Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EF839FFAD00811EF9759F585762E951A.roa
File:                     EF839FFAD00811EF9759F585762E951A.roa (raw, json)
Hash identifier:          rSfPT6zlFH0rMR3LGFw450g9HFpfzpsHtEeA1neqQMc=
Subject key identifier:   C6:69:FB:8B:32:7B:DE:EC:56:C8:38:30:08:53:C4:F0:73:4B:08:C2
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0105B6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EF839FFAD00811EF9759F585762E951A.roa
Signing time:             Sat 11 Jan 2025 10:43:47 +0000
ROA not before:           Sat 11 Jan 2025 10:43:43 +0000
ROA not after:            Sat 25 Jan 2025 10:43:43 +0000
asID:                     54801
IP address blocks:        45.207.240.0/20 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66998 (0x105b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR
        Validity
            Not Before: Jan 11 10:43:43 2025 GMT
            Not After : Jan 25 10:43:43 2025 GMT
        Subject: CN=67824b63-8b77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6d:4b:74:af:8d:e4:48:4d:a9:38:df:96:82:
                    92:d0:94:7b:88:b1:ce:69:fa:28:56:f2:3f:cf:3f:
                    b3:bc:69:db:e7:32:3f:4d:a3:a1:73:82:70:c8:21:
                    15:e7:d3:92:5b:1a:21:6a:23:5d:92:0c:f3:53:a0:
                    da:db:5e:ef:ce:cb:59:c9:92:96:c1:9c:1b:77:c6:
                    cf:7b:ff:93:3f:8d:bd:a6:62:eb:8f:16:42:e0:02:
                    90:30:5f:b5:cb:b7:fd:ab:0f:12:25:4e:82:e7:c6:
                    2f:ba:b4:ee:b9:5c:d2:15:72:a0:c2:24:2b:4f:e0:
                    b9:d2:6f:22:53:20:53:1e:7d:c8:75:7d:21:5a:3b:
                    f4:2e:66:79:96:41:6a:b8:b9:59:6c:30:7a:2a:20:
                    3d:6f:92:65:bb:99:60:23:ab:dd:0e:40:fa:9e:d4:
                    60:30:a6:c1:de:9b:ec:1d:eb:b6:22:98:88:88:2f:
                    e2:27:93:d4:6a:1f:b7:16:20:23:1f:53:bc:b0:b1:
                    f2:68:b2:16:d0:01:12:91:18:e4:13:76:3b:95:46:
                    e9:d8:b3:19:bc:f3:c2:06:9d:cf:8f:dd:3a:01:e6:
                    69:20:f7:a7:3c:4c:0a:7e:16:11:f6:b3:c3:9e:06:
                    ea:89:b9:3b:20:2b:62:6f:ea:8c:01:83:60:ba:9e:
                    ba:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:69:FB:8B:32:7B:DE:EC:56:C8:38:30:08:53:C4:F0:73:4B:08:C2
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EF839FFAD00811EF9759F585762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.207.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         64:af:c3:71:b4:af:8e:b8:42:a7:6d:8e:20:a5:64:49:f5:21:
         65:49:0a:e5:86:8a:a1:f1:86:07:37:08:a6:64:3b:e4:10:95:
         2c:bf:b2:9a:c9:ed:c4:5a:28:36:f7:d1:82:5e:57:54:5f:e9:
         a1:6f:98:fa:de:b3:98:1d:cb:ff:02:b2:05:60:07:39:4b:74:
         f8:8b:e1:b5:d2:b0:c4:c6:03:02:4c:cd:87:73:83:3d:d6:3e:
         2b:11:28:92:10:b5:9e:bc:88:ce:b3:eb:33:9c:9c:ac:37:62:
         a5:72:c9:73:b6:a1:b6:97:11:90:19:af:e4:a3:69:0d:61:55:
         68:ce:31:cc:d8:2b:00:60:50:42:cc:82:9a:0c:0c:04:94:e2:
         82:95:30:e8:85:bb:db:8e:07:8c:b6:b4:e2:1f:14:0c:d8:2e:
         a0:48:5c:6f:11:b0:83:1c:97:2f:03:19:00:24:d1:ab:44:b3:
         5a:4b:36:82:04:6a:14:a7:84:d0:a7:d7:31:5c:76:f9:6e:49:
         05:50:bb:d3:37:02:9e:44:6b:e0:28:eb:f4:a7:4a:38:ab:af:
         8c:e1:93:95:4a:69:a7:fc:7b:fb:be:ac:61:70:37:fa:d8:ed:
         98:49:f3:9a:93:75:df:00:d5:b5:5e:65:d2:52:dd:1b:16:e0:
         c5:b5:8d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:44:07 2025 by rpki-client