:59:
         a6:a8:52:b2:e1:7d:9c:71:e4:7d:de:e3:d8:71:ab:5f:bc:a7:
         60:2c:25:06:2b:6d:a7:0a:7d:f4:fa:e0:75:d7:ae:04:8d:0a:
         ed:fc:d3:77:82:df:1b:8d:b2:5e:2c:f2:44:f9:b8:d7:9c:95:
         0c:84:a3:ac:d5:de:79:a3:52:0b:92:19:a9:58:7a:16:0c:2c:
         a3:14:b9:57:86:df:b2:81:da:d8:bf:d9:e7:4f:bb:2b:90:3c:
         ce:46:eb:54:3c:6d:c6:bc:5b:90:83:68:1c:af:21:20:54:0e:
         e1:3d:81:2f:5a:83:1c:6c:4d:c6:72:a8:d8:6a:09:a2:c7:e4:
         19:11:7a:11:79:26:ea:21:1f:8f:8d:43:33:38:31:cb:8a:cc:
         24:74:27:a1:5f:d5:62:76:48:80:35:8c:61:39:f2:68:47:69:
         f4:24:f0:ad:b8:49:15:8e:86:24:49:06:3a:84:79:1e:f9:0c:
         90:d3:cd:df:f3:ae:d3:89:8e:5d:cc:4c:01:41:69:19:20:25:
         6c:b1:a7:cb:eb:5a:27:c9:e4:4e:54:a0:69:60:86:ba:db:c2:
         c0:1f:80:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:24 2023 by rpki-client on console-ams.rpki-client.org