Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F496E3903B1711ED889CCEC0F1222468.roa
File:                     F496E3903B1711ED889CCEC0F1222468.roa (raw, json)
Hash identifier:          ATz5irVlOxqiYCDCWBYrZnM0zj3JoHjXy7lJtnQRYtk=
Subject key identifier:   67:AE:04:02:99:19:B8:C3:7C:1B:94:7A:8A:26:74:15:B0:F3:80:E8
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       190B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F496E3903B1711ED889CCEC0F1222468.roa
Signing time:             Fri 23 Sep 2022 08:15:59 +0000
ROA not before:           Fri 23 Sep 2022 08:15:56 +0000
ROA not after:            Fri 30 Dec 2022 08:15:56 +0000
asID:                     328608
IP address blocks:        154.208.1.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6411 (0x190b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 23 08:15:56 2022 GMT
            Not After : Dec 30 08:15:56 2022 GMT
        Subject: CN=632d6b3f-4121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:69:cc:36:ae:73:a6:93:f7:f2:11:e8:62:bb:
                    2d:96:c4:9a:7a:fa:43:8e:da:4a:31:a5:dc:41:8c:
                    13:0f:af:73:00:db:58:c2:00:ea:93:51:50:51:a2:
                    1c:a7:97:1e:ce:01:b4:8c:13:40:87:05:fb:74:17:
                    29:da:0c:63:73:25:40:85:16:e2:c7:2c:45:04:30:
                    c1:4e:d9:6f:2b:1e:d5:ff:55:90:c1:ec:d8:1c:69:
                    d0:8d:8c:38:52:f5:24:df:1a:a8:73:16:fe:13:10:
                    a8:0e:d4:0a:f6:c3:0c:b8:6b:7f:55:ec:52:96:59:
                    08:8c:0b:28:d5:79:1a:4f:3f:72:c9:66:95:19:48:
                    d3:9a:68:d7:67:99:da:1c:ff:7f:5b:3d:d1:f2:18:
                    8d:6d:58:1a:d0:5f:cf:e3:58:c9:8c:ff:6b:79:b6:
                    0f:4e:65:60:84:20:17:f3:5d:b3:07:70:97:82:fe:
                    8b:f0:7d:0e:16:32:76:4d:8e:56:b0:70:95:b2:b4:
                    ef:a6:3c:07:e3:7f:9e:ae:0a:d2:4b:ca:9e:ad:ef:
                    69:f6:55:25:96:59:15:ba:30:4f:9c:5f:97:4c:a0:
                    e7:69:10:1e:39:c0:6c:38:aa:97:04:51:4a:70:24:
                    16:3f:68:c4:a4:56:cb:fe:be:4a:4c:8f:3a:a5:ca:
                    50:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:AE:04:02:99:19:B8:C3:7C:1B:94:7A:8A:26:74:15:B0:F3:80:E8
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F496E3903B1711ED889CCEC0F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.208.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:33:b3:5e:67:0d:4b:43:9a:b7:80:1b:88:9b:ba:be:32:a1:
         64:0e:37:28:28:cd:e2:da:5d:20:d2:b5:29:5b:48:89:78:8e:
         93:59:00:b1:65:74:7e:7d:3d:38:01:4a:c7:ae:82:98:42:e5:
         ef:34:59:67:48:a7:58:85:56:08:2e:c8:23:1d:ad:ca:9e:a3:
         5f:2d:6c:2a:f7:7c:a7:57:28:23:f0:cf:11:8e:c1:57:ac:0f:
         9f:4d:df:03:40:17:77:93:e0:72:a4:8b:ac:9f:cd:d8:40:e5:
         0b:e5:bc:01:88:ca:f8:b6:f1:e3:54:31:a0:ae:ee:90:64:d8:
         c1:71:67:cd:1f:85:3b:f9:b6:f7:e6:5d:47:99:01:f2:3c:e3:
         74:36:37:5c:74:50:7b:fd:cb:6c:f8:8b:3a:ec:f3:c9:2a:13:
         72:8c:df:1a:fe:f9:0f:a4:5c:f0:ff:52:eb:11:ae:6d:e4:17:
         43:bd:47:ef:24:d8:9e:75:9e:cd:6f:0a:fd:e4:01:68:d5:c5:
         6f:b2:a6:b3:60:be:12:f5:02:a6:12:8a:03:a9:39:51:cf:56:
         f9:32:9e:52:4d:3f:59:1e:03:89:ea:a7:01:76:3b:48:e0:26:
         f5:42:d0:59:0f:97:4b:56:41:27:52:a7:0b:bd:11:bd:f9:0a:
         9f:39:43:47
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICGQswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMjA5MjMwODE1NTZaFw0yMjEyMzAwODE1NTZaMBgxFjAU
BgNVBAMMDTYzMmQ2YjNmLTQxMjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQClacw2rnOmk/fyEehiuy2WxJp6+kOO2koxpdxBjBMPr3MA21jCAOqTUVBR
ohynlx7OAbSME0CHBft0FynaDGNzJUCFFuLHLEUEMMFO2W8rHtX/VZDB7NgcadCN
jDhS9STfGqhzFv4TEKgO1Ar2wwy4a39V7FKWWQiMCyjVeRpPP3LJZpUZSNOaaNdn
mdoc/39bPdHyGI1tWBrQX8/jWMmM/2t5tg9OZWCEIBfzXbMHcJeC/ovwfQ4WMnZN
jlawcJWytO+mPAfjf56uCtJLyp6t72n2VSWWWRW6ME+cX5dMoOdpEB45wGw4qpcE
UUpwJBY/aMSkVsv+vkpMjzqlylDJAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUZ64E
ApkZuMN8G5R6iiZ0FbDzgOgwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4L0Y0OTZFMzkwM0IxNzExRUQ4ODlDQ0VDMEYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACa0AEwDQYJKoZIhvcNAQEL
BQADggEBADAzs15nDUtDmreAG4ibur4yoWQONygozeLaXSDStSlbSIl4jpNZALFl
dH59PTgBSseugphC5e80WWdIp1iFVgguyCMdrcqeo18tbCr3fKdXKCPwzxGOwVes
D59N3wNAF3eT4HKki6yfzdhA5QvlvAGIyvi28eNUMaCu7pBk2MFxZ80fhTv5tvfm
XUeZAfI843Q2N1x0UHv9y2z4izrs88kqE3KM3xr++Q+kXPD/UusRrm3kF0O9R+8k
2J51ns1vCv3kAWjVxW+yprNgvhL1AqYSigOpOVHPVvkynlJNP1keA4nqpwF2O0jg
JvVC0FkPl0tWQSdSpwu9Eb35Cp85Q0c=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:13 2023 by rpki-client on console-ams.rpki-client.org