Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9F92B504B9111EC97BC4E0ED8A014CE.roa
File:                     C9F92B504B9111EC97BC4E0ED8A014CE.roa (raw, json)
Hash identifier:          DuBSGf5Z9s+hBRLLLjF8fKIf7piepMWhfboayvtu77M=
Subject key identifier:   00:CA:F6:7E:AA:B4:43:AF:CF:C0:D4:AA:E3:67:45:7A:C4:2C:E3:0C
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       121A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9F92B504B9111EC97BC4E0ED8A014CE.roa
Signing time:             Mon 22 Nov 2021 12:43:27 +0000
ROA not before:           Mon 22 Nov 2021 12:43:24 +0000
ROA not after:            Sat 19 Nov 2022 12:43:24 +0000
asID:                     9009
IP address blocks:        154.92.115.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4634 (0x121a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov 22 12:43:24 2021 GMT
            Not After : Nov 19 12:43:24 2022 GMT
        Subject: CN=619b906f-656c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5f:ea:e3:51:4a:e2:2d:6e:49:dd:c1:fc:86:
                    aa:69:ec:c7:30:87:ba:f5:3f:bc:d3:6b:0a:d6:9c:
                    62:99:ed:42:5f:1e:72:b1:c7:ea:6b:02:04:2a:5d:
                    b6:c3:49:10:bf:c1:71:10:c6:6a:3c:79:78:51:26:
                    21:3b:7f:4e:a4:0d:6d:81:61:c0:d6:c4:79:69:e1:
                    54:1b:ab:04:06:8a:4a:2b:d6:62:57:5e:21:28:e5:
                    05:bc:0a:1f:10:6d:fc:2c:26:0e:6d:2b:8c:36:48:
                    f1:7f:32:cd:59:01:cf:62:f3:94:b5:45:ac:7a:ef:
                    bb:eb:5d:76:fe:10:20:ed:ae:87:b7:7b:54:10:29:
                    82:91:2d:0e:95:a2:5a:92:df:a0:23:7c:81:4a:82:
                    47:32:32:3a:40:33:03:10:2e:ed:6b:d9:7e:bb:5d:
                    f7:d8:e8:7d:1e:9c:35:80:d0:5d:72:28:76:1e:5b:
                    a5:18:37:f2:e4:59:fc:b8:f1:3d:13:60:1f:b2:ca:
                    74:5b:63:82:da:99:b9:53:7d:5e:d0:c6:58:a7:a8:
                    77:b8:f5:d8:92:50:c8:d2:7a:bb:76:24:e2:4b:c5:
                    13:42:33:f4:e9:9a:13:92:f2:74:80:d4:aa:40:7e:
                    cd:f7:66:88:b6:d4:d3:64:64:b0:4b:fe:31:f9:20:
                    61:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:CA:F6:7E:AA:B4:43:AF:CF:C0:D4:AA:E3:67:45:7A:C4:2C:E3:0C
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9F92B504B9111EC97BC4E0ED8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.92.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:95:12:09:4b:ff:5e:c1:b2:15:1a:b1:57:2c:8a:46:2f:8f:
         d5:ad:b9:a2:8b:fb:21:3e:43:41:1f:59:6f:9d:84:1a:6b:e8:
         3e:36:85:f4:fe:92:be:66:93:5c:bd:37:49:32:50:04:81:be:
         b9:92:4f:6e:f3:66:fe:24:b2:a9:d7:fc:ee:fe:27:83:da:61:
         40:dd:45:3e:b6:9e:f0:69:2a:bf:48:34:2f:1f:b2:19:21:9c:
         ee:7c:44:e1:3a:8c:c2:f3:9c:40:52:02:ea:e2:3c:79:18:2e:
         fa:d3:ac:04:1c:b2:9e:f8:46:10:31:1c:c2:62:06:11:55:57:
         81:82:24:ad:4e:29:ad:c8:df:9c:5c:8d:bc:f6:0d:79:16:0a:
         f0:f4:3d:95:7f:11:cd:5d:70:21:71:65:b4:19:7d:03:82:ba:
         a4:af:40:19:b0:af:8f:a7:2c:34:8e:50:21:d3:ff:53:24:6b:
         fc:68:4d:81:02:f7:0c:cd:1a:3d:44:6f:c9:68:e1:f1:2a:52:
         13:b5:3d:fe:42:d1:c3:e9:10:8b:82:e8:52:cc:3c:6d:62:f9:
         93:f4:ce:16:dc:5b:28:d8:db:b1:c2:8a:14:ea:3f:00:e0:41:
         b0:69:a5:47:68:3a:0e:23:e5:db:d3:7f:72:97:77:78:e8:54:
         e2:8c:8c:36
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICEhowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMTExMjIxMjQzMjRaFw0yMjExMTkxMjQzMjRaMBgxFjAU
BgNVBAMMDTYxOWI5MDZmLTY1NmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCyX+rjUUriLW5J3cH8hqpp7Mcwh7r1P7zTawrWnGKZ7UJfHnKxx+prAgQq
XbbDSRC/wXEQxmo8eXhRJiE7f06kDW2BYcDWxHlp4VQbqwQGikor1mJXXiEo5QW8
Ch8QbfwsJg5tK4w2SPF/Ms1ZAc9i85S1Rax677vrXXb+ECDtroe3e1QQKYKRLQ6V
olqS36AjfIFKgkcyMjpAMwMQLu1r2X67XffY6H0enDWA0F1yKHYeW6UYN/LkWfy4
8T0TYB+yynRbY4LamblTfV7QxlinqHe49diSUMjSert2JOJLxRNCM/TpmhOS8nSA
1KpAfs33Zoi21NNkZLBL/jH5IGGTAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUAMr2
fqq0Q6/PwNSq42dFesQs4wwwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4L0M5RjkyQjUwNEI5MTExRUM5N0JDNEUwRUQ4QTAxNENFLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaXHMwDQYJKoZIhvcNAQEL
BQADggEBAFCVEglL/17BshUasVcsikYvj9WtuaKL+yE+Q0EfWW+dhBpr6D42hfT+
kr5mk1y9N0kyUASBvrmST27zZv4ksqnX/O7+J4PaYUDdRT62nvBpKr9INC8fshkh
nO58ROE6jMLznEBSAuriPHkYLvrTrAQcsp74RhAxHMJiBhFVV4GCJK1OKa3I35xc
jbz2DXkWCvD0PZV/Ec1dcCFxZbQZfQOCuqSvQBmwr4+nLDSOUCHT/1Mka/xoTYEC
9wzNGj1Eb8lo4fEqUhO1Pf5C0cPpEIuC6FLMPG1i+ZP0zhbcWyjY27HCihTqPwDg
QbBppUdoOg4j5dvTf3KXd3joVOKMjDY=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:11 2023 by rpki-client on console-ams.rpki-client.org