Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2A3934CE13D311ED937A42ABF1222468.roa
File:                     2A3934CE13D311ED937A42ABF1222468.roa (raw, json)
Hash identifier:          sVZGgNP/+bUtvEbWfQQdIAxUAwz8G7cqhz/2K1F69JE=
Subject key identifier:   24:99:DE:4D:0C:CE:B8:56:2F:EE:13:41:7B:13:E1:31:C0:4B:A8:3B
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       164E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2A3934CE13D311ED937A42ABF1222468.roa
Signing time:             Thu 04 Aug 2022 08:55:19 +0000
ROA not before:           Thu 04 Aug 2022 08:55:15 +0000
ROA not after:            Fri 10 Feb 2023 08:55:15 +0000
asID:                     133861
IP address blocks:        45.207.42.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5710 (0x164e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug  4 08:55:15 2022 GMT
            Not After : Feb 10 08:55:15 2023 GMT
        Subject: CN=62eb8976-7672
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:91:bf:fe:5b:83:7e:08:f5:40:12:18:0f:61:
                    05:e7:81:d7:72:bf:eb:7d:d3:7c:99:a2:44:9f:f7:
                    9a:71:ba:cf:51:8e:d4:f2:4a:d9:87:42:c9:45:ef:
                    16:27:1c:0c:01:f8:88:3e:5e:65:93:cc:b2:d4:67:
                    21:79:37:79:7e:04:3b:ef:72:89:f4:52:af:e2:7f:
                    27:75:7c:fd:cf:38:94:87:e5:00:43:71:4d:32:35:
                    47:5c:01:30:6d:dc:c3:5f:33:78:9f:75:27:35:b1:
                    d0:5a:34:99:91:fc:50:c0:0e:df:96:1a:c7:52:78:
                    59:41:ce:a0:ce:1d:03:74:2a:b5:09:6d:bd:0c:82:
                    30:17:e1:14:a1:25:81:9b:69:bb:5d:bc:8a:6a:79:
                    7d:71:b9:de:5f:27:81:21:cf:02:d9:e1:61:0f:00:
                    9a:eb:e1:bc:3b:b2:9e:bc:9a:f4:0f:39:50:cb:29:
                    8f:f4:84:8f:5c:d7:cb:69:57:62:4e:98:36:ec:7c:
                    36:a4:aa:2b:e6:8b:07:e7:8c:93:eb:51:d2:80:7b:
                    a1:e5:6b:3c:7f:8f:96:4f:5a:d7:be:0f:e9:f2:27:
                    97:cc:f3:19:a7:3c:e0:37:00:0a:f4:7d:0e:c9:49:
                    f9:d1:db:2d:7b:04:34:5e:9d:2f:18:c3:4e:75:ce:
                    2d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:99:DE:4D:0C:CE:B8:56:2F:EE:13:41:7B:13:E1:31:C0:4B:A8:3B
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2A3934CE13D311ED937A42ABF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.207.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:73:72:bd:0d:60:ea:a6:7a:a4:45:13:75:98:28:65:ea:de:
         25:c9:59:e8:52:08:16:a5:08:b3:d8:99:eb:47:b6:e9:fe:1a:
         13:e9:ec:32:ee:f6:5a:d6:9b:f1:c9:81:5f:28:f1:0a:8a:46:
         df:9f:ee:5d:19:f0:1f:b8:c2:f2:70:8c:3f:ce:fd:f2:70:1f:
         54:30:c0:99:b0:60:21:a3:84:62:8c:58:7f:13:46:10:3a:66:
         8f:c5:d2:d3:aa:84:8e:16:2f:d0:c1:c6:8d:20:32:2a:8f:73:
         6f:f6:6b:38:25:d1:9a:57:1a:f6:fd:98:ca:c5:f7:7d:81:8b:
         5a:2c:a8:dd:c5:f4:8d:a5:df:01:0b:2c:01:8c:b3:1a:dc:cf:
         9d:72:e8:a5:62:22:9a:27:46:02:3e:50:d2:0c:f3:ef:e1:d7:
         aa:1f:37:e8:fc:2e:c0:b2:0a:6d:f4:ff:81:cb:37:d1:e0:5d:
         f4:4d:e0:7f:31:5e:ef:b4:d2:ac:5d:89:18:45:87:a6:e8:c9:
         96:40:3e:c9:14:a2:6a:4e:ec:53:75:1a:4a:51:5b:aa:99:4f:
         76:2a:45:81:af:49:cf:24:a0:7a:a9:e1:2e:95:b0:93:9e:df:
         a2:e9:98:54:fc:a6:47:3f:53:84:f1:a1:04:c1:a4:0f:e1:72:
         00:8b:e0:4c
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICFk4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMjA4MDQwODU1MTVaFw0yMzAyMTAwODU1MTVaMBgxFjAU
BgNVBAMMDTYyZWI4OTc2LTc2NzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDWkb/+W4N+CPVAEhgPYQXngddyv+t903yZokSf95pxus9RjtTyStmHQslF
7xYnHAwB+Ig+XmWTzLLUZyF5N3l+BDvvcon0Uq/ifyd1fP3POJSH5QBDcU0yNUdc
ATBt3MNfM3ifdSc1sdBaNJmR/FDADt+WGsdSeFlBzqDOHQN0KrUJbb0MgjAX4RSh
JYGbabtdvIpqeX1xud5fJ4EhzwLZ4WEPAJrr4bw7sp68mvQPOVDLKY/0hI9c18tp
V2JOmDbsfDakqivmiwfnjJPrUdKAe6Hlazx/j5ZPWte+D+nyJ5fM8xmnPOA3AAr0
fQ7JSfnR2y17BDRenS8Yw051zi39AgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUJJne
TQzOuFYv7hNBexPhMcBLqDswHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzJBMzkzNENFMTNEMzExRUQ5MzdBNDJBQkYxMjIyNDY4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtzyowDQYJKoZIhvcNAQELBQAD
ggEBAAtzcr0NYOqmeqRFE3WYKGXq3iXJWehSCBalCLPYmetHtun+GhPp7DLu9lrW
m/HJgV8o8QqKRt+f7l0Z8B+4wvJwjD/O/fJwH1QwwJmwYCGjhGKMWH8TRhA6Zo/F
0tOqhI4WL9DBxo0gMiqPc2/2azgl0ZpXGvb9mMrF932Bi1osqN3F9I2l3wELLAGM
sxrcz51y6KViIponRgI+UNIM8+/h16ofN+j8LsCyCm30/4HLN9HgXfRN4H8xXu+0
0qxdiRhFh6boyZZAPskUompO7FN1GkpRW6qZT3YqRYGvSc8koHqp4S6VsJOe36Lp
mFT8pkc/U4TxoQTBpA/hcgCL4Ew=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:18 2023 by rpki-client on console-fra.rpki-client.org