Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/270A0B7636EC11ECAE0BA601D8A014CE.roa
File:                     270A0B7636EC11ECAE0BA601D8A014CE.roa (raw, json)
Hash identifier:          M/PAf6356AqfWe1Hl5XpDDkXmUhwCC7euO3LRp1dIB4=
Subject key identifier:   F1:EB:13:22:DE:C0:11:2D:A3:12:9D:8E:46:29:BC:31:DB:47:69:A5
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0C3B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/270A0B7636EC11ECAE0BA601D8A014CE.roa
Signing time:             Wed 27 Oct 2021 06:07:24 +0000
ROA not before:           Wed 27 Oct 2021 06:07:20 +0000
ROA not after:            Thu 27 Oct 2022 06:07:20 +0000
asID:                     58895
IP address blocks:        45.206.250.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3131 (0xc3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 27 06:07:20 2021 GMT
            Not After : Oct 27 06:07:20 2022 GMT
        Subject: CN=6178ec9c-58c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2b:91:7f:58:dd:f7:fa:0a:26:1e:6e:b1:88:
                    79:e5:36:f8:90:35:72:8e:25:b5:b1:6f:86:d5:94:
                    92:c9:f4:6e:92:d7:f3:8b:3d:5d:ff:1a:62:d7:cd:
                    37:b5:42:01:3a:46:79:a1:21:b0:e6:db:4c:4a:19:
                    fe:e5:ba:eb:83:dc:82:e7:b3:42:5b:2c:40:b4:59:
                    5d:74:e1:22:ca:ed:b3:ec:a8:b2:18:60:b1:d5:5e:
                    0d:d3:97:2f:ac:b0:53:19:2c:77:a6:fc:a8:0e:b6:
                    cb:80:f6:cb:e2:17:f7:fc:2b:e1:a2:6e:7d:5f:b9:
                    1a:eb:0a:c5:fa:45:2a:b1:99:20:37:0b:a4:79:65:
                    b5:f6:a3:f4:6d:f1:16:3f:d0:bc:28:1d:dd:f3:64:
                    4d:5e:a2:fb:4b:46:50:75:81:9c:67:74:2c:17:a0:
                    5b:37:15:35:48:d4:40:4e:11:06:e8:20:97:2d:01:
                    b0:24:b3:b5:bf:6a:d0:59:ab:3a:fd:80:49:d3:df:
                    cb:87:94:30:98:02:31:a0:75:33:07:4a:03:74:ea:
                    ae:97:72:4e:39:98:42:66:41:f6:e0:20:49:7f:a2:
                    94:36:d0:46:75:5a:dc:af:b7:d0:b0:1c:6c:30:5e:
                    c9:2c:28:65:25:32:b7:63:97:ab:83:e0:5e:8f:43:
                    79:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:EB:13:22:DE:C0:11:2D:A3:12:9D:8E:46:29:BC:31:DB:47:69:A5
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/270A0B7636EC11ECAE0BA601D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.206.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:3e:11:17:0c:d5:cf:9a:5a:d9:b7:e5:c8:71:93:42:8c:8e:
         b2:6b:03:b7:5e:09:e4:06:04:a2:b2:f7:6c:f4:71:4c:96:38:
         b3:bd:9e:69:3f:94:5a:69:19:ef:2e:f9:e9:28:8a:c7:96:1a:
         fb:6a:f9:80:7d:f3:aa:69:80:ce:77:c2:2d:7e:0d:df:b7:e4:
         3d:0b:b9:03:6b:67:88:c8:1e:4b:ac:6c:64:fc:4d:e5:4d:27:
         00:5d:ee:72:b8:12:95:6a:1b:d2:74:80:8a:cf:1b:da:42:77:
         1e:ee:1f:fc:b7:bb:65:c8:6f:8b:dd:66:86:25:d9:01:fb:4f:
         3c:30:85:91:a2:f4:b1:bc:e4:da:93:80:bf:73:66:2c:19:83:
         65:cd:31:48:54:15:e1:eb:ad:5c:2e:cf:b6:0d:9d:d5:7f:ff:
         df:74:7e:2a:4a:01:73:f0:ad:33:b5:61:70:c9:ae:71:f8:b3:
         08:67:41:b5:b6:cf:5a:d8:d8:82:71:71:bd:35:6d:49:0a:00:
         52:33:06:a3:e0:cd:01:b5:77:91:e4:11:dd:93:66:e0:6a:28:
         e7:be:28:9c:7b:ca:a9:7e:6c:de:b4:5e:df:94:77:81:7f:ca:
         5f:3c:2c:b9:12:5f:b9:66:c7:16:6d:4b:09:ff:d9:e1:17:4d:
         00:57:d0:af
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICDDswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMTEwMjcwNjA3MjBaFw0yMjEwMjcwNjA3MjBaMBgxFjAU
BgNVBAMMDTYxNzhlYzljLTU4YzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC8K5F/WN33+gomHm6xiHnlNviQNXKOJbWxb4bVlJLJ9G6S1/OLPV3/GmLX
zTe1QgE6RnmhIbDm20xKGf7luuuD3ILns0JbLEC0WV104SLK7bPsqLIYYLHVXg3T
ly+ssFMZLHem/KgOtsuA9sviF/f8K+Gibn1fuRrrCsX6RSqxmSA3C6R5ZbX2o/Rt
8RY/0LwoHd3zZE1eovtLRlB1gZxndCwXoFs3FTVI1EBOEQboIJctAbAks7W/atBZ
qzr9gEnT38uHlDCYAjGgdTMHSgN06q6Xck45mEJmQfbgIEl/opQ20EZ1Wtyvt9Cw
HGwwXsksKGUlMrdjl6uD4F6PQ3m5AgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU8esT
It7AES2jEp2ORim8MdtHaaUwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzI3MEEwQjc2MzZFQzExRUNBRTBCQTYwMUQ4QTAxNENFLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtzvowDQYJKoZIhvcNAQELBQAD
ggEBAG8+ERcM1c+aWtm35chxk0KMjrJrA7deCeQGBKKy92z0cUyWOLO9nmk/lFpp
Ge8u+ekoiseWGvtq+YB986ppgM53wi1+Dd+35D0LuQNrZ4jIHkusbGT8TeVNJwBd
7nK4EpVqG9J0gIrPG9pCdx7uH/y3u2XIb4vdZoYl2QH7TzwwhZGi9LG85NqTgL9z
ZiwZg2XNMUhUFeHrrVwuz7YNndV//990fipKAXPwrTO1YXDJrnH4swhnQbW2z1rY
2IJxcb01bUkKAFIzBqPgzQG1d5HkEd2TZuBqKOe+KJx7yql+bN60Xt+Ud4F/yl88
LLkSX7lmxxZtSwn/2eEXTQBX0K8=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:16 2023 by rpki-client on console-ams.rpki-client.org