Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5ADDC528A43811EC8F92DBAC5A40D577.roa
File:                     5ADDC528A43811EC8F92DBAC5A40D577.roa (raw, json)
Hash identifier:          visuvdNz7AqyVWHLH0mMtaxHLpX6mqN0/1669E8M0BM=
Subject key identifier:   F8:AB:DA:C1:5F:C6:4F:D0:5E:63:4C:AC:54:34:8B:84:0B:19:DA:11
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       126B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5ADDC528A43811EC8F92DBAC5A40D577.roa
Signing time:             Tue 15 Mar 2022 08:17:29 +0000
ROA not before:           Tue 15 Mar 2022 08:17:25 +0000
ROA not after:            Sat 31 Dec 2022 08:17:25 +0000
asID:                     135097
IP address blocks:        156.255.10.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4715 (0x126b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Mar 15 08:17:25 2022 GMT
            Not After : Dec 31 08:17:25 2022 GMT
        Subject: CN=62304b99-7b96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:82:2f:0b:ec:c5:75:45:6e:2e:77:e9:c7:ed:
                    e1:0a:57:c0:95:5f:43:90:74:b2:5b:d7:89:9b:62:
                    6b:04:20:41:84:9d:e3:4c:7c:26:e0:41:28:e2:b1:
                    ed:d4:d9:9c:d0:4b:7f:f9:2a:36:5b:5c:d5:9b:3a:
                    c6:5c:cf:ed:1a:2e:a8:b9:76:48:41:96:f2:a5:27:
                    dd:11:09:4e:f7:75:e8:95:ae:64:45:89:6c:33:1f:
                    0e:75:a0:5f:31:6a:78:b7:fb:54:6c:2d:96:99:ff:
                    2f:8e:c8:e8:6b:b1:ad:14:3e:48:7e:29:42:1e:2b:
                    8b:09:2e:02:32:fc:51:b6:a9:9e:78:03:f1:39:b2:
                    58:2a:77:c9:23:39:79:ff:3c:c4:70:90:87:3a:b1:
                    b2:9c:67:d5:ef:c0:2f:d2:81:32:0d:34:7d:70:b9:
                    5f:18:1a:83:6c:49:05:a6:4d:84:78:1f:17:6a:0c:
                    68:cd:8e:ff:73:70:f5:92:2a:a7:a5:d0:1f:d5:03:
                    b4:80:89:52:9e:29:84:e3:b7:a4:4c:80:3b:0a:7b:
                    1e:83:8d:31:6f:b2:e7:6f:cf:ef:52:dc:03:35:5d:
                    84:b7:3f:a6:da:fb:47:a4:df:5f:e5:71:f7:71:25:
                    4e:98:3d:c6:ee:50:e8:96:c3:75:25:a5:d7:fb:3a:
                    b9:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:AB:DA:C1:5F:C6:4F:D0:5E:63:4C:AC:54:34:8B:84:0B:19:DA:11
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5ADDC528A43811EC8F92DBAC5A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.255.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:68:1b:60:76:90:6b:91:45:c3:9d:4c:6e:d8:96:43:87:b0:
         8d:7c:7b:c3:76:c8:b3:cd:7d:8b:34:2a:75:bc:d1:03:f2:d8:
         f8:f6:c4:91:41:30:48:ae:ca:2f:7e:c0:a9:3d:93:a9:5b:10:
         56:c7:b1:aa:1e:6b:49:0e:ed:5d:f1:73:ae:b1:a9:e1:20:99:
         9b:ad:37:50:fb:93:c3:2f:0a:17:71:05:8d:09:d6:61:bf:4b:
         80:a0:92:81:8f:02:6e:d6:ad:79:8e:63:20:4b:e5:89:8d:1c:
         2c:6b:c6:4b:c5:27:e2:4e:ee:24:3a:06:01:fe:51:f6:9b:81:
         7b:92:89:22:db:ea:9e:96:48:78:3c:c0:5b:73:33:79:65:4b:
         78:19:47:61:f0:29:5c:9d:62:01:6c:11:bf:ba:af:a6:5c:88:
         1a:65:f0:f0:c7:10:6b:5c:19:02:6c:42:78:4c:27:de:89:20:
         b6:01:8b:fc:7f:c9:25:2f:e0:87:5d:f9:b3:21:28:cd:ab:bf:
         5a:d9:c2:97:13:6d:02:9b:4f:cc:40:91:2c:f1:92:af:c9:fa:
         f4:de:0b:f4:5f:a3:15:45:cd:85:2c:7a:80:0e:79:16:40:8c:
         09:c5:89:58:c0:68:d0:6e:23:ad:ef:50:2d:5d:c3:79:39:61:
         73:c3:e4:f7
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICEmswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMjAzMTUwODE3MjVaFw0yMjEyMzEwODE3MjVaMBgxFjAU
BgNVBAMMDTYyMzA0Yjk5LTdiOTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC8gi8L7MV1RW4ud+nH7eEKV8CVX0OQdLJb14mbYmsEIEGEneNMfCbgQSji
se3U2ZzQS3/5KjZbXNWbOsZcz+0aLqi5dkhBlvKlJ90RCU73deiVrmRFiWwzHw51
oF8xani3+1RsLZaZ/y+OyOhrsa0UPkh+KUIeK4sJLgIy/FG2qZ54A/E5slgqd8kj
OXn/PMRwkIc6sbKcZ9XvwC/SgTINNH1wuV8YGoNsSQWmTYR4HxdqDGjNjv9zcPWS
Kqel0B/VA7SAiVKeKYTjt6RMgDsKex6DjTFvsudvz+9S3AM1XYS3P6ba+0ek31/l
cfdxJU6YPcbuUOiWw3Ulpdf7OrkXAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU+Kva
wV/GT9BeY0ysVDSLhAsZ2hEwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzVBRERDNTI4QTQzODExRUM4RjkyREJBQzVBNDBENTc3LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGc/wowDQYJKoZIhvcNAQELBQAD
ggEBAExoG2B2kGuRRcOdTG7YlkOHsI18e8N2yLPNfYs0KnW80QPy2Pj2xJFBMEiu
yi9+wKk9k6lbEFbHsaoea0kO7V3xc66xqeEgmZutN1D7k8MvChdxBY0J1mG/S4Cg
koGPAm7WrXmOYyBL5YmNHCxrxkvFJ+JO7iQ6BgH+UfabgXuSiSLb6p6WSHg8wFtz
M3llS3gZR2HwKVydYgFsEb+6r6ZciBpl8PDHEGtcGQJsQnhMJ96JILYBi/x/ySUv
4Idd+bMhKM2rv1rZwpcTbQKbT8xAkSzxkq/J+vTeC/RfoxVFzYUseoAOeRZAjAnF
iVjAaNBuI63vUC1dw3k5YXPD5Pc=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:20 2023 by rpki-client on console-fra.rpki-client.org