Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/2DB473F6250411ED97D298D1F1222468.roa
File:                     2DB473F6250411ED97D298D1F1222468.roa (raw, json)
Hash identifier:          +/SoRJJjpN3mYvqehQLRMG7fm+Mtc2ri07PimtD+8QE=
Subject key identifier:   A9:73:BC:81:E8:39:98:3B:BD:EC:4A:95:30:CE:94:E9:73:4D:4E:18
Certificate issuer:       /CN=F363BA19AR/serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
Certificate serial:       BA
Authority key identifier: 60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
Authority info access:    rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/2DB473F6250411ED97D298D1F1222468.roa
Signing time:             Fri 26 Aug 2022 05:59:00 +0000
ROA not before:           Fri 26 Aug 2022 05:58:54 +0000
ROA not after:            Fri 25 Aug 2023 05:58:54 +0000
asID:                     61317
IP address blocks:        45.221.69.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 186 (0xba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AR/serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
        Validity
            Not Before: Aug 26 05:58:54 2022 GMT
            Not After : Aug 25 05:58:54 2023 GMT
        Subject: CN=63086123-efa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ec:4d:e0:a2:b4:3c:d7:98:7d:22:b4:2c:28:
                    94:96:86:af:b0:71:ad:36:8b:b5:b1:09:81:7c:a0:
                    ca:f4:52:15:c9:ed:57:30:da:fe:ea:fb:5f:1f:5f:
                    e0:b1:26:fd:2d:d0:d0:4b:2e:53:3b:ad:f9:ec:4a:
                    06:40:d7:65:f4:a6:6e:88:92:c2:15:cf:76:e1:13:
                    ac:8c:c2:40:77:83:11:92:50:2d:15:1c:66:48:4a:
                    9b:c4:f4:22:b6:a9:41:3c:af:05:0f:18:db:43:fb:
                    44:b9:86:e4:06:4a:b4:39:6f:67:cf:b3:d8:0f:f0:
                    67:91:54:06:8e:32:c9:e6:18:60:17:78:09:91:77:
                    2f:04:cb:8b:64:77:68:f8:72:75:0d:6e:ef:6d:01:
                    78:29:23:46:49:65:c2:1a:43:7a:be:60:d7:b9:41:
                    fe:c0:67:3b:ca:40:52:34:d5:e7:9d:f3:d5:80:e2:
                    5c:60:bc:08:df:f0:f5:5b:c3:e1:30:28:bf:fe:8d:
                    bd:8a:11:db:f3:98:36:49:52:f3:88:98:20:2b:a5:
                    61:3e:69:b4:0e:c1:93:77:43:51:bc:a4:32:d6:74:
                    98:91:2e:4d:94:d7:a2:b8:c8:5e:f3:7b:ab:68:33:
                    4a:31:ff:6a:bb:5c:12:03:28:07:7f:9b:44:27:c6:
                    eb:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:73:BC:81:E8:39:98:3B:BD:EC:4A:95:30:CE:94:E9:73:4D:4E:18
            X509v3 Authority Key Identifier:
                keyid:60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/2DB473F6250411ED97D298D1F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.221.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:a5:b6:63:2d:e5:eb:d3:c2:72:76:48:5d:4e:e1:5b:f4:5d:
