Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C58A456E57E11EBAD04B32BF8AEA228.roa
File:                     9C58A456E57E11EBAD04B32BF8AEA228.roa (raw, json)
Hash identifier:          FgFN/zIB+OKRfyuBxzQGnjPyO1ygnnygLAPrzahc3T8=
Subject key identifier:   E2:65:2F:74:DC:5C:82:00:01:D3:E5:9C:D3:C1:3C:69:FC:F4:B6:6F
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       07C8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C58A456E57E11EBAD04B32BF8AEA228.roa
Signing time:             Thu 15 Jul 2021 15:09:12 +0000
ROA not before:           Thu 15 Jul 2021 15:09:06 +0000
ROA not after:            Sat 09 Jul 2022 15:09:06 +0000
asID:                     397630
IP address blocks:        154.202.100.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1992 (0x7c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jul 15 15:09:06 2021 GMT
            Not After : Jul  9 15:09:06 2022 GMT
        Subject: CN=60f04f98-1902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8e:32:61:0e:6f:18:0e:b2:dd:8e:27:f4:b2:
                    2b:3f:97:17:72:74:74:c0:2a:c4:11:73:c6:d0:d0:
                    10:9d:12:13:48:58:70:4c:5d:88:ca:85:cb:01:7c:
                    ed:0c:c8:10:94:18:20:1d:6c:0d:6b:f8:e7:fd:e9:
                    ec:b2:8b:d2:c0:2e:74:67:07:82:b0:1e:62:5e:9d:
                    ae:89:8f:d1:9a:f5:04:6e:7f:9d:e0:f6:30:71:7f:
                    c0:9a:69:9e:79:50:1f:c0:1c:1e:78:ec:f4:62:bd:
                    30:62:78:da:88:71:ab:d0:ac:e4:e4:5d:67:03:b3:
                    6b:e8:09:00:78:7f:ac:76:b9:5c:b7:e3:01:ba:6b:
                    d1:94:e3:37:6d:09:bf:b9:ce:d1:21:23:a3:5c:9f:
                    7e:1d:08:93:a3:80:23:bf:72:f3:b3:29:2f:e6:f1:
                    13:ce:8e:37:15:dd:35:93:f2:0d:24:c3:18:81:56:
                    41:c0:ef:0d:99:16:a2:43:e3:18:a9:cd:cf:4b:10:
                    4c:be:4c:8e:b3:dd:95:25:af:b1:b6:ff:76:c1:b1:
                    0b:5e:d0:c1:a2:f7:94:01:28:36:f9:36:9b:12:37:
                    90:b3:58:eb:e7:bc:5b:6b:4d:99:08:5a:16:5a:49:
                    41:80:3d:ac:da:12:cc:90:d8:af:39:b4:be:09:2a:
                    df:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:65:2F:74:DC:5C:82:00:01:D3:E5:9C:D3:C1:3C:69:FC:F4:B6:6F
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C58A456E57E11EBAD04B32BF8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.202.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:b2:71:cb:7e:30:3e:8c:2d:a6:d8:9f:ee:17:27:bd:4a:cf:
         1a:08:64:59:d1:2f:9e:3d:ba:1f:6c:4a:9e:e4:38:a6:6b:cf:
         1b:fa:5e:a3:c5:a6:99:30:bd:52:2a:6f:f4:41:c0:c0:95:a0:
         01:29:03:33:06:52:2f:71:27:87:eb:a4:24:f5:ae:5e:a1:7e:
         72:08:6d:5a:fd:18:f9:de:10:9a:dc:a2:fd:c0:a7:79:78:43:
         e5:61:92:d4:2b:79:99:74:a2:56:ad:5d:fd:1c:7e:ca:f5:ec:
         00:bc:d9:42:bc:df:cb:3f:e8:89:55:8b:b5:60:d3:2a:10:6f:
         c9:fb:10:27:d7:03:b5:ad:ae:25:b7:b0:e1:13:77:8b:e1:51:
         02:5c:f7:a1:3d:50:40:7e:55:24:92:d3:a6:b7:66:14:8f:09:
         02:71:6a:d7:7b:93:6f:ff:4c:28:bb:aa:dd:f6:55:7f:1d:ee:
         8c:04:8f:3c:79:98:6a:6d:58:f1:14:97:a9:64:5b:73:52:a0:
         b5:e7:d1:29:4a:da:ef:46:7a:e8:ae:75:11:85:a7:70:ed:79:
         aa:68:43:a3:dc:fc:bf:73:11:ba:95:28:34:36:87:29:29:cb:
         8d:8e:2c:a3:90:6e:bf:85:59:59:6c:f3:b8:7f:61:dc:17:6f:
         b0:64:4e:b2
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICB8gwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMTA3MTUxNTA5MDZaFw0yMjA3MDkxNTA5MDZaMBgxFjAU
BgNVBAMTDTYwZjA0Zjk4LTE5MDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCkjjJhDm8YDrLdjif0sis/lxdydHTAKsQRc8bQ0BCdEhNIWHBMXYjKhcsB
fO0MyBCUGCAdbA1r+Of96eyyi9LALnRnB4KwHmJena6Jj9Ga9QRuf53g9jBxf8Ca
aZ55UB/AHB547PRivTBieNqIcavQrOTkXWcDs2voCQB4f6x2uVy34wG6a9GU4zdt
Cb+5ztEhI6Ncn34dCJOjgCO/cvOzKS/m8RPOjjcV3TWT8g0kwxiBVkHA7w2ZFqJD
4xipzc9LEEy+TI6z3ZUlr7G2/3bBsQte0MGi95QBKDb5NpsSN5CzWOvnvFtrTZkI
WhZaSUGAPazaEsyQ2K85tL4JKt+JAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU4mUv
dNxcggAB0+Wc08E8afz0tm8wHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzlDNThBNDU2RTU3RTExRUJBRDA0QjMyQkY4QUVBMjI4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaymQwDQYJKoZIhvcNAQEL
BQADggEBAEKycct+MD6MLabYn+4XJ71KzxoIZFnRL549uh9sSp7kOKZrzxv6XqPF
ppkwvVIqb/RBwMCVoAEpAzMGUi9xJ4frpCT1rl6hfnIIbVr9GPneEJrcov3Ap3l4
Q+VhktQreZl0olatXf0cfsr17AC82UK838s/6IlVi7Vg0yoQb8n7ECfXA7WtriW3
sOETd4vhUQJc96E9UEB+VSSS06a3ZhSPCQJxatd7k2//TCi7qt32VX8d7owEjzx5
mGptWPEUl6lkW3NSoLXn0SlK2u9GeuiudRGFp3DteapoQ6Pc/L9zEbqVKDQ2hykp
y42OLKOQbr+FWVls87h/YdwXb7BkTrI=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:12 2023 by rpki-client on console-fra.rpki-client.org