Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5916C01E13D211EDAF809DA8F1222468.roa
File:                     5916C01E13D211EDAF809DA8F1222468.roa (raw, json)
Hash identifier:          W3IlEZb53nSfN54+Zpmjod4dMr6Oz0Cql4HzkRroFjo=
Subject key identifier:   A9:DA:C1:C5:9C:FD:38:55:E8:D7:DF:B8:0E:48:64:59:00:20:29:2E
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       1638
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5916C01E13D211EDAF809DA8F1222468.roa
Signing time:             Thu 04 Aug 2022 08:49:28 +0000
ROA not before:           Thu 04 Aug 2022 08:49:24 +0000
ROA not after:            Wed 26 Oct 2022 08:49:24 +0000
asID:                     133861
IP address blocks:        156.247.15.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5688 (0x1638)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug  4 08:49:24 2022 GMT
            Not After : Oct 26 08:49:24 2022 GMT
        Subject: CN=62eb8818-802a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:bb:29:fd:bd:17:6a:60:07:b4:9d:fc:e2:c8:
                    75:32:d2:3d:fb:fd:ab:e8:05:f4:16:04:a6:79:04:
                    dd:94:17:40:24:a2:32:12:a9:33:a1:41:b0:11:0d:
                    7c:23:f7:97:7c:97:e0:9c:b2:a0:bb:23:d9:e5:a8:
                    3c:22:81:75:4f:01:ac:33:ac:53:56:cb:29:09:71:
                    5a:79:00:88:ac:07:09:5c:d3:0f:ee:bd:bc:a0:f2:
                    44:27:88:98:2a:f4:b6:4c:e9:ec:47:e4:16:04:45:
                    db:48:0e:98:d5:63:49:90:76:25:bd:33:90:db:5a:
                    65:0d:f1:1a:94:22:fd:de:c6:23:54:6e:49:ef:d4:
                    8b:72:c2:6a:30:3c:46:5a:f4:54:6c:a4:37:d2:ce:
                    c8:d9:94:62:3b:1a:14:1b:ee:27:02:bc:e1:a7:12:
                    bf:ce:4d:62:54:fb:79:69:e9:32:43:2c:2e:a7:6f:
                    96:2e:7b:83:79:dc:28:25:43:9b:39:48:82:e0:48:
                    f5:5f:49:31:f3:d2:2f:13:76:f7:5f:3f:ca:d7:e7:
                    6b:22:c6:e0:dc:b4:57:35:a3:da:60:fa:11:6e:15:
                    4f:22:b9:9f:b8:06:c5:e8:69:2d:58:a8:8d:dc:71:
                    4f:29:d2:45:dc:84:d4:d2:bf:9e:82:54:a3:5a:78:
                    5f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:DA:C1:C5:9C:FD:38:55:E8:D7:DF:B8:0E:48:64:59:00:20:29:2E
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5916C01E13D211EDAF809DA8F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.247.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:4c:be:a0:11:38:64:cf:91:8e:ca:cd:08:a8:11:89:12:2b:
         b9:05:77:76:c8:95:82:e8:a8:24:df:72:23:7e:de:c2:80:e8:
         a8:1f:4f:c9:2f:a0:ef:98:99:15:7b:4d:fa:65:31:93:ab:0d:
         18:f5:75:fd:02:47:90:6b:a7:4b:71:2b:fd:56:cb:a7:81:90:
         6d:b5:77:94:f8:0e:54:d7:26:03:f3:e0:3a:d4:1e:7d:e8:34:
         90:4c:3e:c0:20:98:40:a4:0c:ac:e5:4f:8e:f0:77:3c:39:0d:
         75:2f:cc:56:c2:3c:28:e6:14:6a:c0:47:a0:1a:7b:e1:c1:e0:
         9f:74:68:17:fe:7a:e0:63:ac:48:ec:95:a3:2d:4f:5c:e9:09:
         d6:cb:cd:2a:5f:f3:e8:15:dc:4d:4d:48:7c:a4:e5:d3:81:f0:
         a1:2d:48:86:89:03:c3:fc:1d:9a:bf:c0:f2:15:2d:7a:f6:69:
         a6:37:d3:92:05:8e:14:42:36:af:8a:0f:0a:ea:b4:5d:b2:59:
         6d:ea:c2:50:7c:c5:27:6f:aa:30:23:04:7b:b5:1e:a7:a6:db:
         00:5a:c9:8c:c9:04:07:21:3e:e3:37:21:8d:80:3a:fe:60:ef:
         7d:a8:25:2f:53:1f:ad:4f:4d:59:f0:52:bf:20:93:9e:8d:ae:
         17:cf:1b:74
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICFjgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMjA4MDQwODQ5MjRaFw0yMjEwMjYwODQ5MjRaMBgxFjAU
BgNVBAMMDTYyZWI4ODE4LTgwMmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCluyn9vRdqYAe0nfziyHUy0j37/avoBfQWBKZ5BN2UF0AkojISqTOhQbAR
DXwj95d8l+CcsqC7I9nlqDwigXVPAawzrFNWyykJcVp5AIisBwlc0w/uvbyg8kQn
iJgq9LZM6exH5BYERdtIDpjVY0mQdiW9M5DbWmUN8RqUIv3exiNUbknv1Itywmow
PEZa9FRspDfSzsjZlGI7GhQb7icCvOGnEr/OTWJU+3lp6TJDLC6nb5Yue4N53Cgl
Q5s5SILgSPVfSTHz0i8TdvdfP8rX52sixuDctFc1o9pg+hFuFU8iuZ+4BsXoaS1Y
qI3ccU8p0kXchNTSv56CVKNaeF+ZAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUqdrB
xZz9OFXo19+4DkhkWQAgKS4wHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzU5MTZDMDFFMTNEMjExRURBRjgwOURBOEYxMjIyNDY4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACc9w8wDQYJKoZIhvcNAQELBQAD
ggEBAJFMvqAROGTPkY7KzQioEYkSK7kFd3bIlYLoqCTfciN+3sKA6KgfT8kvoO+Y
mRV7TfplMZOrDRj1df0CR5Brp0txK/1Wy6eBkG21d5T4DlTXJgPz4DrUHn3oNJBM
PsAgmECkDKzlT47wdzw5DXUvzFbCPCjmFGrAR6Aae+HB4J90aBf+euBjrEjslaMt
T1zpCdbLzSpf8+gV3E1NSHyk5dOB8KEtSIaJA8P8HZq/wPIVLXr2aaY305IFjhRC
Nq+KDwrqtF2yWW3qwlB8xSdvqjAjBHu1Hqem2wBayYzJBAchPuM3IY2AOv5g732o
JS9TH61PTVnwUr8gk56NrhfPG3Q=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:20 2023 by rpki-client on console-fra.rpki-client.org