Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1D1F1E1436E011EC9539786CD8A014CE.roa
File:                     1D1F1E1436E011EC9539786CD8A014CE.roa (raw, json)
Hash identifier:          y5vPGJ1sKy/kw5b5DbFpQKf7tTlPLoL0VH0xH0c+J4Y=
Subject key identifier:   85:97:A1:EF:76:E8:CE:9F:AB:64:74:DE:56:10:48:13:01:1A:CE:32
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0B8D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1D1F1E1436E011EC9539786CD8A014CE.roa
Signing time:             Wed 27 Oct 2021 04:41:13 +0000
ROA not before:           Wed 27 Oct 2021 04:41:10 +0000
ROA not after:            Thu 27 Oct 2022 04:41:10 +0000
asID:                     58895
IP address blocks:        45.206.115.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2957 (0xb8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 27 04:41:10 2021 GMT
            Not After : Oct 27 04:41:10 2022 GMT
        Subject: CN=6178d869-3de2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:bd:17:3e:c7:48:7f:4f:27:5b:99:6f:a1:be:
                    b1:ef:a9:ab:0a:03:9d:41:ad:20:1b:21:71:1c:d4:
                    ac:73:96:31:7f:63:e2:c7:e9:db:e4:11:73:bd:be:
                    d2:f0:71:be:1a:24:61:59:64:18:23:93:0e:ea:12:
                    eb:2b:41:86:7f:e3:e7:cd:93:be:34:fe:b1:fa:b4:
                    e9:22:88:ac:c8:be:1e:0c:c0:ed:9a:88:e5:79:17:
                    bb:81:c5:c1:bb:39:d1:c4:ce:6f:28:b2:c8:74:1c:
                    72:d6:be:4c:f6:64:16:93:07:fc:93:91:c1:cd:8a:
                    27:77:ce:da:de:b0:67:dd:2e:64:d6:a1:82:c0:0e:
                    da:f8:9e:86:71:ba:97:d5:e2:b1:50:d5:0a:fe:6b:
                    f6:e4:76:42:7b:00:2a:88:b7:67:54:a4:a6:10:f6:
                    0c:ea:a9:d6:ba:6e:9a:94:85:f5:88:04:49:70:cd:
                    69:ae:cd:84:3c:66:fb:a5:69:9f:e2:f2:7e:32:47:
                    ab:dc:11:17:e5:7e:b7:c9:1f:b8:1b:ee:c5:77:80:
                    72:36:4d:3d:84:68:19:23:b0:b8:c0:b3:9b:52:a8:
                    9e:b9:a4:bf:1d:42:77:a7:da:b9:bd:42:b5:63:e9:
                    ce:be:aa:5d:6d:c5:b6:eb:d1:6a:a7:ff:ee:57:b7:
                    fb:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:97:A1:EF:76:E8:CE:9F:AB:64:74:DE:56:10:48:13:01:1A:CE:32
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1D1F1E1436E011EC9539786CD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.206.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:92:31:d1:43:ff:21:ae:01:db:25:f5:b6:d2:ee:f3:8d:39:
         ac:34:25:87:ee:ac:3e:4e:94:e2:d7:8c:49:97:d1:65:84:be:
         2d:70:6d:28:da:2a:ae:a5:4b:0f:35:27:6b:4e:50:61:f2:7d:
         a2:2c:08:4a:55:9d:9c:86:dd:e6:e1:44:64:a8:dd:50:c9:86:
         ae:26:a2:e5:08:53:29:cf:78:a2:ea:9e:3a:12:e7:26:b1:c6:
         5e:03:c6:21:f5:19:52:ca:14:c4:ff:9d:3d:c5:47:80:4b:23:
         2b:17:c3:80:96:75:61:e0:40:c3:34:dc:1b:f8:dd:76:08:c4:
         ff:fb:79:d2:ac:07:23:0f:f7:03:9c:bf:9b:70:ae:17:4a:2d:
         e3:7e:9c:a8:fa:ca:1b:c7:2b:7b:f1:4d:2b:ff:c1:e1:72:68:
         11:61:a3:3e:8f:f9:5a:0d:fc:15:c0:33:18:1f:ef:fa:99:c4:
         ed:35:76:80:6c:30:9f:de:ba:fe:e5:55:08:b8:b1:42:c4:67:
         51:c8:83:02:29:af:10:03:db:f4:38:37:01:3a:47:18:07:34:
         f9:f8:dd:4f:2a:f6:60:37:7a:23:f4:93:d8:8f:6d:f0:f3:d8:
         58:93:38:43:7c:48:32:63:62:50:46:a0:27:e5:33:47:16:ef:
         f6:c7:fb:43
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICC40wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMTEwMjcwNDQxMTBaFw0yMjEwMjcwNDQxMTBaMBgxFjAU
BgNVBAMMDTYxNzhkODY5LTNkZTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDcvRc+x0h/TydbmW+hvrHvqasKA51BrSAbIXEc1KxzljF/Y+LH6dvkEXO9
vtLwcb4aJGFZZBgjkw7qEusrQYZ/4+fNk740/rH6tOkiiKzIvh4MwO2aiOV5F7uB
xcG7OdHEzm8ossh0HHLWvkz2ZBaTB/yTkcHNiid3ztresGfdLmTWoYLADtr4noZx
upfV4rFQ1Qr+a/bkdkJ7ACqIt2dUpKYQ9gzqqda6bpqUhfWIBElwzWmuzYQ8Zvul
aZ/i8n4yR6vcERflfrfJH7gb7sV3gHI2TT2EaBkjsLjAs5tSqJ65pL8dQnen2rm9
QrVj6c6+ql1txbbr0Wqn/+5Xt/v7AgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUhZeh
73bozp+rZHTeVhBIEwEazjIwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzFEMUYxRTE0MzZFMDExRUM5NTM5Nzg2Q0Q4QTAxNENFLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtznMwDQYJKoZIhvcNAQELBQAD
ggEBAAuSMdFD/yGuAdsl9bbS7vONOaw0JYfurD5OlOLXjEmX0WWEvi1wbSjaKq6l
Sw81J2tOUGHyfaIsCEpVnZyG3ebhRGSo3VDJhq4mouUIUynPeKLqnjoS5yaxxl4D
xiH1GVLKFMT/nT3FR4BLIysXw4CWdWHgQMM03Bv43XYIxP/7edKsByMP9wOcv5tw
rhdKLeN+nKj6yhvHK3vxTSv/weFyaBFhoz6P+VoN/BXAMxgf7/qZxO01doBsMJ/e
uv7lVQi4sULEZ1HIgwIprxAD2/Q4NwE6RxgHNPn43U8q9mA3eiP0k9iPbfDz2FiT
OEN8SDJjYlBGoCflM0cW7/bH+0M=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:17 2023 by rpki-client on console-fra.rpki-client.org