Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C51EA2288F1011ECA77DED865A40D577.roa
File:                     C51EA2288F1011ECA77DED865A40D577.roa (raw, json)
Hash identifier:          hZimgFWN2UC7zdlZ1FNBWU2tFG3ahJ2jkWuITrd5iy4=
Subject key identifier:   B5:AA:81:E7:B9:C9:62:A5:A1:28:84:4D:AB:7B:01:05:79:6C:A3:00
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       11E0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C51EA2288F1011ECA77DED865A40D577.roa
Signing time:             Wed 16 Feb 2022 10:11:13 +0000
ROA not before:           Wed 16 Feb 2022 10:11:08 +0000
ROA not after:            Sat 31 Dec 2022 10:11:08 +0000
asID:                     138910
IP address blocks:        45.206.114.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4576 (0x11e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Feb 16 10:11:08 2022 GMT
            Not After : Dec 31 10:11:08 2022 GMT
        Subject: CN=620ccdc1-0e60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:63:08:80:4b:b2:b5:f2:9e:eb:60:8e:08:ea:
                    d3:d2:7a:aa:62:6c:cd:09:dd:c8:55:e5:45:36:74:
                    71:90:62:99:e7:16:48:41:3f:9e:be:1c:b5:d0:bf:
                    02:a2:eb:cd:6f:95:af:89:8c:c9:d1:c0:cc:07:64:
                    80:55:aa:42:7e:ad:3a:21:93:c3:59:36:0d:24:a2:
                    77:d5:12:29:51:b7:b4:e2:b0:91:a4:3b:f0:76:48:
                    8b:3d:6c:75:52:61:64:a3:e0:5f:33:8f:9b:c5:0d:
                    94:87:16:87:de:27:53:f9:05:2d:98:94:ae:2c:2b:
                    30:be:73:83:21:21:b0:1f:52:8b:ef:c9:0c:88:de:
                    42:6e:d4:93:a2:17:aa:7a:0d:8f:4e:ba:30:14:65:
                    4b:90:20:01:07:da:e3:f6:83:ad:50:d9:48:7c:f2:
                    92:df:16:58:18:9d:b2:7d:f8:a9:74:47:3a:0f:52:
                    ec:bc:4a:f1:ae:4e:2d:e6:7d:3e:62:6c:f8:9c:dc:
                    27:75:45:ee:a4:51:8d:ba:ff:51:f0:0c:3d:99:50:
                    54:e6:c3:69:9e:a8:78:b6:6f:bd:0b:7b:3f:eb:d5:
                    0c:0f:3b:b4:d9:2b:23:8f:1f:2e:8d:fa:e9:1c:3d:
                    08:86:b5:7e:26:52:45:15:8b:04:d3:ff:2a:47:70:
                    99:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:AA:81:E7:B9:C9:62:A5:A1:28:84:4D:AB:7B:01:05:79:6C:A3:00
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C51EA2288F1011ECA77DED865A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.206.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:67:7f:0e:f5:be:3f:a9:d5:06:20:44:7d:e0:fa:4e:a1:e3:
         76:ba:78:ea:ba:4c:75:41:8e:75:b1:97:fd:9e:5e:24:1b:11:
         c1:82:64:a2:45:bb:04:e9:02:d8:86:4c:a2:b1:ae:68:36:86:
         8e:1a:6b:2c:3a:52:4e:b8:29:ad:42:bf:93:8d:02:0e:c0:6a:
         e6:a5:94:00:77:fe:df:0c:f5:11:af:45:5a:60:3b:9b:e4:0f:
         5c:04:da:18:e5:99:31:8a:18:3a:cb:8a:c7:ea:13:e4:56:e1:
         61:55:b7:b2:e3:bb:53:ad:30:88:bd:c7:f2:bc:4d:f9:94:2d:
         8f:15:45:41:eb:2e:c0:02:96:a0:21:5e:21:92:c2:e5:e5:1c:
         44:fb:71:ac:98:f9:42:a5:f5:42:14:f3:80:98:1b:85:f1:29:
         0c:9c:13:d1:3f:59:cb:e6:92:ce:eb:99:f3:d6:1a:0e:5a:e4:
         9c:22:93:d2:f4:fd:16:f1:c1:e7:e5:ef:64:92:e5:cf:66:23:
         c7:c7:b6:89:ff:09:b4:54:57:55:4d:88:b2:90:c5:a4:f4:0e:
         7d:fc:d1:5c:a5:ca:c1:62:26:19:00:01:16:e6:1c:85:e9:c9:
         2f:cf:31:be:3c:ba:77:69:24:f4:f7:56:cc:a9:c9:0c:86:9d:
         6f:be:da:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:29 2023 by rpki-client on console-fra.rpki-client.org