Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0462FD9817B111ED873EEFF5F1222468.roa
File:                     0462FD9817B111ED873EEFF5F1222468.roa (raw, json)
Hash identifier:          Xyts44pHNPAd6RQitrweZr5TaYZfwOn1YvK3ZPyUK6s=
Subject key identifier:   99:6A:44:73:8B:71:0B:77:52:E8:33:23:BD:B2:F2:64:ED:76:FD:3B
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       16A7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0462FD9817B111ED873EEFF5F1222468.roa
Signing time:             Tue 09 Aug 2022 07:00:57 +0000
ROA not before:           Tue 09 Aug 2022 07:00:53 +0000
ROA not after:            Sun 11 Jun 2023 07:00:53 +0000
asID:                     201411
IP address blocks:        45.195.227.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5799 (0x16a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug  9 07:00:53 2022 GMT
            Not After : Jun 11 07:00:53 2023 GMT
        Subject: CN=62f20629-95c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:83:04:8f:bd:2d:b3:b8:18:89:57:a3:e8:c8:
                    d5:9f:49:2e:eb:6a:62:82:69:46:82:51:7a:81:e2:
                    1f:6c:74:01:47:5a:3a:e7:fc:56:b3:c6:bc:34:1e:
                    92:44:98:bd:39:3d:ab:9d:77:23:ff:1f:10:ca:6f:
                    08:08:ab:15:40:be:1a:03:0f:82:77:de:34:42:0d:
                    22:d8:51:75:ff:ad:3f:a5:0c:73:4b:ce:cc:4d:47:
                    1e:02:90:54:c0:62:02:7e:20:c2:38:39:30:78:4e:
                    2b:7b:9b:3b:55:80:b2:bb:0e:6b:3c:f1:c5:74:fc:
                    d6:78:5f:45:22:a3:44:f1:28:01:83:55:7e:2e:74:
                    0a:c8:d5:2c:7b:37:46:e8:4c:e3:98:a0:d9:cb:f7:
                    30:b3:50:8f:61:eb:d9:80:cd:54:7f:2c:4f:39:11:
                    a4:5f:be:5c:76:29:0d:88:21:a4:98:6b:8c:6a:d9:
                    c5:74:da:f9:34:b4:db:f4:19:26:fa:d7:ea:6b:2c:
                    0f:37:10:d5:b8:4a:00:2c:0f:66:e3:65:bf:43:54:
                    c8:4d:b7:a2:9c:2d:76:11:0b:2f:43:ec:ab:b7:b7:
                    c1:75:13:c7:b9:5e:de:7d:25:4a:e6:e9:f1:4e:e0:
                    bd:7b:a5:b9:2e:dc:bb:9d:ea:b5:84:25:46:8a:34:
                    38:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:6A:44:73:8B:71:0B:77:52:E8:33:23:BD:B2:F2:64:ED:76:FD:3B
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0462FD9817B111ED873EEFF5F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:5b:f4:2d:7f:db:bf:cc:c8:87:53:f0:42:fe:36:6c:78:d4:
         78:d3:ba:c2:c2:97:f5:47:74:25:cd:5a:00:e0:13:84:2d:d1:
         f1:0c:d2:1b:a7:d6:99:27:1f:ee:0f:6c:87:83:e8:d9:86:5a:
         e7:4e:b4:ae:04:40:08:e0:48:18:19:9e:bc:fa:d6:c1:60:e1:
         9c:91:0f:9e:01:d2:84:4f:15:0a:8b:48:75:d6:6a:42:36:e1:
         7f:1e:4b:83:8a:f6:b9:60:56:68:b6:52:67:a9:2f:45:09:0a:
         6e:4e:f8:5d:14:51:a8:14:f9:23:1d:a5:d2:44:b1:64:b0:15:
         b6:e0:e3:39:9c:8a:20:67:25:d9:46:df:9c:00:48:56:0a:95:
         f1:db:a2:6b:0f:66:95:e2:8a:ef:c4:10:43:4d:16:c0:c6:d3:
         df:1a:0c:fd:ad:0b:00:02:01:13:c7:19:4a:18:f0:50:88:d8:
         76:77:fb:6c:8a:d4:4f:73:bf:0d:f0:81:d7:20:e5:df:ba:82:
         50:6b:50:00:4e:8c:d2:e3:61:b9:2b:a4:4f:16:b0:a0:6d:3c:
         33:ab:7b:80:03:eb:e7:8b:bd:36:96:98:37:ff:02:02:7a:36:
         14:25:ab:ac:b8:26:01:7b:47:31:0b:56:54:95:b2:26:f8:32:
         2d:e6:a4:0e
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICFqcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMjA4MDkwNzAwNTNaFw0yMzA2MTEwNzAwNTNaMBgxFjAU
BgNVBAMMDTYyZjIwNjI5LTk1YzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDngwSPvS2zuBiJV6PoyNWfSS7ramKCaUaCUXqB4h9sdAFHWjrn/Fazxrw0
HpJEmL05PauddyP/HxDKbwgIqxVAvhoDD4J33jRCDSLYUXX/rT+lDHNLzsxNRx4C
kFTAYgJ+IMI4OTB4Tit7mztVgLK7Dms88cV0/NZ4X0Uio0TxKAGDVX4udArI1Sx7
N0boTOOYoNnL9zCzUI9h69mAzVR/LE85EaRfvlx2KQ2IIaSYa4xq2cV02vk0tNv0
GSb61+prLA83ENW4SgAsD2bjZb9DVMhNt6KcLXYRCy9D7Ku3t8F1E8e5Xt59JUrm
6fFO4L17pbku3Lud6rWEJUaKNDjVAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUmWpE
c4txC3dS6DMjvbLyZO12/TswHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzA0NjJGRDk4MTdCMTExRUQ4NzNFRUZGNUYxMjIyNDY4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtw+MwDQYJKoZIhvcNAQELBQAD
ggEBAHpb9C1/27/MyIdT8EL+Nmx41HjTusLCl/VHdCXNWgDgE4Qt0fEM0hun1pkn
H+4PbIeD6NmGWudOtK4EQAjgSBgZnrz61sFg4ZyRD54B0oRPFQqLSHXWakI24X8e
S4OK9rlgVmi2UmepL0UJCm5O+F0UUagU+SMdpdJEsWSwFbbg4zmciiBnJdlG35wA
SFYKlfHbomsPZpXiiu/EEENNFsDG098aDP2tCwACARPHGUoY8FCI2HZ3+2yK1E9z
vw3wgdcg5d+6glBrUABOjNLjYbkrpE8WsKBtPDOre4AD6+eLvTaWmDf/AgJ6NhQl
q6y4JgF7RzELVlSVsib4Mi3mpA4=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:14 2023 by rpki-client on console-ams.rpki-client.org