         a8:68:82:c3:6c:7f:bf:c9:90:2b:06:86:58:27:e4:ba:ef:cd:
         f6:fb:3c:df:29:6f:4d:e5:98:38:a1:a5:4d:a0:38:78:31:9e:
         f1:33:34:41:96:1a:06:b9:79:43:ee:49:86:fc:79:ec:0f:b6:
         2e:b9:25:20:7f:be:40:81:9d:75:54:1a:ec:7d:4d:05:01:20:
         01:73:14:df:11:1c:77:4c:ca:20:f0:11:5f:cb:fd:6d:c7:d2:
         e6:be:aa:63:58:a4:3e:e1:c8:e9:49:40:5a:9e:bf:be:75:50:
         77:74:88:0e:f6:2d:7e:bd:40:5f:dc:1c:30:fe:a8:0f:25:22:
         f3:e3:14:47:66:c8:f8:b7:e2:80:a5:5e:da:e6:10:23:8b:d4:
         02:94:d9:cc:22:bf:49:48:8f:25:a2:c7:42:55:e9:25:a1:73:
         07:64:73:df:cc:9d:34:4a:33:76:59:b7:0c:9f:ca:f5:ed:d5:
         2a:8b:ad:90:63:07:3b:bc:ba:13:30:e8:72:b2:6d:7d:53:65:
         ec:78:ba:d9:06:c8:4a:ee:23:44:f5:67:f5:28:7e:06:98:9a:
         19:71:00:64:b1:75:73:77:bb:d7:06:d1:c5:5c:41:e1:5f:2c:
         25:0f:65:3e
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICALowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
M0JBMTlBUjExMC8GA1UEBRMoNjAwQzZDOTU4MkUxNEYzNzlGRDVBNUIyQjE4RDgy
MkUzNjUxQUYyRTAeFw0yMjA4MjYwNTU4NTRaFw0yMzA4MjUwNTU4NTRaMBgxFjAU
BgNVBAMMDTYzMDg2MTIzLWVmYTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCR7E3gorQ815h9IrQsKJSWhq+wca02i7WxCYF8oMr0UhXJ7Vcw2v7q+18f
X+CxJv0t0NBLLlM7rfnsSgZA12X0pm6IksIVz3bhE6yMwkB3gxGSUC0VHGZISpvE
9CK2qUE8rwUPGNtD+0S5huQGSrQ5b2fPs9gP8GeRVAaOMsnmGGAXeAmRdy8Ey4tk
d2j4cnUNbu9tAXgpI0ZJZcIaQ3q+YNe5Qf7AZzvKQFI01eed89WA4lxgvAjf8PVb
w+EwKL/+jb2KEdvzmDZJUvOImCArpWE+abQOwZN3Q1G8pDLWdJiRLk2U16K4yF7z
e6toM0ox/2q7XBIDKAd/m0QnxusNAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUqXO8
geg5mDu97EqVMM6U6XNNThgwHwYDVR0jBBgwFoAUYAxslYLhTzef1aWysY2CLjZR
ry4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5L0ZCQ0M3M0I2OTYyOTExRUM5NUI3QjFFMDVBNDBENTc3L1lBeHNs
WUxoVHplZjFhV3lzWTJDTGpaUnJ5NC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1lBeHNsWUxoVHplZjFhV3lzWTJDTGpaUnJ5NC5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjNCQTE5L0ZCQ0M3M0I2OTYyOTExRUM5NUI3QjFFMDVBNDBE
NTc3LzJEQjQ3M0Y2MjUwNDExRUQ5N0QyOThEMUYxMjIyNDY4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAt3UUwDQYJKoZIhvcNAQELBQAD
ggEBAA6ltmMt5evTwnJ2SF1O4Vv0XahogsNsf7/JkCsGhlgn5Lrvzfb7PN8pb03l
mDihpU2gOHgxnvEzNEGWGga5eUPuSYb8eewPti65JSB/vkCBnXVUGux9TQUBIAFz
FN8RHHdMyiDwEV/L/W3H0ua+qmNYpD7hyOlJQFqev751UHd0iA72LX69QF/cHDD+
qA8lIvPjFEdmyPi34oClXtrmECOL1AKU2cwiv0lIjyWix0JV6SWhcwdkc9/MnTRK
M3ZZtwyfyvXt1SqLrZBjBzu8uhMw6HKybX1TZex4utkGyEruI0T1Z/UofgaYmhlx
AGSxdXN3u9cG0cVcQeFfLCUPZT4=
Generated at Sat Aug 26 02:02:25 2023 by rpki-client on console-fra.rpki-client.org