Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1BCBA44257D811ECA34D9FCD5A40D577.roa
File:                     1BCBA44257D811ECA34D9FCD5A40D577.roa (raw, json)
Hash identifier:          u4zqs8v+8wi0REzSkqTcav606SarnzoRs/bxgDduMrA=
Subject key identifier:   83:38:16:F5:C0:70:BC:76:A7:C6:93:F9:B3:65:E7:E6:97:2A:9D:4C
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       1363
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1BCBA44257D811ECA34D9FCD5A40D577.roa
Signing time:             Wed 08 Dec 2021 03:37:03 +0000
ROA not before:           Wed 08 Dec 2021 03:37:00 +0000
ROA not after:            Fri 30 Dec 2022 03:37:00 +0000
asID:                     54600
IP address blocks:        154.208.110.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4963 (0x1363)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec  8 03:37:00 2021 GMT
            Not After : Dec 30 03:37:00 2022 GMT
        Subject: CN=61b0285f-59ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6e:34:4c:7d:86:4d:d5:a6:12:e7:c0:3a:c1:
                    8f:62:43:01:25:10:62:2f:ca:ff:8f:42:1c:93:ae:
                    4d:49:79:f5:19:fc:7c:f7:e7:49:23:12:0f:63:59:
                    b0:26:07:aa:0c:37:5c:a2:ea:13:21:67:ce:7a:9a:
                    36:56:be:78:bf:59:83:1a:8e:3a:fc:66:44:bd:f9:
                    47:ec:66:33:51:d4:ad:dc:28:ba:e7:a2:f0:a4:df:
                    fd:ae:42:a4:ba:00:f9:f7:2b:60:5f:2b:50:69:32:
                    7e:3c:1e:79:a7:f7:61:68:fe:67:26:70:99:05:cb:
                    a6:a5:88:6e:5e:13:a9:18:c4:c1:fd:4f:cb:b1:08:
                    c4:d2:32:b8:87:48:60:fc:b9:b8:38:c6:7b:13:c6:
                    45:08:99:90:32:8f:96:e1:58:9c:d3:97:ca:73:e3:
                    4d:5a:ff:a8:65:0e:4d:89:1f:32:d1:6f:1d:c0:2f:
                    91:e3:09:1f:4e:75:2a:38:3b:40:07:19:ad:45:c9:
                    69:8c:d0:f8:a4:aa:6b:56:3d:23:4b:df:6b:fe:fa:
                    bd:5a:80:ae:04:43:56:5e:46:93:16:8c:69:87:45:
                    2c:27:be:13:eb:da:97:5a:a9:41:f7:de:0d:3e:99:
                    3f:79:76:0b:d4:f2:d2:83:1f:eb:80:47:c3:d7:4f:
                    2c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:38:16:F5:C0:70:BC:76:A7:C6:93:F9:B3:65:E7:E6:97:2A:9D:4C
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1BCBA44257D811ECA34D9FCD5A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.208.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:d1:d7:5a:cd:ed:72:07:b0:0c:e5:01:e9:13:b1:4c:69:26:
         88:5e:06:f0:94:d6:3e:6d:f1:01:3e:9f:fd:78:07:26:27:0a:
         8e:1b:02:7c:db:82:89:e0:70:55:da:48:60:62:06:23:4b:8e:
         a6:76:ef:53:37:fa:b7:e3:da:08:8a:bd:e4:15:4b:fc:df:7e:
         43:e5:e5:4c:90:e4:a4:dc:77:47:9e:cc:a7:f8:35:35:12:46:
         a0:5d:eb:74:28:d2:22:88:ab:06:b3:af:51:c5:2d:2e:62:60:
         34:a0:c5:2b:b3:a0:c1:0b:77:2d:8c:e2:a0:06:fd:9d:3f:d4:
         59:05:d7:03:8e:00:ec:4e:e1:21:7e:d4:ca:5a:cb:40:35:25:
         a0:02:54:66:2d:6d:83:07:2d:39:fc:2e:f1:b5:d1:80:f3:80:
         d3:3b:0f:8a:bc:aa:1b:87:94:cb:dd:40:0c:1b:4e:92:38:f9:
         b5:9e:36:52:ba:a3:33:da:e8:1e:79:59:b9:6f:65:07:da:43:
         96:6d:c6:eb:86:c4:23:9b:30:37:2f:e9:1c:e6:58:08:ef:fe:
         0d:d2:4a:34:2c:0d:26:40:d1:94:54:7b:98:cb:e8:a8:29:06:
         ab:3c:9a:6a:f3:74:32:2c:91:e9:b4:21:4c:3c:04:bc:df:7c:
         3d:f7:91:76
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICE2MwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMTEyMDgwMzM3MDBaFw0yMjEyMzAwMzM3MDBaMBgxFjAU
BgNVBAMMDTYxYjAyODVmLTU5Y2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC+bjRMfYZN1aYS58A6wY9iQwElEGIvyv+PQhyTrk1JefUZ/Hz350kjEg9j
WbAmB6oMN1yi6hMhZ856mjZWvni/WYMajjr8ZkS9+UfsZjNR1K3cKLrnovCk3/2u
QqS6APn3K2BfK1BpMn48Hnmn92Fo/mcmcJkFy6aliG5eE6kYxMH9T8uxCMTSMriH
SGD8ubg4xnsTxkUImZAyj5bhWJzTl8pz401a/6hlDk2JHzLRbx3AL5HjCR9OdSo4
O0AHGa1FyWmM0PikqmtWPSNL32v++r1agK4EQ1ZeRpMWjGmHRSwnvhPr2pdaqUH3
3g0+mT95dgvU8tKDH+uAR8PXTyw7AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUgzgW
9cBwvHanxpP5s2Xn5pcqnUwwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzFCQ0JBNDQyNTdEODExRUNBMzREOUZDRDVBNDBENTc3LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACa0G4wDQYJKoZIhvcNAQEL
BQADggEBAEXR11rN7XIHsAzlAekTsUxpJoheBvCU1j5t8QE+n/14ByYnCo4bAnzb
gongcFXaSGBiBiNLjqZ271M3+rfj2giKveQVS/zffkPl5UyQ5KTcd0eezKf4NTUS
RqBd63Qo0iKIqwazr1HFLS5iYDSgxSuzoMELdy2M4qAG/Z0/1FkF1wOOAOxO4SF+
1Mpay0A1JaACVGYtbYMHLTn8LvG10YDzgNM7D4q8qhuHlMvdQAwbTpI4+bWeNlK6
ozPa6B55WblvZQfaQ5ZtxuuGxCObMDcv6RzmWAjv/g3SSjQsDSZA0ZRUe5jL6Kgp
Bqs8mmrzdDIskem0IUw8BLzffD33kXY=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:04 2023 by rpki-client on console-ams.rpki-client.org