Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE52000EFA8511EBB437D312D8A014CE.roa
File:                     BE52000EFA8511EBB437D312D8A014CE.roa (raw, json)
Hash identifier:          apeUdxwjDXihw5Ch/Tkba7ZOTcOO25d1IzjIE3pbEVA=
Subject key identifier:   7B:D9:8D:61:2D:0E:A0:44:03:26:51:3F:25:41:22:26:D5:DE:BD:FC
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       088E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE52000EFA8511EBB437D312D8A014CE.roa
Signing time:             Wed 11 Aug 2021 09:23:50 +0000
ROA not before:           Wed 11 Aug 2021 09:23:46 +0000
ROA not after:            Wed 10 Aug 2022 09:23:46 +0000
asID:                     137443
IP address blocks:        45.204.71.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2190 (0x88e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 11 09:23:46 2021 GMT
            Not After : Aug 10 09:23:46 2022 GMT
        Subject: CN=61139726-d1e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:56:9d:21:e9:54:ea:5a:61:de:d9:b3:a0:e5:
                    90:1c:1d:7a:e3:0d:eb:93:7e:fa:fe:2b:d6:76:c8:
                    e9:5e:25:13:b8:66:37:2c:fa:5e:66:73:d6:02:fb:
                    70:03:ac:0c:1a:bb:eb:32:10:97:18:83:83:e5:26:
                    cb:3c:e8:7d:21:b0:b4:82:a4:4a:56:76:0c:17:88:
                    50:4e:1f:22:3c:d1:a4:2e:8e:e1:5b:73:84:13:5e:
                    f6:03:99:c1:ff:22:a2:8d:06:b1:ea:62:c1:df:04:
                    33:d0:81:12:00:80:30:45:f6:c2:b7:97:05:45:46:
                    60:7b:da:40:33:35:cd:f9:19:f5:63:e0:98:9c:17:
                    fd:7e:81:54:36:52:d9:8e:26:c6:7d:00:5c:5a:84:
                    17:7f:2b:df:95:6b:45:c6:53:fb:91:65:93:ab:88:
                    67:4f:a7:bc:32:3c:15:9d:7a:62:e9:a1:54:12:b6:
                    41:af:79:76:90:6a:5b:d2:7e:ea:35:ce:5f:31:39:
                    c7:3c:13:8c:8c:96:67:a8:5d:1e:43:73:b3:ee:6a:
                    24:49:8a:41:8c:85:68:bc:10:11:2f:fe:4e:a8:33:
                    3c:6a:ef:be:02:70:3f:09:17:c5:0a:6e:23:f6:a2:
                    87:42:01:6f:68:c0:bd:88:47:99:6c:6f:ea:20:93:
                    c2:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:D9:8D:61:2D:0E:A0:44:03:26:51:3F:25:41:22:26:D5:DE:BD:FC
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE52000EFA8511EBB437D312D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.204.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:67:38:6a:3b:96:f6:f9:95:36:19:61:c8:81:a2:36:86:c5:
         6b:1d:52:ab:9e:46:4f:a6:5c:b2:6d:0d:a7:87:ac:5a:40:d7:
         25:5e:53:76:60:ef:74:c2:95:2a:46:b2:94:e5:ad:ce:11:94:
         b9:1a:ae:cd:52:6e:3c:7a:80:54:30:b9:59:c2:f5:86:76:ec:
         e7:93:f4:79:59:2a:9a:e0:6e:35:14:41:3a:86:76:4b:57:6c:
         db:d5:f1:aa:5a:ae:e0:1c:b8:cc:67:7e:c7:05:74:31:2c:df:
         c9:ea:a3:ac:0e:6a:5f:7c:8f:f3:42:c8:11:a0:51:bc:03:e4:
         5c:8f:ed:14:95:6a:4b:8a:70:8a:f1:4b:0a:99:ff:d0:79:13:
         01:f5:38:d2:f7:0e:48:42:5b:a6:ca:b1:50:24:d3:02:99:17:
         5b:cc:1b:a1:59:b2:65:eb:9d:b0:91:0d:f5:d1:a2:70:a2:9f:
         ac:f1:6e:b1:07:de:75:3e:0b:0a:72:fe:c3:0a:05:51:4a:e2:
         e3:fb:0e:10:2d:3b:99:e2:2f:6a:08:ce:59:b1:ac:ae:4d:44:
         3d:67:b4:c4:bc:9d:94:81:f4:30:04:6d:d7:83:57:d7:a7:92:
         8b:5c:2b:0b:96:a7:3f:f4:52:1f:17:fc:57:14:e9:2b:5e:d0:
         4c:7d:de:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:26 2023 by rpki-client on console-ams.rpki-client.org