Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/15A0CAB236DF11ECAA1F866AD8A014CE.roa
File:                     15A0CAB236DF11ECAA1F866AD8A014CE.roa (raw, json)
Hash identifier:          pwfPUuJHRezeI09SSuht8wkfNLGQ+pvgUxo8oPfblcM=
Subject key identifier:   FE:48:D1:0E:9A:0A:A5:A7:55:AA:37:F4:B0:81:68:DC:44:C1:DF:86
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0B67
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/15A0CAB236DF11ECAA1F866AD8A014CE.roa
Signing time:             Wed 27 Oct 2021 04:33:51 +0000
ROA not before:           Wed 27 Oct 2021 04:33:48 +0000
ROA not after:            Thu 27 Oct 2022 04:33:48 +0000
asID:                     58895
IP address blocks:        45.206.189.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2919 (0xb67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 27 04:33:48 2021 GMT
            Not After : Oct 27 04:33:48 2022 GMT
        Subject: CN=6178d6af-da06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:0a:51:53:65:90:a3:b6:9d:ec:da:6c:9c:23:
                    63:4d:67:07:65:33:74:88:8f:c8:61:86:53:cc:f5:
                    42:ca:71:35:be:54:61:26:60:8c:87:32:94:73:93:
                    ca:cd:3b:aa:b1:29:52:f5:5e:70:b8:da:b1:68:79:
                    43:d8:f7:c3:fa:db:74:65:94:d9:6b:59:cb:36:81:
                    78:d4:b3:0a:83:e5:2f:e7:ba:1e:7f:2a:a4:73:3d:
                    d4:12:a3:92:bf:8a:37:a2:99:5f:b3:2f:5b:2f:5c:
                    81:82:5a:6d:c5:09:b6:be:c0:0c:a4:a3:3f:c2:8d:
                    3a:46:92:ff:74:a7:d5:7d:04:b2:66:4a:bc:c4:e8:
                    d6:11:13:d8:d8:fc:5d:dc:01:a9:17:b9:ac:3e:28:
                    a3:44:d7:e2:ad:1e:e2:d9:53:89:99:c0:26:d0:07:
                    f9:a7:57:84:94:16:79:e5:d4:06:eb:ec:e8:91:18:
                    cc:53:c5:d9:a5:22:55:0c:d9:75:0e:7e:b6:19:99:
                    e7:9e:a3:74:cf:d3:a7:96:3b:22:11:2d:14:5c:1c:
                    52:1a:18:d6:33:11:22:e3:7b:06:34:cc:23:ea:3b:
                    cf:81:2d:78:6e:fd:09:5d:fd:b6:9c:3c:4c:9f:fd:
                    24:bc:35:5b:d2:34:c2:15:73:81:20:95:a4:df:5b:
                    f9:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:48:D1:0E:9A:0A:A5:A7:55:AA:37:F4:B0:81:68:DC:44:C1:DF:86
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/15A0CAB236DF11ECAA1F866AD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.206.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:19:50:8b:ed:63:9d:e1:b8:6d:51:73:ad:77:04:40:e1:a4:
         51:fc:55:6f:32:11:7b:0e:c0:52:70:36:01:cc:bd:f2:dd:e9:
         75:18:cf:99:e1:b3:dc:1f:a2:bf:5e:17:ae:40:d2:be:1d:0c:
         9e:59:c9:a8:b0:6a:60:f8:12:ad:3d:af:e7:bf:d0:3d:4e:94:
         9f:1a:fe:44:a7:8f:77:e3:35:12:2b:5b:2e:53:15:05:fa:b1:
         c0:3a:26:90:a7:40:4e:42:04:57:6f:38:e2:16:85:3e:80:87:
         d0:4e:0a:c8:81:8a:06:fa:67:51:83:c8:99:8e:2b:4d:6a:cb:
         c2:9a:f3:17:31:00:34:e1:c5:2c:10:4e:9c:37:53:56:9b:7a:
         ee:b7:ee:fe:dd:36:bd:11:49:bd:3b:00:84:9f:28:0f:94:d3:
         fc:21:71:23:51:b1:8d:68:bb:d0:9e:05:6d:a3:25:4d:cc:15:
         b6:65:0b:f5:41:b6:d2:14:08:2b:4c:6b:4a:73:ce:5f:ae:51:
         81:05:13:70:06:86:ed:7b:57:ec:29:74:ec:80:7c:97:0a:10:
         1e:63:7d:2e:7e:5a:dc:9a:64:40:e0:66:f5:d2:13:dc:ee:e7:
         8c:38:b2:ec:15:8a:d5:ad:31:41:3d:34:0a:48:38:ca:fc:3b:
         61:72:61:70
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICC2cwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMTEwMjcwNDMzNDhaFw0yMjEwMjcwNDMzNDhaMBgxFjAU
BgNVBAMMDTYxNzhkNmFmLWRhMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDjClFTZZCjtp3s2mycI2NNZwdlM3SIj8hhhlPM9ULKcTW+VGEmYIyHMpRz
k8rNO6qxKVL1XnC42rFoeUPY98P623RllNlrWcs2gXjUswqD5S/nuh5/KqRzPdQS
o5K/ijeimV+zL1svXIGCWm3FCba+wAykoz/CjTpGkv90p9V9BLJmSrzE6NYRE9jY
/F3cAakXuaw+KKNE1+KtHuLZU4mZwCbQB/mnV4SUFnnl1Abr7OiRGMxTxdmlIlUM
2XUOfrYZmeeeo3TP06eWOyIRLRRcHFIaGNYzESLjewY0zCPqO8+BLXhu/Qld/bac
PEyf/SS8NVvSNMIVc4EglaTfW/lNAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU/kjR
DpoKpadVqjf0sIFo3ETB34YwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzE1QTBDQUIyMzZERjExRUNBQTFGODY2QUQ4QTAxNENFLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtzr0wDQYJKoZIhvcNAQELBQAD
ggEBADYZUIvtY53huG1Rc613BEDhpFH8VW8yEXsOwFJwNgHMvfLd6XUYz5nhs9wf
or9eF65A0r4dDJ5ZyaiwamD4Eq09r+e/0D1OlJ8a/kSnj3fjNRIrWy5TFQX6scA6
JpCnQE5CBFdvOOIWhT6Ah9BOCsiBigb6Z1GDyJmOK01qy8Ka8xcxADThxSwQTpw3
U1abeu637v7dNr0RSb07AISfKA+U0/whcSNRsY1ou9CeBW2jJU3MFbZlC/VBttIU
CCtMa0pzzl+uUYEFE3AGhu17V+wpdOyAfJcKEB5jfS5+WtyaZEDgZvXSE9zu54w4
suwVitWtMUE9NApIOMr8O2FyYXA=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:17 2023 by rpki-client on console-fra.rpki-client.org