Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D57D971A36EA11EC94908A7DD8A014CE.roa
File:                     D57D971A36EA11EC94908A7DD8A014CE.roa (raw, json)
Hash identifier:          3SgkD7MhNdUFlHvV6gzsojaA+qNsLs0OicSK/t8wGgI=
Subject key identifier:   56:87:5A:16:02:E8:85:03:A4:4A:4E:57:3F:AB:BB:3E:9C:4D:49:EA
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0C03
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D57D971A36EA11EC94908A7DD8A014CE.roa
Signing time:             Wed 27 Oct 2021 05:57:58 +0000
ROA not before:           Wed 27 Oct 2021 05:57:54 +0000
ROA not after:            Thu 27 Oct 2022 05:57:54 +0000
asID:                     58895
IP address blocks:        45.206.62.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3075 (0xc03)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 27 05:57:54 2021 GMT
            Not After : Oct 27 05:57:54 2022 GMT
        Subject: CN=6178ea65-4071
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a5:f8:67:3d:be:23:52:29:a3:c5:e0:b3:74:
                    fe:83:12:6c:bd:7d:e4:3a:79:2e:a2:fa:49:08:b1:
                    e7:fb:2b:56:9a:5d:44:44:e5:d6:27:77:11:63:7f:
                    bb:11:c8:11:15:dc:85:6e:63:91:bb:19:25:98:a2:
                    e2:f4:2f:7f:b4:77:b3:8c:b8:45:44:b1:9e:41:a6:
                    41:7a:d6:f7:b2:71:ea:2f:22:44:49:c7:b4:d9:11:
                    d0:0b:fe:d3:66:eb:9b:13:3e:06:09:f8:a4:00:e6:
                    38:6b:66:d8:27:7c:5c:58:73:ef:ac:9d:e8:b2:0c:
                    9f:18:82:91:8f:0f:4d:c1:7b:e9:d8:19:6f:14:00:
                    7f:88:a7:9b:9b:5a:73:cb:ef:24:75:17:54:a4:0f:
                    3d:5e:04:de:8b:e8:0b:39:99:5f:ae:d0:59:14:b4:
                    8f:18:ba:23:f7:d7:0f:8b:82:d3:dc:55:8f:fd:ea:
                    f7:ae:58:fa:73:c3:e2:51:d3:c5:92:36:1a:3c:ce:
                    66:6d:f5:4f:4d:24:28:7f:c7:8d:cf:f5:82:95:c1:
                    18:14:4e:06:3f:f9:1b:95:0c:ee:4c:1f:cd:4b:ca:
                    cf:4e:a7:61:4d:57:9b:d8:7f:39:26:ea:f4:18:0a:
                    5d:f2:fb:c5:bf:aa:40:06:1e:3d:be:e5:fe:c0:3c:
                    6c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:87:5A:16:02:E8:85:03:A4:4A:4E:57:3F:AB:BB:3E:9C:4D:49:EA
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D57D971A36EA11EC94908A7DD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.206.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:70:d5:c0:c6:40:10:09:f2:4f:bb:c1:25:34:86:a7:be:39:
         32:0d:57:d6:03:67:c3:14:30:f6:6b:9a:4b:56:0a:c3:1e:08:
         e0:4d:e8:ed:de:76:8f:ee:1b:10:7e:18:97:29:f3:a2:fe:b1:
         e7:11:c5:53:a2:a1:b3:e2:4c:1a:58:eb:a2:6e:b7:0a:5f:e9:
         2f:66:ca:b6:5a:bd:14:a0:a7:88:18:42:e5:81:c9:03:6f:c9:
         2c:ae:05:f5:92:24:af:db:bb:b0:28:71:9a:4b:fe:97:5a:31:
         4e:20:f7:ac:65:97:91:6f:6c:cb:21:7a:fa:36:d9:bc:d0:14:
         2d:6b:f8:df:e7:76:ad:d1:03:aa:96:a0:6a:dd:fd:49:2c:46:
         cc:89:b1:34:1b:c2:88:82:53:23:1a:33:c1:78:0c:66:79:15:
         5f:28:51:e4:22:f8:bb:70:c8:5c:4e:fc:32:f5:ef:71:48:f3:
         60:35:53:41:f7:50:63:a3:04:47:e9:3f:b8:8a:1d:36:bc:c3:
         9c:b2:58:de:c0:21:28:f0:03:63:44:d4:39:9b:cf:8a:19:fe:
         96:78:d8:ff:19:a7:57:ad:dd:6a:97:35:fd:e9:2c:ce:3a:e5:
         e9:fd:a2:f4:85:cc:5f:19:cf:76:4e:35:c5:ad:a1:03:05:23:
         3b:a3:a8:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:30 2023 by rpki-client on console-fra.rpki-client.org