Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/284447E6396011ED8DA104AFF1222468.roa
File:                     284447E6396011ED8DA104AFF1222468.roa (raw, json)
Hash identifier:          Bvs2yyydKVvpQn1A0FYfCYmpqX6JK/FUs1W9LzKSYoE=
Subject key identifier:   EC:84:88:C6:9E:EF:D7:38:F3:93:6D:F3:54:1D:F4:11:9A:CD:FC:CF
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       1838
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/284447E6396011ED8DA104AFF1222468.roa
Signing time:             Wed 21 Sep 2022 03:47:48 +0000
ROA not before:           Wed 21 Sep 2022 03:47:44 +0000
ROA not after:            Fri 30 Dec 2022 03:47:44 +0000
asID:                     35916
IP address blocks:        156.251.112.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6200 (0x1838)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 21 03:47:44 2022 GMT
            Not After : Dec 30 03:47:44 2022 GMT
        Subject: CN=632a8963-dea9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c4:6f:2d:00:72:27:de:52:33:cb:36:d7:10:
                    22:6a:b5:ef:86:9d:23:d2:f0:98:a8:d5:6d:1a:85:
                    37:1d:bc:99:ba:de:cc:83:ea:da:f5:a2:05:e8:0a:
                    db:64:be:32:b9:80:63:ed:54:79:b7:1c:ee:ad:52:
                    95:c9:7d:92:ec:7f:cb:87:41:8b:a0:be:ba:9f:e6:
                    08:72:64:4e:8d:3b:18:6e:f3:3c:d2:7a:22:07:23:
                    d3:52:79:9c:a3:e7:b4:00:9d:7a:b6:84:15:69:3f:
                    c3:6f:d2:f1:6a:45:1c:4c:18:59:86:21:7c:63:01:
                    f2:eb:50:3f:4a:d5:99:2d:1f:8a:b3:51:c6:0b:56:
                    3c:3d:9a:50:ff:4d:0a:41:f0:96:bc:9a:af:64:38:
                    e5:e4:77:97:a7:1d:80:7c:9f:4e:da:e4:40:e7:4f:
                    68:2c:d5:73:2e:c7:a3:0b:38:e3:c2:f3:ad:ae:56:
                    7e:5a:d7:5b:16:2a:e0:7a:c7:c1:e6:3f:d7:18:0f:
                    21:30:4f:e7:b6:91:b0:3d:fa:00:2a:52:32:ec:80:
                    40:58:04:ca:78:6d:a3:84:5e:d3:ac:54:61:73:3b:
                    9c:47:e8:3a:5a:e9:de:ea:d0:4f:80:4a:f4:ca:06:
                    02:7e:06:e1:b2:26:5e:34:d6:76:aa:af:2c:8a:9e:
                    99:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:84:88:C6:9E:EF:D7:38:F3:93:6D:F3:54:1D:F4:11:9A:CD:FC:CF
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/284447E6396011ED8DA104AFF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.251.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:f4:57:db:5e:29:8b:32:18:a0:4c:9c:24:74:1e:a2:44:1c:
         99:fb:ba:85:11:7b:8d:4a:9b:d1:1d:19:b5:6f:a8:b1:8f:41:
         28:c0:bf:7a:c4:60:92:3f:7b:69:01:57:ed:a1:fc:84:21:ea:
         2e:dc:d0:35:53:01:0d:d3:33:f1:c8:c2:1b:a7:29:21:f2:ef:
         d1:33:19:4f:34:96:95:0e:7c:18:b5:00:2a:14:c3:82:ab:d8:
         f5:94:c1:ad:53:91:e0:b7:3b:08:38:9a:e8:6f:07:a5:83:4d:
         b9:e5:e5:7c:86:42:e1:d5:2f:ca:02:ed:bf:58:2a:7c:30:d9:
         0b:cc:65:85:f2:b6:81:07:60:e7:25:63:f8:5c:0d:72:b1:1b:
         a8:a4:60:18:9a:dd:61:27:9d:4f:7c:e8:81:17:3c:6e:5c:9b:
         57:92:77:69:d3:0d:68:a5:36:74:0c:50:48:8b:ec:46:7d:de:
         7f:61:dd:8a:61:00:02:68:ec:e5:62:05:fd:66:c1:9b:d0:46:
         54:ef:5b:0b:73:fe:64:fd:00:e8:73:fc:b8:2c:40:c3:ef:0f:
         37:8e:79:5e:a4:78:a1:e8:82:c5:c7:e1:a3:51:bc:6a:cb:06:
         19:d4:7c:ca:91:4b:28:9f:60:9e:be:fa:38:31:72:a2:94:fc:
         47:16:73:51
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICGDgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMjA5MjEwMzQ3NDRaFw0yMjEyMzAwMzQ3NDRaMBgxFjAU
BgNVBAMMDTYzMmE4OTYzLWRlYTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDPxG8tAHIn3lIzyzbXECJqte+GnSPS8Jio1W0ahTcdvJm63syD6tr1ogXo
CttkvjK5gGPtVHm3HO6tUpXJfZLsf8uHQYugvrqf5ghyZE6NOxhu8zzSeiIHI9NS
eZyj57QAnXq2hBVpP8Nv0vFqRRxMGFmGIXxjAfLrUD9K1ZktH4qzUcYLVjw9mlD/
TQpB8Ja8mq9kOOXkd5enHYB8n07a5EDnT2gs1XMux6MLOOPC862uVn5a11sWKuB6
x8HmP9cYDyEwT+e2kbA9+gAqUjLsgEBYBMp4baOEXtOsVGFzO5xH6Dpa6d7q0E+A
SvTKBgJ+BuGyJl401naqryyKnpmVAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU7ISI
xp7v1zjzk23zVB30EZrN/M8wHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzI4NDQ0N0U2Mzk2MDExRUQ4REExMDRBRkYxMjIyNDY4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKc+3AwDQYJKoZIhvcNAQELBQAD
ggEBACH0V9teKYsyGKBMnCR0HqJEHJn7uoURe41Km9EdGbVvqLGPQSjAv3rEYJI/
e2kBV+2h/IQh6i7c0DVTAQ3TM/HIwhunKSHy79EzGU80lpUOfBi1ACoUw4Kr2PWU
wa1TkeC3Owg4muhvB6WDTbnl5XyGQuHVL8oC7b9YKnww2QvMZYXytoEHYOclY/hc
DXKxG6ikYBia3WEnnU986IEXPG5cm1eSd2nTDWilNnQMUEiL7EZ93n9h3YphAAJo
7OViBf1mwZvQRlTvWwtz/mT9AOhz/LgsQMPvDzeOeV6keKHogsXH4aNRvGrLBhnU
fMqRSyifYJ6++jgxcqKU/EcWc1E=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:16 2023 by rpki-client on console-ams.rpki-client.org