Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/CC61666A84E311ECAE3D84A35A40D577.roa
File:                     CC61666A84E311ECAE3D84A35A40D577.roa (raw, json)
Hash identifier:          mNEVwzeICuduZpmAYmW5wbQDTmXUiQrBUCHR4Or+RvM=
Subject key identifier:   E1:00:3B:5D:B6:4E:63:5C:26:8D:6A:9F:B7:F5:3B:37:26:7B:CC:0C
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       0574
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/CC61666A84E311ECAE3D84A35A40D577.roa
Signing time:             Thu 03 Feb 2022 11:24:06 +0000
ROA not before:           Thu 03 Feb 2022 11:24:01 +0000
ROA not after:            Fri 03 Feb 2023 11:24:01 +0000
asID:                     210654
IP address blocks:        161.123.150.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1396 (0x574)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Feb  3 11:24:01 2022 GMT
            Not After : Feb  3 11:24:01 2023 GMT
        Subject: CN=61fbbb56-ae68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:be:e1:ac:3c:58:3b:0c:74:47:6a:09:b5:c9:
                    93:b5:e6:04:18:80:fc:43:1c:ad:82:ca:da:53:1f:
                    f6:70:cd:b8:f8:42:ba:76:c4:44:9e:7a:2d:41:53:
                    43:cd:a1:73:3f:47:ab:1d:1f:c8:b0:9b:26:b8:d5:
                    8c:92:d0:74:17:e2:f9:19:e2:ea:0a:1d:f5:4a:45:
                    b1:81:14:d2:7f:0c:69:b0:60:7b:05:e8:b4:b7:d9:
                    c1:b3:de:99:b0:20:d0:af:fe:01:b5:71:56:e0:2a:
                    68:7c:e2:00:68:ab:d7:60:f1:84:62:ff:65:53:5b:
                    95:67:3d:d8:93:83:32:ef:2e:e3:a3:51:fd:e4:4b:
                    11:16:f3:f2:db:63:a0:52:ec:13:70:d4:07:5c:e4:
                    a0:3f:85:ff:49:9e:26:8d:2a:6c:b1:7c:96:17:1c:
                    89:05:43:c2:f7:0c:b5:78:0e:4c:aa:89:b5:8f:04:
                    62:9a:c1:e8:97:ed:e7:e6:00:0b:08:da:ff:71:d7:
                    96:62:93:47:bf:74:fc:1a:02:21:ed:b0:47:b3:43:
                    49:21:54:bf:de:55:e7:03:d7:df:b2:60:41:69:96:
                    de:83:45:9c:c7:be:d4:30:6f:ca:3f:b2:44:53:33:
                    c3:83:55:9a:0c:b2:a7:6c:ad:ef:eb:67:c9:e2:f2:
                    72:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:00:3B:5D:B6:4E:63:5C:26:8D:6A:9F:B7:F5:3B:37:26:7B:CC:0C
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/CC61666A84E311ECAE3D84A35A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:84:d6:4f:3c:98:20:0e:39:01:3b:72:b4:c5:2e:cf:f0:d0:
         fa:83:31:ca:d5:66:b3:28:a6:65:e6:5a:fc:14:58:e7:dc:d3:
         16:e9:a8:d7:f0:cf:c2:24:e4:eb:cc:8f:13:c3:e6:c4:c9:52:
         8b:e0:f8:d5:d7:4f:97:7f:c7:b5:3d:66:18:f3:37:cf:8b:6d:
         6a:93:50:e2:2e:8b:0d:8c:60:6f:e5:56:f2:71:c7:af:96:72:
         c0:8f:d0:8c:c5:64:ee:30:e5:5d:8e:ef:d9:82:d3:b3:20:32:
         7a:76:db:74:aa:2a:b5:c7:4c:1f:fd:2c:63:7c:71:65:8e:6e:
         40:eb:19:2f:68:46:fd:8e:0a:26:2a:d5:95:11:d8:6b:0c:ed:
         63:a8:08:d8:7b:67:08:62:07:aa:ed:b5:6e:02:de:2b:ec:9b:
         d4:cd:8e:03:60:54:ca:ca:58:3f:db:f7:8c:4a:69:2f:96:d3:
         5a:69:d0:07:d5:b9:7f:c7:18:45:d1:b1:6f:7f:c4:76:0f:6b:
         46:44:b8:95:7d:64:0f:b3:20:94:1f:d1:72:63:6d:7e:95:4e:
         f8:8f:fb:90:32:e0:f3:a6:e0:2f:3d:3e:3e:6b:91:70:28:ea:
         de:8d:43:f1:84:50:93:e1:0a:ee:ad:79:94:6b:bb:db:5f:d9:
         7d:01:d4:f4
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBXQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
RkExNURBUjExMC8GA1UEBRMoNDRBOUY2OUY0MTQxREE3NkI3MzUzRUIwRDU4MTUy
M0FGRTJCODFFMTAeFw0yMjAyMDMxMTI0MDFaFw0yMzAyMDMxMTI0MDFaMBgxFjAU
BgNVBAMMDTYxZmJiYjU2LWFlNjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC2vuGsPFg7DHRHagm1yZO15gQYgPxDHK2CytpTH/Zwzbj4Qrp2xESeei1B
U0PNoXM/R6sdH8iwmya41YyS0HQX4vkZ4uoKHfVKRbGBFNJ/DGmwYHsF6LS32cGz
3pmwINCv/gG1cVbgKmh84gBoq9dg8YRi/2VTW5VnPdiTgzLvLuOjUf3kSxEW8/Lb
Y6BS7BNw1Adc5KA/hf9JniaNKmyxfJYXHIkFQ8L3DLV4DkyqibWPBGKaweiX7efm
AAsI2v9x15Zik0e/dPwaAiHtsEezQ0khVL/eVecD19+yYEFplt6DRZzHvtQwb8o/
skRTM8ODVZoMsqdsre/rZ8ni8nJHAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU4QA7
XbZOY1wmjWqft/U7NyZ7zAwwHwYDVR0jBBgwFoAURKn2n0FB2na3NT6w1YFSOv4r
geEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVBMjI4L1JLbjJu
MEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1JLbjJuMEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVB
MjI4L0NDNjE2NjZBODRFMzExRUNBRTNEODRBMzVBNDBENTc3LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAChe5YwDQYJKoZIhvcNAQELBQAD
ggEBAE+E1k88mCAOOQE7crTFLs/w0PqDMcrVZrMopmXmWvwUWOfc0xbpqNfwz8Ik
5OvMjxPD5sTJUovg+NXXT5d/x7U9ZhjzN8+LbWqTUOIuiw2MYG/lVvJxx6+WcsCP
0IzFZO4w5V2O79mC07MgMnp223SqKrXHTB/9LGN8cWWObkDrGS9oRv2OCiYq1ZUR
2GsM7WOoCNh7ZwhiB6rttW4C3ivsm9TNjgNgVMrKWD/b94xKaS+W01pp0AfVuX/H
GEXRsW9/xHYPa0ZEuJV9ZA+zIJQf0XJjbX6VTviP+5Ay4POm4C89Pj5rkXAo6t6N
Q/GEUJPhCu6teZRru9tf2X0B1PQ=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:32 2023 by rpki-client on console-ams.rpki-client.org