Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DFD6FE4636DF11EC8176106CD8A014CE.roa
File:                     DFD6FE4636DF11EC8176106CD8A014CE.roa (raw, json)
Hash identifier:          f3d3/y/GfdaVNeMYCLSKHkhpSOUak6t+bMsWuARWOiE=
Subject key identifier:   F2:19:E3:A4:39:BB:92:19:D3:85:E5:95:10:03:77:A8:88:64:28:F9
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0B87
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DFD6FE4636DF11EC8176106CD8A014CE.roa
Signing time:             Wed 27 Oct 2021 04:39:30 +0000
ROA not before:           Wed 27 Oct 2021 04:39:27 +0000
ROA not after:            Thu 27 Oct 2022 04:39:27 +0000
asID:                     58895
IP address blocks:        45.206.112.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2951 (0xb87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 27 04:39:27 2021 GMT
            Not After : Oct 27 04:39:27 2022 GMT
        Subject: CN=6178d802-f5b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:42:86:95:e9:77:cd:67:77:2d:00:1b:94:5a:
                    fe:3d:46:a3:7f:3c:b1:25:32:10:91:b7:ef:d6:2c:
                    be:cc:2b:74:cc:b3:f2:cb:eb:e4:1f:63:90:2d:71:
                    18:57:8a:d4:99:7d:49:47:3a:38:eb:a2:30:73:83:
                    b0:db:aa:d8:15:87:c0:15:6c:d4:2b:11:07:a9:c8:
                    d1:9a:f4:e0:0a:f2:bb:e1:4a:29:62:a4:c6:02:50:
                    83:e1:6d:d5:8c:68:ba:4b:ee:de:ec:2c:5c:18:e0:
                    ae:33:50:f5:12:3d:d7:85:7b:b8:d1:fe:ac:94:cb:
                    ff:de:fe:ed:3d:ef:6e:1f:25:20:ee:0e:64:15:3c:
                    c2:0e:66:b3:42:a2:42:a8:3c:47:f8:33:1e:09:93:
                    1c:54:0e:56:b1:e2:0d:6b:d7:20:b3:3c:75:05:77:
                    54:30:df:10:b3:4b:f3:c4:42:4f:07:92:c8:3d:58:
                    c8:fe:11:ee:5e:62:1e:12:b0:62:62:e7:84:bf:66:
                    16:e3:46:a5:1a:80:c0:2f:91:c6:06:4f:51:18:de:
                    ac:34:24:c4:b2:41:b4:22:a5:cc:90:a4:e1:f4:a5:
                    f6:ea:8f:30:6e:ed:2a:e1:ca:1c:5d:7a:9c:b5:75:
                    41:04:e8:d4:f1:09:6c:75:a0:c2:73:60:91:0b:ef:
                    5b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:19:E3:A4:39:BB:92:19:D3:85:E5:95:10:03:77:A8:88:64:28:F9
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DFD6FE4636DF11EC8176106CD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.206.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:14:c5:e0:f2:9a:91:b8:61:39:f8:e7:3c:2d:ff:b6:15:13:
         62:a1:94:39:52:3b:d2:ea:b7:69:b6:8f:8c:1a:c5:e2:e1:3f:
         b9:ea:f7:d4:aa:30:35:a2:18:f2:8f:6b:57:7d:96:6d:f7:9d:
         44:24:13:f6:35:f7:13:5c:64:db:2a:33:e9:e1:e1:7c:05:34:
         cf:cb:25:34:bd:c0:a7:be:18:81:ca:c6:34:85:aa:47:16:ad:
         42:4c:b0:a4:bc:25:33:2a:31:36:3c:9e:95:be:7a:ac:f8:97:
         80:fa:b7:af:ab:82:47:c3:98:4d:89:be:14:19:13:21:25:0e:
         04:0a:a0:94:70:fc:6c:fb:6c:fd:f5:ee:1a:af:98:ba:15:4a:
         74:64:2e:7a:da:3b:ac:f4:65:19:a1:23:6d:49:dd:d4:01:ec:
         10:12:1d:11:40:ad:97:06:9e:89:26:6d:8f:8a:42:66:71:43:
         60:a0:04:bb:8e:6c:95:be:c7:3b:f2:e4:fa:92:b3:e6:51:67:
         c0:29:1f:48:00:52:ec:bc:a9:61:d9:c7:8a:1e:64:55:42:ae:
         65:58:61:29:59:a5:99:08:ad:6c:8e:b8:b6:05:3c:a1:1d:ce:
         aa:71:a4:71:54:2f:d3:6b:02:86:af:c1:d4:2c:15:ae:76:2a:
         54:cf:29:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:30 2023 by rpki-client on console-fra.rpki-client.org