Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/10A26FA484E411EC9AAA38A45A40D577.roa
File:                     10A26FA484E411EC9AAA38A45A40D577.roa (raw, json)
Hash identifier:          yxLTiHXS2Net7LDbjrapk9KhuSNaeKh66gdKtjfRzB8=
Subject key identifier:   EB:71:E3:18:A4:8C:EB:9F:EC:E3:4D:95:62:3B:5E:52:67:30:C4:37
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       0578
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/10A26FA484E411EC9AAA38A45A40D577.roa
Signing time:             Thu 03 Feb 2022 11:26:01 +0000
ROA not before:           Thu 03 Feb 2022 11:25:57 +0000
ROA not after:            Fri 03 Feb 2023 11:25:57 +0000
asID:                     210654
IP address blocks:        161.123.100.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1400 (0x578)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Feb  3 11:25:57 2022 GMT
            Not After : Feb  3 11:25:57 2023 GMT
        Subject: CN=61fbbbc9-da9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:4e:ea:fe:35:36:d1:3d:fa:00:7b:1d:a3:10:
                    10:91:66:f3:1d:84:5e:4d:48:0d:c3:e0:60:d0:68:
                    0e:c6:d4:fd:2e:41:6e:6d:18:25:02:71:20:ec:99:
                    0b:51:08:1c:6c:11:21:8c:67:e9:03:a8:f5:42:48:
                    15:ed:a0:d4:c0:13:55:94:34:91:e1:f8:b1:08:90:
                    10:f1:81:e8:2e:00:d8:a7:71:91:de:41:3f:d6:c7:
                    e7:b9:be:2e:94:7d:7c:ce:2f:b3:7d:43:3d:da:53:
                    a6:52:a2:38:04:e6:a0:76:5f:f8:73:ba:d0:0a:93:
                    e8:f7:9d:31:be:da:10:83:00:e3:44:27:95:5b:87:
                    37:ff:89:8f:f9:cf:e7:6a:a1:ed:55:2f:2b:fd:b0:
                    52:50:2a:b5:24:2b:67:0c:b6:26:15:78:27:e8:43:
                    30:9c:45:44:1e:68:3c:97:e0:3b:96:1d:84:30:19:
                    e5:65:c8:b0:57:c3:7b:2f:2e:1f:0a:ef:70:f7:8b:
                    84:fc:8d:87:8d:bb:b8:bc:ce:bf:d0:e2:0e:58:c3:
                    23:d8:27:16:fc:10:c4:82:0f:bc:76:a2:74:c9:2c:
                    b0:c9:7a:eb:06:dd:e3:1e:9f:68:78:aa:20:de:e0:
                    0e:6e:c1:9a:f3:ad:5a:3b:c2:cf:ca:59:20:52:c5:
                    c7:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:71:E3:18:A4:8C:EB:9F:EC:E3:4D:95:62:3B:5E:52:67:30:C4:37
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/10A26FA484E411EC9AAA38A45A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:37:00:51:df:40:33:2a:d0:83:50:9d:3a:9e:09:f1:5e:ce:
         4e:96:c7:21:f7:8a:15:7d:6d:ee:05:b3:54:8d:34:e2:5e:13:
         2b:9f:ab:21:b0:36:72:99:d3:66:9f:c4:98:30:99:b6:3a:21:
         2e:72:26:63:75:41:60:ea:1b:38:33:cb:2b:a8:fc:c0:ab:ca:
         91:45:0b:76:fa:ee:ad:25:59:10:32:77:77:29:af:e3:0b:1f:
         93:e7:ec:61:41:f5:02:de:56:fc:34:99:e7:c6:de:6e:81:12:
         99:8f:cd:39:65:3d:ce:f8:77:d6:b7:e0:06:66:11:15:70:b0:
         14:1c:fc:f9:31:34:d5:94:88:f7:17:bd:8c:66:27:02:8e:d1:
         c5:82:fd:77:3a:7c:3f:1b:5d:c6:39:0e:ba:06:45:bf:b1:4d:
         c8:2f:0c:9f:33:42:fe:20:6d:98:81:48:51:14:6f:11:0d:96:
         92:4d:a6:1f:f8:46:cf:49:2b:03:5d:83:2d:5d:69:16:51:63:
         d4:df:a6:01:4e:2a:da:75:cf:a8:f3:4e:72:25:a8:57:fa:f6:
         a0:9f:1c:d3:e1:1c:38:82:fb:ab:16:67:9d:ee:fe:75:cc:d5:
         a3:8b:cc:e5:b8:e1:b1:df:20:a4:a9:5b:05:1c:ec:93:77:dd:
         0d:70:f1:04
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBXgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
RkExNURBUjExMC8GA1UEBRMoNDRBOUY2OUY0MTQxREE3NkI3MzUzRUIwRDU4MTUy
M0FGRTJCODFFMTAeFw0yMjAyMDMxMTI1NTdaFw0yMzAyMDMxMTI1NTdaMBgxFjAU
BgNVBAMMDTYxZmJiYmM5LWRhOWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDYTur+NTbRPfoAex2jEBCRZvMdhF5NSA3D4GDQaA7G1P0uQW5tGCUCcSDs
mQtRCBxsESGMZ+kDqPVCSBXtoNTAE1WUNJHh+LEIkBDxgeguANincZHeQT/Wx+e5
vi6UfXzOL7N9Qz3aU6ZSojgE5qB2X/hzutAKk+j3nTG+2hCDAONEJ5Vbhzf/iY/5
z+dqoe1VLyv9sFJQKrUkK2cMtiYVeCfoQzCcRUQeaDyX4DuWHYQwGeVlyLBXw3sv
Lh8K73D3i4T8jYeNu7i8zr/Q4g5YwyPYJxb8EMSCD7x2onTJLLDJeusG3eMen2h4
qiDe4A5uwZrzrVo7ws/KWSBSxcchAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU63Hj
GKSM65/s402VYjteUmcwxDcwHwYDVR0jBBgwFoAURKn2n0FB2na3NT6w1YFSOv4r
geEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVBMjI4L1JLbjJu
MEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1JLbjJuMEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVB
MjI4LzEwQTI2RkE0ODRFNDExRUM5QUFBMzhBNDVBNDBENTc3LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAChe2QwDQYJKoZIhvcNAQELBQAD
ggEBAFk3AFHfQDMq0INQnTqeCfFezk6WxyH3ihV9be4Fs1SNNOJeEyufqyGwNnKZ
02afxJgwmbY6IS5yJmN1QWDqGzgzyyuo/MCrypFFC3b67q0lWRAyd3cpr+MLH5Pn
7GFB9QLeVvw0mefG3m6BEpmPzTllPc74d9a34AZmERVwsBQc/PkxNNWUiPcXvYxm
JwKO0cWC/Xc6fD8bXcY5DroGRb+xTcgvDJ8zQv4gbZiBSFEUbxENlpJNph/4Rs9J
KwNdgy1daRZRY9TfpgFOKtp1z6jzTnIlqFf69qCfHNPhHDiC+6sWZ53u/nXM1aOL
zOW44bHfIKSpWwUc7JN33Q1w8QQ=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:34 2023 by rpki-client on console-fra.rpki-client.org