Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/173FA6907DFC11ECBD8C19D95A40D577.roa
File:                     173FA6907DFC11ECBD8C19D95A40D577.roa (raw, json)
Hash identifier:          AgV3MSMUN+fzzG8YAQr69AnNaL5Dhq7YHph/RWUTCBg=
Subject key identifier:   A0:99:E6:45:62:93:A8:2F:71:F3:00:49:48:19:47:03:A1:58:D1:B8
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       053A
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/173FA6907DFC11ECBD8C19D95A40D577.roa
Signing time:             Tue 25 Jan 2022 16:30:22 +0000
ROA not before:           Tue 25 Jan 2022 16:30:18 +0000
ROA not after:            Wed 25 Jan 2023 16:30:18 +0000
asID:                     327790
IP address blocks:        161.123.155.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1338 (0x53a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Jan 25 16:30:18 2022 GMT
            Not After : Jan 25 16:30:18 2023 GMT
        Subject: CN=61f0259e-b949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6d:90:66:44:c1:ca:26:3f:b1:25:aa:b4:28:
                    8d:90:ff:f6:6b:94:26:52:35:2e:f1:3e:80:71:15:
                    79:27:38:0c:13:c9:a9:06:96:26:1f:fe:c7:c8:96:
                    38:a6:9e:74:a5:d5:9e:6b:15:b4:b3:a0:72:40:31:
                    a3:07:7f:9a:cc:83:c7:7f:08:48:13:80:16:41:d1:
                    16:80:ea:db:56:d4:13:2e:49:38:bd:21:22:d4:4d:
                    ce:44:0e:c9:fb:f2:b0:4b:8a:e4:ba:56:86:dc:0b:
                    fb:89:52:6c:a5:6a:78:1c:60:4c:8c:22:55:fe:e6:
                    74:e4:57:a0:91:75:2f:25:e0:47:be:91:45:80:ba:
                    9f:0a:90:a6:eb:18:97:4a:56:dd:a2:a8:96:51:1b:
                    1f:77:26:1a:77:30:c9:f3:55:48:f2:d7:19:4f:bd:
                    05:a2:47:a5:f0:63:30:56:f2:80:b0:50:fa:98:ca:
                    1a:fe:cf:3e:db:25:1f:48:60:03:97:2f:95:6a:45:
                    b7:56:e9:d3:ac:24:fb:dd:6e:dc:9f:da:06:fa:68:
                    f5:73:69:78:de:a3:c9:8c:f8:8e:79:67:70:e6:e3:
                    02:bd:0a:3b:a7:21:a5:e3:4c:20:95:4c:f3:b4:1f:
                    39:ce:9b:e6:c2:a1:91:e9:b7:f4:ab:34:4b:9d:b4:
                    88:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:99:E6:45:62:93:A8:2F:71:F3:00:49:48:19:47:03:A1:58:D1:B8
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/173FA6907DFC11ECBD8C19D95A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:dc:67:4f:fc:89:ad:5c:2e:8f:3f:a5:ef:54:f3:68:21:5c:
         d6:09:04:b5:36:59:8a:8d:22:b4:b8:57:04:87:c2:57:2b:99:
         18:a6:fc:2e:66:eb:79:55:79:11:2e:53:21:2c:97:a7:9e:2a:
         e1:ac:f2:3c:67:55:c2:c4:45:59:6f:24:d3:6b:6a:e1:73:ec:
         14:c2:7e:c1:08:16:5f:f1:c0:90:6a:30:e5:f7:91:3b:af:95:
         64:4a:f7:67:a8:d3:b9:97:96:b8:a1:1f:58:48:9b:99:6e:fa:
         16:da:12:2a:4e:04:3e:ab:28:aa:31:6c:cb:ce:27:75:05:ab:
         10:ef:6b:e1:ea:53:d8:5c:27:a5:c2:77:e2:77:b9:47:ae:a0:
         a3:ae:c4:6c:28:a5:6d:4e:74:60:a9:54:fd:c4:6d:69:1d:ea:
         fe:01:79:8c:d1:a2:b1:ac:10:16:da:64:a8:fe:44:57:d2:6d:
         c5:38:0c:67:28:23:7c:60:30:ac:57:35:fb:93:9f:ff:be:2e:
         fc:5a:75:9d:f8:3e:fc:5a:99:21:41:27:1f:4a:9d:11:5c:e6:
         96:5c:12:2b:f5:02:69:cb:ef:f1:46:c1:49:96:36:8a:0a:5a:
         cb:09:09:73:29:03:9e:f1:df:b1:35:38:ee:3d:3e:32:4e:e8:
         a3:e7:b0:80
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBTowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
RkExNURBUjExMC8GA1UEBRMoNDRBOUY2OUY0MTQxREE3NkI3MzUzRUIwRDU4MTUy
M0FGRTJCODFFMTAeFw0yMjAxMjUxNjMwMThaFw0yMzAxMjUxNjMwMThaMBgxFjAU
BgNVBAMMDTYxZjAyNTllLWI5NDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC6bZBmRMHKJj+xJaq0KI2Q//ZrlCZSNS7xPoBxFXknOAwTyakGliYf/sfI
ljimnnSl1Z5rFbSzoHJAMaMHf5rMg8d/CEgTgBZB0RaA6ttW1BMuSTi9ISLUTc5E
Dsn78rBLiuS6VobcC/uJUmylangcYEyMIlX+5nTkV6CRdS8l4Ee+kUWAup8KkKbr
GJdKVt2iqJZRGx93Jhp3MMnzVUjy1xlPvQWiR6XwYzBW8oCwUPqYyhr+zz7bJR9I
YAOXL5VqRbdW6dOsJPvdbtyf2gb6aPVzaXjeo8mM+I55Z3Dm4wK9CjunIaXjTCCV
TPO0HznOm+bCoZHpt/SrNEudtIhlAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUoJnm
RWKTqC9x8wBJSBlHA6FY0bgwHwYDVR0jBBgwFoAURKn2n0FB2na3NT6w1YFSOv4r
geEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVBMjI4L1JLbjJu
MEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1JLbjJuMEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVB
MjI4LzE3M0ZBNjkwN0RGQzExRUNCRDhDMTlEOTVBNDBENTc3LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAChe5swDQYJKoZIhvcNAQELBQAD
ggEBAKvcZ0/8ia1cLo8/pe9U82ghXNYJBLU2WYqNIrS4VwSHwlcrmRim/C5m63lV
eREuUyEsl6eeKuGs8jxnVcLERVlvJNNrauFz7BTCfsEIFl/xwJBqMOX3kTuvlWRK
92eo07mXlrihH1hIm5lu+hbaEipOBD6rKKoxbMvOJ3UFqxDva+HqU9hcJ6XCd+J3
uUeuoKOuxGwopW1OdGCpVP3EbWkd6v4BeYzRorGsEBbaZKj+RFfSbcU4DGcoI3xg
MKxXNfuTn/++LvxadZ34PvxamSFBJx9KnRFc5pZcEiv1AmnL7/FGwUmWNooKWssJ
CXMpA57x37E1OO49PjJO6KPnsIA=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:31 2023 by rpki-client on console-ams.rpki-client.org