Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F3B212F00BC111EC99ABAC23D8A014CE.roa
File:                     F3B212F00BC111EC99ABAC23D8A014CE.roa (raw, json)
Hash identifier:          +UwTSygFEz1+FSXSVCmFIjrBZ5E0W7PR82WQnvdznb8=
Subject key identifier:   B6:41:EF:00:A3:AD:5B:DA:37:BD:C7:0A:18:CD:1A:3D:4D:6F:19:52
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       090E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F3B212F00BC111EC99ABAC23D8A014CE.roa
Signing time:             Thu 02 Sep 2021 07:46:59 +0000
ROA not before:           Thu 02 Sep 2021 07:46:54 +0000
ROA not after:            Sun 02 Oct 2022 07:46:54 +0000
asID:                     64126
IP address blocks:        45.195.26.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2318 (0x90e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  2 07:46:54 2021 GMT
            Not After : Oct  2 07:46:54 2022 GMT
        Subject: CN=61308173-b7c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:aa:8b:bc:78:06:eb:ed:9a:af:04:27:c0:91:
                    2e:40:fb:e0:54:82:e9:52:ae:ab:d3:ab:00:5e:a0:
                    da:5a:cb:31:99:35:ad:2e:d0:eb:96:6e:66:17:14:
                    86:d4:b3:fa:a5:b0:28:1c:9a:6e:ca:d7:cd:58:9f:
                    ac:ea:80:bc:4c:19:f6:a0:7a:7f:dc:c5:3f:02:41:
                    62:06:b0:ae:aa:dc:b7:95:06:82:9c:81:01:fe:05:
                    80:cb:01:aa:f0:44:30:52:a7:49:96:55:69:3b:c1:
                    34:89:36:8a:2a:fb:cc:85:78:bc:dd:2d:d8:4b:64:
                    e8:ee:38:9e:7a:30:fe:60:aa:e2:64:77:b0:a2:32:
                    cb:06:b5:f5:74:c8:06:39:23:ce:e9:0f:6c:46:81:
                    c2:6b:09:30:16:ae:76:07:ae:be:99:a8:3f:89:a9:
                    97:c6:db:30:1b:e8:a7:69:63:b8:ff:a1:db:27:53:
                    83:3b:94:bf:3c:fd:fb:9d:d6:94:75:31:07:82:44:
                    6d:84:69:8e:47:3e:7d:e2:bf:2f:8c:d4:90:44:8f:
                    9d:00:8b:15:21:39:2f:f0:ab:26:32:ec:69:72:c0:
                    bb:26:27:54:97:c2:8f:b9:78:6e:4c:40:c1:e4:0e:
                    e0:13:2b:b6:0e:05:39:ab:27:98:0e:fe:ae:f1:cf:
                    41:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:41:EF:00:A3:AD:5B:DA:37:BD:C7:0A:18:CD:1A:3D:4D:6F:19:52
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F3B212F00BC111EC99ABAC23D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         85:9b:6c:f3:ca:92:e5:2c:df:30:ea:bc:4e:cd:37:de:3f:df:
         5a:c8:c0:06:94:34:a4:0b:f9:6f:ac:20:30:4b:ae:3a:ae:de:
         76:d9:30:95:b5:50:bd:06:14:63:34:99:e5:73:06:0a:3b:2d:
         2b:46:fa:f9:79:9a:33:51:93:bb:0a:81:d1:61:0e:99:f9:2c:
         ce:06:ef:7f:b4:aa:f1:19:88:46:c4:f6:e2:c2:ee:60:5d:5f:
         7c:f5:83:54:72:3d:81:7a:b8:ba:f3:76:0d:d1:8a:03:70:76:
         05:1f:ee:5d:53:21:6f:a8:40:05:56:5e:ef:69:0b:b5:0f:80:
         5a:9d:21:97:3d:5e:a9:ca:d7:fd:54:a5:67:f5:1d:cd:9b:de:
         20:5f:ea:eb:33:b1:01:52:bd:c0:8b:45:d2:d5:c8:d3:d3:53:
         80:8e:d4:43:66:60:1c:e5:4d:7a:63:b6:8f:db:16:8b:5f:a3:
         b7:56:c7:29:11:7d:68:f1:41:6b:66:05:c4:0d:a5:74:4d:61:
         64:15:18:74:e1:97:c4:83:23:f5:84:a8:27:10:8a:00:b7:fa:
         a6:f3:17:3c:8b:b5:1b:ed:e0:91:00:9f:00:a1:2a:bb:8f:eb:
         c7:3e:7d:95:92:24:56:ba:3d:48:99:9e:0d:62:67:27:c8:2b:
         b6:d7:10:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:29 2023 by rpki-client on console-ams.rpki-client.org