Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82CADF7628B911ECAD93F628D8A014CE.roa
File:                     82CADF7628B911ECAD93F628D8A014CE.roa (raw, json)
Hash identifier:          Mmv8lpaK7CW7pExGmyWTAe/BjtZg1oH9OXFjnBjo9Ls=
Subject key identifier:   51:58:06:A9:07:A8:C0:1F:63:99:BD:B2:88:09:B3:61:9C:FC:A1:96
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       0C83
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82CADF7628B911ECAD93F628D8A014CE.roa
Signing time:             Sat 09 Oct 2021 04:29:38 +0000
ROA not before:           Sat 09 Oct 2021 04:29:32 +0000
ROA not after:            Sun 27 Nov 2022 04:29:32 +0000
asID:                     36671
IP address blocks:        154.210.0.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3203 (0xc83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct  9 04:29:32 2021 GMT
            Not After : Nov 27 04:29:32 2022 GMT
        Subject: CN=61611ab2-4646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d7:b9:ed:fc:10:a8:b0:d1:3f:98:ac:79:0a:
                    21:fc:ed:fe:10:27:22:1b:c3:44:90:ba:de:fc:85:
                    4d:4a:20:67:36:85:da:e7:89:54:7c:6e:3b:6b:bd:
                    67:43:fb:17:04:ea:04:be:63:0d:48:e6:a3:8f:ee:
                    aa:e2:d7:a9:3b:1a:2c:3d:6d:e8:62:3e:85:52:b2:
                    36:10:c6:3b:dd:39:fc:0d:f7:71:64:f6:a5:04:a3:
                    c1:c1:5c:f6:d9:43:d2:5c:20:1b:ec:ee:64:d4:95:
                    ce:6a:3a:fc:58:57:9e:73:e1:e3:34:99:18:ac:78:
                    76:a8:02:7f:90:eb:41:0d:4a:d7:30:d0:c8:ad:19:
                    59:5f:68:fb:d5:b1:c4:03:55:ee:d8:22:c1:29:ce:
                    06:d8:c6:1b:4e:3f:f8:36:be:cd:81:cb:31:e5:0b:
                    e3:b1:2c:bf:2f:e6:cb:e8:21:ed:45:4b:e6:ee:69:
                    5f:99:e0:40:f5:ba:7a:4e:ea:ea:90:7a:da:3d:d5:
                    49:23:cf:11:6b:6d:16:46:ab:b9:be:1e:f5:6f:20:
                    85:ab:ca:82:f9:44:a2:b6:9b:f4:f6:3f:92:3f:13:
                    06:ea:4a:9b:8e:57:8e:d5:7a:d9:82:bc:1e:0b:87:
                    28:e0:51:b1:fc:43:33:ee:f0:61:fc:54:bb:e4:26:
                    8b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:58:06:A9:07:A8:C0:1F:63:99:BD:B2:88:09:B3:61:9C:FC:A1:96
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82CADF7628B911ECAD93F628D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.210.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:86:94:54:5e:f0:fc:32:c4:c4:83:e6:1b:df:f0:f9:22:9b:
         6f:1a:45:2b:28:6a:50:79:0c:98:fe:91:9e:a0:ba:33:a0:48:
         47:a7:e1:a3:a6:ee:10:7b:c1:1a:eb:9c:cf:6c:dd:0c:32:ca:
         94:4e:89:e2:99:68:8b:4a:92:3b:94:75:97:3e:8f:34:51:53:
         55:fa:04:c8:77:4b:64:25:32:4a:4b:a3:e1:91:1c:ec:b2:d7:
         95:45:c7:70:88:04:30:77:e5:db:02:ac:cc:59:c1:4d:40:b8:
         a2:2c:7c:89:92:2b:a3:41:a9:12:78:8f:c3:c3:88:0b:73:0b:
         09:21:21:af:28:e1:4b:4f:a2:3f:7d:0c:58:0b:9f:c5:96:5d:
         7d:36:a1:5c:11:30:e7:59:1f:fb:d2:2f:88:ff:18:3b:a3:a0:
         03:f4:29:35:11:74:6d:0f:83:28:27:d0:8a:1d:c8:8c:84:35:
         7c:75:a6:94:48:90:b5:3e:f1:17:11:13:0d:65:c3:ab:86:cf:
         69:c1:a0:d7:f4:90:bd:0b:f7:13:1d:58:e5:3d:e6:b7:8d:ee:
         0e:90:8a:50:9e:2e:bf:60:a4:12:d4:e4:e0:06:41:25:b7:d8:
         79:d1:6f:de:08:7e:f1:f7:cd:76:53:a0:9b:d3:20:08:ca:2c:
         f8:53:29:52
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDIMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMTEwMDkwNDI5MzJaFw0yMjExMjcwNDI5MzJaMBgxFjAU
BgNVBAMMDTYxNjExYWIyLTQ2NDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC217nt/BCosNE/mKx5CiH87f4QJyIbw0SQut78hU1KIGc2hdrniVR8bjtr
vWdD+xcE6gS+Yw1I5qOP7qri16k7Giw9behiPoVSsjYQxjvdOfwN93Fk9qUEo8HB
XPbZQ9JcIBvs7mTUlc5qOvxYV55z4eM0mRiseHaoAn+Q60ENStcw0MitGVlfaPvV
scQDVe7YIsEpzgbYxhtOP/g2vs2ByzHlC+OxLL8v5svoIe1FS+buaV+Z4ED1unpO
6uqQeto91UkjzxFrbRZGq7m+HvVvIIWryoL5RKK2m/T2P5I/EwbqSpuOV47VetmC
vB4LhyjgUbH8QzPu8GH8VLvkJosvAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUUVgG
qQeowB9jmb2yiAmzYZz8oZYwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzgyQ0FERjc2MjhCOTExRUNBRDkzRjYyOEQ4QTAxNENFLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACa0gAwDQYJKoZIhvcNAQEL
BQADggEBAKmGlFRe8PwyxMSD5hvf8Pkim28aRSsoalB5DJj+kZ6gujOgSEen4aOm
7hB7wRrrnM9s3QwyypROieKZaItKkjuUdZc+jzRRU1X6BMh3S2QlMkpLo+GRHOyy
15VFx3CIBDB35dsCrMxZwU1AuKIsfImSK6NBqRJ4j8PDiAtzCwkhIa8o4UtPoj99
DFgLn8WWXX02oVwRMOdZH/vSL4j/GDujoAP0KTURdG0Pgygn0IodyIyENXx1ppRI
kLU+8RcREw1lw6uGz2nBoNf0kL0L9xMdWOU95reN7g6QilCeLr9gpBLU5OAGQSW3
2HnRb94IfvH3zXZToJvTIAjKLPhTKVI=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:08 2023 by rpki-client on console-ams.rpki-client.org