Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C79501D636CE11EC9D4CC24ED8A014CE.roa
File:                     C79501D636CE11EC9D4CC24ED8A014CE.roa (raw, json)
Hash identifier:          wAiIVjN22LbbeJVylLv3z7DBYwlrYYOIyAatXFslfws=
Subject key identifier:   86:D1:D1:41:BB:C5:C2:EB:50:88:4E:59:DD:06:93:CE:6D:58:BD:8B
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0AD8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C79501D636CE11EC9D4CC24ED8A014CE.roa
Signing time:             Wed 27 Oct 2021 02:37:08 +0000
ROA not before:           Wed 27 Oct 2021 02:37:05 +0000
ROA not after:            Thu 27 Oct 2022 02:37:05 +0000
asID:                     58895
IP address blocks:        45.206.164.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2776 (0xad8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 27 02:37:05 2021 GMT
            Not After : Oct 27 02:37:05 2022 GMT
        Subject: CN=6178bb54-3bc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ad:7e:2d:30:d5:05:88:41:7f:3d:2c:6f:05:
                    f2:23:aa:bd:86:12:cd:41:f7:ed:f6:0b:45:5c:96:
                    ec:47:53:02:68:2e:22:b9:63:71:e1:3d:04:fd:5c:
                    a2:87:86:a0:3a:29:b4:05:f3:d0:b2:f8:b6:5a:53:
                    b2:6a:0a:ac:89:15:da:f0:76:a6:b4:81:37:2c:16:
                    5b:11:14:2e:01:ad:6f:67:94:0e:e9:42:6a:bc:25:
                    9d:a2:c2:78:2e:a1:40:5d:7b:1f:93:ec:c3:aa:ea:
                    99:35:69:6f:24:72:7c:b4:6b:08:50:6c:8c:b9:27:
                    b1:b6:f9:4b:fc:9f:32:fb:53:da:af:cb:ac:4c:63:
                    0d:14:69:5d:51:19:be:5a:2e:0d:c4:21:16:4c:f1:
                    a7:ee:59:3c:3d:2f:6f:27:d1:c6:01:29:36:31:fc:
                    5c:7d:d9:e5:b4:28:c3:9e:d9:bb:47:6a:a0:0b:35:
                    5d:43:f4:48:ba:2a:8e:a4:6a:8f:5e:32:74:6c:dd:
                    7b:a1:02:21:27:a2:d7:39:2a:1c:18:10:c9:64:49:
                    c4:6e:66:fb:23:88:bf:46:93:3d:a7:49:2d:ac:dd:
                    5d:ea:a6:71:c8:26:30:86:85:14:df:0c:02:cf:55:
                    b9:b7:be:11:20:7a:cd:42:68:2c:ce:34:66:fd:e8:
                    ec:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:D1:D1:41:BB:C5:C2:EB:50:88:4E:59:DD:06:93:CE:6D:58:BD:8B
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C79501D636CE11EC9D4CC24ED8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.206.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:93:b4:b0:9e:bd:4a:4c:51:d4:f8:83:a4:15:8e:e3:38:45:
         cf:64:82:22:ff:b7:2b:7b:47:aa:f7:f3:c6:3e:49:0a:01:05:
         75:48:17:cf:84:c5:16:b6:e2:b5:05:a6:9d:f3:e1:b0:be:5d:
         28:04:a0:c9:79:3f:4a:02:a5:6e:2c:8c:9c:d9:b0:51:d8:9a:
         f4:9b:f4:22:d2:a5:86:1f:89:0c:1a:76:8b:ee:4d:8e:ca:a9:
         60:98:78:f3:07:aa:d5:0f:43:3c:16:b4:ba:d5:78:70:85:aa:
         ac:65:6b:98:1b:1f:05:46:e0:bd:b2:ed:17:6e:07:d8:9c:4a:
         7e:c2:ba:11:63:29:0d:3e:60:db:5b:26:88:eb:6f:20:46:65:
         e6:59:70:53:a8:89:a5:6d:3b:2f:99:c2:92:ed:89:06:0a:c7:
         53:86:4e:0d:7e:84:8b:b8:7a:3b:1d:76:06:56:be:c7:cd:87:
         98:4e:d4:74:23:0d:6e:df:9b:8d:6c:b0:13:87:60:d5:06:f6:
         c0:c3:be:c1:84:a2:b2:ef:ca:2d:59:d9:48:66:a3:bf:b4:e8:
         3e:df:9d:d5:5c:9f:dc:48:0a:98:2a:43:1d:ad:4f:49:c7:64:
         5d:e0:6c:57:f1:37:2b:2d:96:75:fe:a5:bc:56:eb:ce:4a:a3:
         c6:d0:94:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:29 2023 by rpki-client on console-fra.rpki-client.org