Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E664EFAA128511EF812E5161017001B1.roa
File:                     E664EFAA128511EF812E5161017001B1.roa (raw, json)
Hash identifier:          euicry95O8czI/GYN/eWUHvHNzxKisrb/9U1L/aBPe4=
Subject key identifier:   ED:AC:42:1A:72:41:85:F2:59:44:15:D3:47:BD:6C:FE:7F:57:9C:B1
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       8A53
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E664EFAA128511EF812E5161017001B1.roa
Signing time:             Wed 15 May 2024 06:39:38 +0000
ROA not before:           Wed 15 May 2024 06:39:34 +0000
ROA not after:            Sun 26 May 2024 06:39:34 +0000
asID:                     142062
IP address blocks:        45.204.94.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35411 (0x8a53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: May 15 06:39:34 2024 GMT
            Not After : May 26 06:39:34 2024 GMT
        Subject: CN=664458aa-ecc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:45:f3:e9:02:e4:ce:fc:af:73:dd:76:70:66:
                    d4:35:77:51:84:78:4b:bd:a7:2c:b7:96:01:99:bf:
                    c3:1c:59:c3:aa:e7:d1:9b:f1:84:e7:c4:6c:d9:38:
                    e2:39:3f:27:53:af:ca:fb:ea:f4:71:22:d4:45:7c:
                    34:6e:9b:89:fe:f0:a9:56:38:f4:07:fe:09:99:c6:
                    74:02:5d:58:95:36:a2:ce:a2:77:6a:b1:61:28:29:
                    82:4b:5a:b1:d2:37:12:b6:7b:c7:00:f8:2f:8f:8e:
                    45:19:87:97:96:f1:75:cb:ad:27:fa:9f:10:d2:74:
                    6a:23:d5:d7:f7:90:94:ed:18:b7:c3:6f:a1:06:7c:
                    62:42:ca:32:b0:1c:99:b3:b7:08:dd:5f:3d:14:63:
                    bd:49:1a:bb:20:25:32:14:16:9f:2f:e0:37:87:ac:
                    88:fa:3d:a2:d8:a4:fa:da:60:d6:51:e3:a5:04:66:
                    55:b4:94:b3:32:bf:a4:16:1f:04:5c:9d:aa:49:0b:
                    93:02:ad:7a:06:df:3c:19:bc:c1:ae:eb:af:a2:79:
                    e6:3b:b5:12:16:eb:de:73:65:cb:9b:a6:f0:a6:fc:
                    fe:0e:cf:ab:46:4e:5e:82:7a:5d:69:7e:df:a9:18:
                    37:5a:25:b6:e3:d8:ed:b9:11:83:08:c2:ba:52:a0:
                    9a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:AC:42:1A:72:41:85:F2:59:44:15:D3:47:BD:6C:FE:7F:57:9C:B1
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E664EFAA128511EF812E5161017001B1.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.204.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:3f:23:80:47:31:46:42:11:4c:0e:4f:ee:56:d4:4c:f4:0b:
         cb:ec:79:6f:5f:94:c0:14:c3:02:a4:9d:8b:9a:e5:10:dc:57:
         4e:56:83:fb:a8:ff:fd:43:7f:92:dd:7f:99:53:1e:d9:c3:4a:
         79:91:89:f4:f5:dd:ad:b8:22:08:21:85:68:c2:eb:bf:07:5d:
         07:43:f4:e3:61:c9:e5:b3:a7:fd:ef:b9:4c:20:7f:d6:1a:45:
         09:43:12:71:7a:6d:b8:42:48:e8:0f:dc:63:55:13:16:0e:bf:
         06:07:a1:1f:a1:d1:fd:51:d6:0d:f7:d1:79:fc:60:13:01:ea:
         1c:e7:c1:b6:3e:42:90:45:5d:0c:ed:df:a3:8e:50:3d:7f:81:
         68:25:72:3f:a6:4b:b1:d5:73:47:26:88:01:8f:30:1a:b9:f7:
         e4:99:63:9e:5a:9c:da:a4:a7:6a:f0:23:1d:7d:10:97:51:a6:
         ac:d5:25:26:e0:4e:54:1a:70:85:33:41:c5:87:da:98:8b:9b:
         24:0e:d1:86:59:c6:ee:74:04:24:00:f9:60:c6:d8:b4:01:e6:
         00:ef:12:2b:e3:45:7e:05:ee:73:d3:9c:37:90:4d:1b:3e:2f:
         f2:19:4d:5b:39:72:8a:d8:08:4e:fa:8c:05:64:40:ba:89:df:
         51:71:9c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----