Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/460C37BE4B9211ECA5D7220FD8A014CE.roa
File:                     460C37BE4B9211ECA5D7220FD8A014CE.roa (raw, json)
Hash identifier:          RkFkVf8RlhqD8QhrMHiuP3SboeX9eLEw+pcyQInm++0=
Subject key identifier:   7E:9C:34:36:68:11:0A:D0:1D:D2:C7:F7:02:30:41:E2:67:59:5B:29
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       1224
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/460C37BE4B9211ECA5D7220FD8A014CE.roa
Signing time:             Mon 22 Nov 2021 12:46:55 +0000
ROA not before:           Mon 22 Nov 2021 12:46:52 +0000
ROA not after:            Sat 19 Nov 2022 12:46:52 +0000
asID:                     9009
IP address blocks:        154.92.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4644 (0x1224)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov 22 12:46:52 2021 GMT
            Not After : Nov 19 12:46:52 2022 GMT
        Subject: CN=619b913f-f511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:56:56:32:18:ad:09:00:70:f0:08:cc:7e:56:
                    3e:8b:f3:a3:b5:4a:ee:d5:77:29:f4:26:5c:cf:49:
                    5d:ea:7c:b5:e1:ca:7a:f9:16:5c:91:53:ba:94:fd:
                    b3:60:48:11:e3:c0:dc:56:c0:9c:0f:18:a9:07:9f:
                    5d:e4:62:5f:8d:ea:31:18:40:30:2b:69:c5:28:8f:
                    8d:a1:46:08:5a:ae:74:31:c2:2f:78:98:34:b9:7a:
                    db:ed:3b:fd:53:f6:e2:68:f0:00:30:02:6a:8d:f9:
                    23:97:72:98:95:2a:f8:8e:ea:a7:1a:cd:d6:95:83:
                    6f:8f:52:43:ed:28:92:64:c8:53:7f:24:20:7a:ce:
                    cd:a3:6d:f9:40:45:a8:07:6a:ca:ef:8b:14:6a:83:
                    a9:b7:a0:a3:22:ec:57:81:87:6b:92:82:37:93:49:
                    f7:c5:77:c7:94:b2:53:0f:59:06:ef:60:fc:f4:6c:
                    e6:c6:cb:de:4a:d5:0d:43:e9:28:c9:80:d9:24:7b:
                    d3:28:49:b7:82:df:89:0f:01:eb:7c:b8:e2:a5:75:
                    ca:4a:f6:15:76:ac:3f:d6:b6:39:fd:b1:1e:24:9e:
                    26:e3:28:9f:10:04:1e:27:c4:eb:19:d8:d6:40:3a:
                    f1:bc:8b:fe:8f:fc:21:d6:d0:a6:63:0c:ea:58:9a:
                    ff:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:9C:34:36:68:11:0A:D0:1D:D2:C7:F7:02:30:41:E2:67:59:5B:29
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/460C37BE4B9211ECA5D7220FD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.92.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cd:49:da:f2:db:bd:ec:aa:6f:48:60:f6:d4:fa:17:96:41:ad:
         3d:69:d7:26:07:bb:56:33:a5:13:5c:f5:33:8e:95:13:9c:65:
         7e:cc:83:78:32:60:d6:94:5c:fd:45:17:9c:f3:fa:64:9e:02:
         c3:88:e6:ac:31:ff:37:ce:e0:b1:0d:cc:84:94:76:16:23:11:
         76:6a:b0:11:07:b9:0e:79:83:ef:c1:01:92:7e:b5:4f:56:db:
         26:4c:46:3c:c8:7f:67:b9:35:de:7e:d6:d2:b3:50:70:2f:d1:
         52:4c:b2:ae:bb:1a:29:37:ec:08:fe:c9:92:dd:b9:e3:d1:8c:
         b3:76:d2:69:89:b8:0b:1f:58:15:37:a1:80:46:dc:08:5c:1f:
         ca:c1:4f:61:84:6a:6f:69:a6:2a:c7:b5:90:12:0c:3f:1f:83:
         48:af:99:ae:59:d3:f6:d0:23:15:4b:52:c3:19:eb:1b:1c:55:
         cf:39:92:30:0e:db:da:b0:4d:71:a5:0b:6a:52:da:a0:4a:a8:
         db:9e:5a:91:a1:5c:55:28:b7:6d:2e:a7:8f:59:36:45:ed:44:
         9a:cb:ad:69:20:0d:aa:39:7f:6e:64:03:e8:03:31:5a:d9:86:
         4a:35:8a:db:6b:ba:4b:e8:49:4e:8f:19:c6:64:73:c4:e9:0f:
         f5:c8:5c:db
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICEiQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMTExMjIxMjQ2NTJaFw0yMjExMTkxMjQ2NTJaMBgxFjAU
BgNVBAMMDTYxOWI5MTNmLWY1MTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCrVlYyGK0JAHDwCMx+Vj6L86O1Su7Vdyn0JlzPSV3qfLXhynr5FlyRU7qU
/bNgSBHjwNxWwJwPGKkHn13kYl+N6jEYQDAracUoj42hRgharnQxwi94mDS5etvt
O/1T9uJo8AAwAmqN+SOXcpiVKviO6qcazdaVg2+PUkPtKJJkyFN/JCB6zs2jbflA
RagHasrvixRqg6m3oKMi7FeBh2uSgjeTSffFd8eUslMPWQbvYPz0bObGy95K1Q1D
6SjJgNkke9MoSbeC34kPAet8uOKldcpK9hV2rD/Wtjn9sR4knibjKJ8QBB4nxOsZ
2NZAOvG8i/6P/CHW0KZjDOpYmv+bAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUfpw0
NmgRCtAd0sf3AjBB4mdZWykwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzQ2MEMzN0JFNEI5MjExRUNBNUQ3MjIwRkQ4QTAxNENFLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaXHgwDQYJKoZIhvcNAQEL
BQADggEBAM1J2vLbveyqb0hg9tT6F5ZBrT1p1yYHu1YzpRNc9TOOlROcZX7Mg3gy
YNaUXP1FF5zz+mSeAsOI5qwx/zfO4LENzISUdhYjEXZqsBEHuQ55g+/BAZJ+tU9W
2yZMRjzIf2e5Nd5+1tKzUHAv0VJMsq67Gik37Aj+yZLduePRjLN20mmJuAsfWBU3
oYBG3AhcH8rBT2GEam9ppirHtZASDD8fg0ivma5Z0/bQIxVLUsMZ6xscVc85kjAO
29qwTXGlC2pS2qBKqNueWpGhXFUot20up49ZNkXtRJrLrWkgDao5f25kA+gDMVrZ
hko1ittrukvoSU6PGcZkc8TpD/XIXNs=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:06 2023 by rpki-client on console-ams.rpki-client.org