Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DFB5ADEC36DD11ECB9094368D8A014CE.roa
File:                     DFB5ADEC36DD11ECB9094368D8A014CE.roa (raw, json)
Hash identifier:          kzk7HyTXcXbzdNKpmejQxh/qvOhCF9zjuyQ3AhflDt0=
Subject key identifier:   ED:6E:A2:1A:1F:57:01:B9:E3:0F:D8:AC:07:3C:E8:15:AC:25:A6:68
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0B2C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DFB5ADEC36DD11ECB9094368D8A014CE.roa
Signing time:             Wed 27 Oct 2021 04:25:11 +0000
ROA not before:           Wed 27 Oct 2021 04:25:08 +0000
ROA not after:            Thu 27 Oct 2022 04:25:08 +0000
asID:                     58895
IP address blocks:        45.206.88.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2860 (0xb2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 27 04:25:08 2021 GMT
            Not After : Oct 27 04:25:08 2022 GMT
        Subject: CN=6178d4a7-8093
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:4c:7a:61:45:87:fa:4a:22:2c:18:c2:58:79:
                    a1:9b:7f:0b:3f:2e:b2:0e:23:55:e1:ac:95:fa:2a:
                    a7:a1:46:39:b0:e1:a3:12:73:68:74:7d:a3:ab:3f:
                    38:bd:d1:30:05:7c:42:16:4b:43:e4:a3:4a:0d:8a:
                    23:24:2b:3c:63:82:e8:88:3c:eb:0e:b5:ea:c0:8d:
                    f2:b3:45:4d:fa:06:b2:a6:bb:b7:e8:2c:80:d4:39:
                    8b:96:a5:f8:80:bf:79:b2:01:ef:ca:1e:e3:02:fa:
                    72:ee:75:28:8a:5a:f2:28:04:d4:99:6c:ab:15:6c:
                    d8:b4:ba:99:c9:57:66:43:17:c1:92:7e:f2:89:22:
                    63:bd:93:10:3a:c3:ee:82:ca:e0:ae:dc:cd:c7:56:
                    02:58:ba:fa:12:1f:ed:e0:b9:c6:c9:cc:fd:ec:54:
                    e9:74:2a:59:a6:05:33:48:fd:02:61:28:32:54:01:
                    12:83:48:c8:e7:46:2d:f1:3a:e0:b2:24:34:14:d5:
                    10:c2:e3:56:7c:80:2b:97:15:0f:65:89:7a:f1:3f:
                    39:cc:b5:3e:a1:86:1c:cd:c5:53:31:b6:7b:e5:e5:
                    bb:8a:ec:b7:bf:cb:43:68:94:af:90:ad:92:b7:79:
                    31:27:85:fd:94:3b:74:3b:56:b6:df:63:30:a4:53:
                    46:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:6E:A2:1A:1F:57:01:B9:E3:0F:D8:AC:07:3C:E8:15:AC:25:A6:68
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DFB5ADEC36DD11ECB9094368D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.206.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:56:00:14:d1:d3:65:81:b5:40:f5:29:2c:2e:b0:cd:62:2b:
         8c:48:5f:77:b3:bb:39:26:23:02:e7:8a:51:cc:ea:85:da:79:
         f5:a2:5a:4b:44:a6:7b:2d:fb:74:8a:c2:f4:ad:33:6d:59:6a:
         8d:c2:23:2b:f4:c6:ba:7b:10:41:18:5b:14:22:e5:2a:b2:20:
         c0:28:54:d3:0f:56:89:ae:59:4a:f2:da:4e:2d:24:9f:b9:f8:
         bd:18:cb:63:23:89:b0:c9:23:57:a9:3c:c8:94:40:c9:78:cf:
         4f:87:54:e2:e6:58:16:fc:8a:32:78:32:41:85:82:c3:7a:86:
         4a:16:61:87:a6:14:28:d4:a5:b3:00:4d:b8:64:e1:80:25:0d:
         4d:5b:9d:a2:04:4c:24:e6:7a:33:ad:3c:0a:0e:84:28:fe:7d:
         71:b5:e9:9d:2c:36:47:a8:6e:b8:9d:fc:cc:f4:2c:8c:c1:a8:
         62:8f:ae:ea:a0:85:6a:32:48:77:1d:9e:a4:4c:ea:5c:85:6b:
         c2:5e:9a:62:eb:eb:68:5d:35:09:52:ee:15:f2:8f:f6:f8:a7:
         e8:56:5b:f5:72:2d:db:50:ca:7b:39:dd:01:74:53:15:9a:3a:
         26:10:83:79:89:38:d8:17:a7:cf:de:b4:dd:10:d8:d8:9c:59:
         11:14:e4:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:28 2023 by rpki-client on console-ams.rpki-client.org