Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/0174030C327411EC89D12A6DD8A014CE.roa
File:                     0174030C327411EC89D12A6DD8A014CE.roa (raw, json)
Hash identifier:          bum2jKbPS+Y8QIxEAZGsMmI27s9sM7TlICRC7vHsMts=
Subject key identifier:   F0:C9:A7:00:4D:1F:C2:C3:4F:0B:6F:E6:BD:1C:C3:56:0F:46:54:16
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       0200
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/0174030C327411EC89D12A6DD8A014CE.roa
Signing time:             Thu 21 Oct 2021 13:37:16 +0000
ROA not before:           Thu 21 Oct 2021 13:37:13 +0000
ROA not after:            Fri 21 Oct 2022 13:37:13 +0000
asID:                     60458
IP address blocks:        161.123.191.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 512 (0x200)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Oct 21 13:37:13 2021 GMT
            Not After : Oct 21 13:37:13 2022 GMT
        Subject: CN=61716d0c-66b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f6:d9:8b:88:7f:36:66:bc:d7:18:c2:45:da:
                    ec:99:e3:cd:28:95:b6:58:47:e1:70:31:22:3d:15:
                    7e:60:eb:2b:ae:8b:a2:44:db:28:c4:d2:ef:ab:38:
                    b8:08:d4:4e:f5:b1:56:86:e1:9b:46:dc:fa:eb:75:
                    18:16:7a:af:41:63:cd:93:95:a3:6a:1b:3c:3c:02:
                    f1:ca:44:94:a2:6d:6b:d6:50:db:a0:f5:81:bf:d7:
                    e1:1c:d2:a8:d4:70:6e:5c:56:74:9e:e1:36:46:14:
                    89:dd:23:e8:c9:31:63:d5:97:c2:fd:92:bf:a3:67:
                    cc:ee:7a:4e:f8:94:ab:72:2c:d2:79:8a:f5:98:cb:
                    34:b7:0d:6d:a4:7c:ec:ca:50:c4:fc:a7:56:a1:3a:
                    ff:f2:0d:32:2d:0f:e9:90:ae:e4:52:88:1d:21:e9:
                    76:4d:4d:a9:3e:7d:08:86:e1:6a:9c:8c:42:d9:dc:
                    71:04:aa:bf:ac:35:91:9b:55:4d:91:a4:f4:aa:c5:
                    d7:42:9a:64:2e:6e:63:b1:39:92:71:4c:96:fd:37:
                    4a:31:fd:b3:75:d5:32:e2:21:d6:e7:11:dc:e9:6e:
                    91:fd:d7:34:de:f6:3e:a3:8a:34:42:fa:01:51:b5:
                    70:a2:d7:87:83:0f:a7:04:87:b8:14:6b:c3:b2:52:
                    20:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:C9:A7:00:4D:1F:C2:C3:4F:0B:6F:E6:BD:1C:C3:56:0F:46:54:16
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/0174030C327411EC89D12A6DD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:a0:2a:cb:3f:04:03:b9:d4:5c:20:ba:bd:a7:7c:78:4c:46:
         28:95:44:52:30:03:24:58:06:77:44:16:5e:bf:a4:77:49:45:
         52:6c:17:b1:32:79:4f:be:d4:e9:49:18:ca:a4:d9:a5:78:d5:
         01:c3:df:6d:64:07:5e:69:7c:ab:45:e1:ee:64:59:cb:26:29:
         43:fb:92:73:c1:d6:df:ac:78:ff:58:7d:12:7d:33:42:8f:2e:
         d1:51:c5:88:cb:1b:e4:4a:f1:5b:c0:ba:62:af:96:47:a2:d0:
         ec:bc:26:59:9c:75:bc:89:76:64:3d:7b:0f:13:31:75:2c:98:
         7a:a1:9d:44:39:16:38:d2:38:28:3d:cb:a5:9d:a0:c7:98:3e:
         fa:55:7d:1a:35:83:c4:de:f0:4b:e5:ea:1d:79:f4:91:36:09:
         10:31:67:ef:59:73:53:68:65:de:98:fa:78:8e:ae:63:0c:0f:
         d5:ed:fd:43:a6:70:26:65:44:51:f4:19:91:c6:1f:5e:dd:0b:
         67:12:ad:c3:1d:8b:58:b6:55:34:c2:15:d5:2d:b3:12:39:a5:
         0b:c5:b1:4c:b5:15:d0:1d:6e:22:79:1f:1f:c3:47:9e:57:91:
         95:f4:fe:37:25:da:9d:29:de:d5:df:2b:0e:93:c6:08:6c:24:
         11:56:23:34
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICAgAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RkExNURBUjExMC8GA1UEBRMoNDRBOUY2OUY0MTQxREE3NkI3MzUzRUIwRDU4MTUy
M0FGRTJCODFFMTAeFw0yMTEwMjExMzM3MTNaFw0yMjEwMjExMzM3MTNaMBgxFjAU
BgNVBAMMDTYxNzE2ZDBjLTY2YjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDU9tmLiH82ZrzXGMJF2uyZ480olbZYR+FwMSI9FX5g6yuui6JE2yjE0u+r
OLgI1E71sVaG4ZtG3PrrdRgWeq9BY82TlaNqGzw8AvHKRJSibWvWUNug9YG/1+Ec
0qjUcG5cVnSe4TZGFIndI+jJMWPVl8L9kr+jZ8zuek74lKtyLNJ5ivWYyzS3DW2k
fOzKUMT8p1ahOv/yDTItD+mQruRSiB0h6XZNTak+fQiG4WqcjELZ3HEEqr+sNZGb
VU2RpPSqxddCmmQubmOxOZJxTJb9N0ox/bN11TLiIdbnEdzpbpH91zTe9j6jijRC
+gFRtXCi14eDD6cEh7gUa8OyUiDvAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU8Mmn
AE0fwsNPC2/mvRzDVg9GVBYwHwYDVR0jBBgwFoAURKn2n0FB2na3NT6w1YFSOv4r
geEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVBMjI4L1JLbjJu
MEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1JLbjJuMEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVB
MjI4LzAxNzQwMzBDMzI3NDExRUM4OUQxMkE2REQ4QTAxNENFLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAChe78wDQYJKoZIhvcNAQELBQAD
ggEBABygKss/BAO51Fwgur2nfHhMRiiVRFIwAyRYBndEFl6/pHdJRVJsF7EyeU++
1OlJGMqk2aV41QHD321kB15pfKtF4e5kWcsmKUP7knPB1t+seP9YfRJ9M0KPLtFR
xYjLG+RK8VvAumKvlkei0Oy8JlmcdbyJdmQ9ew8TMXUsmHqhnUQ5FjjSOCg9y6Wd
oMeYPvpVfRo1g8Te8Evl6h159JE2CRAxZ+9Zc1NoZd6Y+niOrmMMD9Xt/UOmcCZl
RFH0GZHGH17dC2cSrcMdi1i2VTTCFdUtsxI5pQvFsUy1FdAdbiJ5Hx/DR55XkZX0
/jcl2p0p3tXfKw6TxghsJBFWIzQ=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:34 2023 by rpki-client on console-fra.rpki-client.org