Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C7EF6CC636CD11EC9A04A24CD8A014CE.roa
File:                     C7EF6CC636CD11EC9A04A24CD8A014CE.roa (raw, json)
Hash identifier:          ZliEL/30yNRHpYhM0TsaJ06r4PilCyR6HIDBp+T+6e4=
Subject key identifier:   76:8F:C7:34:80:D9:21:29:20:79:D5:AB:F7:83:04:E9:33:E2:01:F2
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0A9D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C7EF6CC636CD11EC9A04A24CD8A014CE.roa
Signing time:             Wed 27 Oct 2021 02:29:59 +0000
ROA not before:           Wed 27 Oct 2021 02:29:56 +0000
ROA not after:            Thu 27 Oct 2022 02:29:56 +0000
asID:                     58895
IP address blocks:        45.206.207.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2717 (0xa9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 27 02:29:56 2021 GMT
            Not After : Oct 27 02:29:56 2022 GMT
        Subject: CN=6178b9a7-3142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:6d:7f:1c:22:45:5c:68:14:82:ea:6a:52:b8:
                    83:ce:48:5f:35:b6:42:8c:d2:9a:28:8e:68:78:e9:
                    28:7f:1e:47:f5:2c:ef:28:c3:58:15:98:b7:87:8e:
                    fe:3d:26:b5:9f:23:67:55:b7:b9:d6:34:3c:af:ab:
                    db:74:d6:43:1f:ea:0f:75:26:e5:7d:2c:05:5d:42:
                    cb:38:e7:1b:09:74:c0:12:53:5c:4e:d7:81:d4:7f:
                    c5:59:24:c8:79:bf:2e:2d:ca:f2:22:95:83:28:97:
                    21:21:06:ec:0b:83:65:e5:29:2b:b0:07:21:3d:d9:
                    68:c2:46:c5:90:e6:fe:14:ea:27:09:65:7e:9e:35:
                    53:b8:0f:97:03:5c:6a:aa:78:7b:b2:17:75:0b:89:
                    17:bd:35:31:6b:c1:86:d0:67:32:d5:54:ce:c6:4f:
                    ff:95:05:56:a1:e0:b6:7a:2d:31:e6:0a:39:ae:14:
                    c1:c5:8c:db:27:74:b8:08:40:0c:3f:b4:2f:7c:c2:
                    7e:52:ca:09:c8:1f:6e:cb:7f:e9:6d:1c:47:61:e6:
                    54:f3:52:1c:8e:bd:21:a7:87:4f:f2:53:fa:62:4f:
                    52:a7:10:0a:2b:fc:f1:38:72:e6:9f:74:5f:83:ff:
                    fd:4e:af:37:ab:67:7a:6a:20:36:44:f2:e8:9c:25:
                    70:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:8F:C7:34:80:D9:21:29:20:79:D5:AB:F7:83:04:E9:33:E2:01:F2
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C7EF6CC636CD11EC9A04A24CD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.206.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:cb:31:a4:25:3f:ee:02:76:6f:db:97:87:94:4c:40:72:2c:
         0e:a7:c3:08:12:82:dd:15:3e:8d:70:57:80:b5:f4:f4:65:9a:
         e7:db:90:67:5c:2b:a5:62:40:08:58:75:35:cf:63:9a:33:0e:
         76:0e:c0:f0:db:02:67:a5:44:7f:ef:d1:7f:58:0e:6d:df:d1:
         4d:dc:29:bd:94:07:b5:e4:a0:e9:48:22:f1:29:07:4e:bd:ac:
         9c:11:a1:a4:29:cf:36:88:d0:de:5d:cf:1f:c5:66:ed:84:fa:
         53:e2:4f:92:3c:f8:47:bb:17:f0:4e:c4:b2:b7:a5:af:ff:37:
         4a:95:fa:80:40:e4:42:43:6d:d1:06:27:0d:3b:89:af:db:0d:
         45:e6:22:11:0f:e5:16:3c:36:91:0a:5a:45:31:02:03:87:37:
         c3:60:be:f6:7a:9b:e4:99:cb:65:1c:d7:17:8a:5f:85:45:71:
         3b:df:9d:ad:b4:29:1c:9f:e6:97:11:af:ba:c9:74:83:88:b9:
         49:47:6b:dd:fa:e6:8f:c4:d7:e5:69:ec:a9:87:4b:65:6a:f1:
         87:73:f7:45:5a:d6:a5:f2:9f:3e:cc:0b:a2:23:26:b5:5b:c6:
         2d:72:e4:25:53:7a:ad:16:65:39:5b:02:04:91:c0:95:a5:3e:
         4f:87:5a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:27 2023 by rpki-client on console-ams.rpki-client.org