Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF90C28636EB11ECB48AEF00D8A014CE.roa
File:                     CF90C28636EB11ECB48AEF00D8A014CE.roa (raw, json)
Hash identifier:          pMVgc6boXVxLmryzYDOc6TlM8tmY//XfV+AFJT2JRSU=
Subject key identifier:   EE:5F:6C:5B:0E:A0:78:D4:83:7C:17:F5:0A:DA:93:58:DC:A7:FB:66
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0C2E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF90C28636EB11ECB48AEF00D8A014CE.roa
Signing time:             Wed 27 Oct 2021 06:04:57 +0000
ROA not before:           Wed 27 Oct 2021 06:04:53 +0000
ROA not after:            Thu 27 Oct 2022 06:04:53 +0000
asID:                     58895
IP address blocks:        45.206.246.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3118 (0xc2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 27 06:04:53 2021 GMT
            Not After : Oct 27 06:04:53 2022 GMT
        Subject: CN=6178ec09-4ba7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8d:67:c3:e2:60:eb:9d:29:92:79:b2:29:20:
                    b7:03:fe:86:4c:8c:8a:0f:7a:b7:e1:1a:f6:a2:af:
                    1b:3e:86:e6:f6:70:dd:14:a8:ff:45:68:6c:7f:c0:
                    a5:3d:a8:46:a0:de:4d:0f:ba:e0:c1:fa:ba:8b:30:
                    37:b4:ad:13:c2:6d:f8:d8:81:4d:e0:83:42:e1:79:
                    82:05:0f:04:1d:79:20:cc:ec:2b:ce:08:64:07:b3:
                    a9:d7:51:60:7d:0b:59:a0:f6:d7:69:b0:cf:1b:30:
                    ae:72:e9:86:97:9e:ff:aa:0d:c0:24:ff:5c:c9:bb:
                    3c:e1:81:a3:40:8a:8c:02:36:43:11:90:1b:91:3c:
                    4e:b6:07:2c:c8:8f:97:4e:e6:cc:9b:f2:34:a4:ad:
                    7c:44:d1:3a:2e:cd:d1:2d:da:28:9d:1c:ed:a0:60:
                    c3:79:6f:bf:6a:a5:17:72:8a:82:d4:eb:68:ea:54:
                    3b:91:58:5e:2c:84:57:50:2e:13:94:d8:28:1e:8d:
                    6a:01:29:b8:80:07:d1:19:61:25:d0:da:fa:d0:08:
                    03:f5:6e:07:44:b7:a3:7c:47:9f:99:49:f7:a9:9c:
                    39:a8:13:04:eb:7a:fd:01:bb:cd:13:ae:1c:c4:00:
                    47:df:08:f0:23:be:c5:71:49:36:56:16:96:3f:67:
                    d0:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:5F:6C:5B:0E:A0:78:D4:83:7C:17:F5:0A:DA:93:58:DC:A7:FB:66
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF90C28636EB11ECB48AEF00D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.206.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:ae:4f:db:75:d3:1f:06:d4:d2:d1:82:7c:40:af:87:72:7a:
         15:1b:a7:2e:07:a7:66:f0:cb:e1:cd:74:47:76:36:df:10:da:
         a8:f5:ec:46:5b:6e:31:e6:18:3b:93:4a:32:d6:c0:ac:b2:2f:
         51:e5:38:e7:89:32:67:4f:e1:c4:d6:43:ff:ee:7a:90:4f:68:
         d5:7f:5d:d1:d2:da:20:b0:39:28:93:e5:84:35:05:7d:a6:09:
         e4:06:73:2c:c2:4e:9e:33:9a:0e:3a:a1:95:88:30:76:07:05:
         2e:0a:10:b9:2a:93:2a:1f:72:0f:64:40:8a:95:4a:d7:38:f9:
         a1:f1:8d:13:fb:80:16:6a:1f:20:1f:c5:f1:18:b0:b1:1b:10:
         b3:48:be:84:44:ef:5c:d8:97:e1:40:f7:2a:df:8a:7d:33:ff:
         82:f1:68:ee:5f:fa:08:05:06:de:96:b3:fb:a0:99:ee:26:d9:
         ac:e5:ab:f3:52:0d:45:1d:f3:d7:47:eb:f2:06:63:73:b5:cd:
         b2:bb:4f:ce:55:31:e5:2f:6f:62:0d:15:7e:1c:e9:7a:e4:d4:
         32:e9:a6:2b:00:40:05:01:73:8b:d3:2b:04:45:c3:24:63:82:
         25:30:33:84:13:3a:30:2f:a6:82:85:0f:d5:6d:96:9c:59:a8:
         d4:a6:7a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:27 2023 by rpki-client on console-ams.rpki-client.org