Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F4A2DCBE36DF11EC827D446CD8A014CE.roa
File:                     F4A2DCBE36DF11EC827D446CD8A014CE.roa (raw, json)
Hash identifier:          L9GCT03rpT81zBFFuD+bxzeYXzjxH1We4y2w6sdviog=
Subject key identifier:   20:B5:2E:4A:4B:36:1D:2A:FA:3E:FC:38:AE:F2:A5:D1:E5:5C:13:B8
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0B89
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F4A2DCBE36DF11EC827D446CD8A014CE.roa
Signing time:             Wed 27 Oct 2021 04:40:05 +0000
ROA not before:           Wed 27 Oct 2021 04:40:02 +0000
ROA not after:            Thu 27 Oct 2022 04:40:02 +0000
asID:                     58895
IP address blocks:        45.206.113.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2953 (0xb89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 27 04:40:02 2021 GMT
            Not After : Oct 27 04:40:02 2022 GMT
        Subject: CN=6178d825-254f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d8:ea:6c:a8:8b:0a:b5:5c:b4:79:18:3a:5b:
                    82:5c:ad:35:41:39:ba:b7:de:b9:b9:94:e2:cf:08:
                    d8:63:76:2c:ca:58:47:25:4f:07:58:58:52:62:e5:
                    b2:25:17:50:6a:c5:8c:e3:4b:50:ba:c3:9a:a8:e0:
                    a5:8c:24:d2:45:1d:8e:a4:f3:90:b8:ab:3d:d9:2e:
                    a1:5d:ac:a8:a1:ee:65:f2:ba:33:d2:c9:c3:8f:39:
                    f1:dc:10:42:c2:8f:4e:00:f3:07:e4:f9:fd:5f:b6:
                    8a:b9:a3:66:6c:ca:6e:13:65:61:b3:2c:9e:e1:18:
                    31:dc:4a:6d:fe:f0:c3:d4:77:28:92:91:fb:53:76:
                    3d:25:48:ca:56:05:7b:16:94:fc:4f:96:51:4d:7a:
                    0c:a6:d4:3b:89:80:1d:fc:0a:4e:22:d4:4a:1f:98:
                    76:2a:62:78:25:22:2d:34:fa:1d:47:20:a2:64:62:
                    d4:74:d9:80:0e:b6:03:98:05:6f:26:45:65:47:4a:
                    12:3b:e5:ec:65:18:f0:94:e9:3c:3e:01:cb:a3:af:
                    0c:62:2f:df:cb:b7:d0:15:d9:e6:00:30:51:6b:69:
                    5e:1e:29:24:4c:81:42:89:c9:46:d5:c1:09:e0:d9:
                    ca:05:18:d6:f5:a6:18:fe:3c:49:3c:20:62:f0:b0:
                    9d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:B5:2E:4A:4B:36:1D:2A:FA:3E:FC:38:AE:F2:A5:D1:E5:5C:13:B8
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F4A2DCBE36DF11EC827D446CD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.206.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:1d:bc:f9:93:d8:a9:06:ad:6c:78:14:d9:60:53:40:9b:33:
         4b:e1:1b:a8:c7:37:60:41:2a:6c:f7:ef:63:2e:8f:6d:f5:94:
         a0:44:40:13:d8:1b:e9:46:9e:af:1f:58:01:a4:cf:c7:89:53:
         cb:cb:b1:9d:8f:95:26:12:2c:c4:30:00:e4:94:31:1c:9e:1f:
         eb:40:6d:7e:df:e3:8b:a7:fa:17:5f:b3:d5:ac:f4:05:e3:2f:
         36:7a:0f:dd:4d:7a:ed:d4:e9:5e:d7:aa:5a:04:b1:89:d5:5e:
         75:9c:88:50:87:ee:a6:3f:88:1d:74:3e:8e:38:18:f4:c2:e5:
         19:11:41:06:92:e8:20:be:cf:65:66:88:19:1a:6d:a4:e0:54:
         be:35:c8:40:5b:98:49:0c:1c:c1:9c:37:26:9c:b9:cf:05:2a:
         2d:9e:0c:9f:0a:1a:65:96:0d:1b:97:b2:b9:23:58:8c:d5:4f:
         4b:08:68:99:05:2f:a8:25:18:c5:a7:08:6e:39:55:e4:d6:f8:
         1b:db:04:67:83:60:23:cb:e9:d6:94:06:23:ef:7c:96:59:0f:
         8c:46:5c:36:db:a6:d6:5b:cf:3f:e2:b7:1f:9f:1f:40:e0:c9:
         7b:fe:2a:8a:0f:ac:6c:91:de:f6:8e:ff:bc:00:49:e3:c2:9f:
         83:32:1f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:31 2023 by rpki-client on console-fra.rpki-client.org