Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5B73FC12987311ECB8EA789B5A40D577.roa
File:                     5B73FC12987311ECB8EA789B5A40D577.roa (raw, json)
Hash identifier:          3zfZpOxsz2jMWZpTcuWJUCFfSPVQFf5+I9x63YDRSbE=
Subject key identifier:   21:97:67:32:7C:87:2E:81:EA:1A:30:7F:2A:67:D4:BB:D6:57:88:37
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       1228
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5B73FC12987311ECB8EA789B5A40D577.roa
Signing time:             Mon 28 Feb 2022 08:49:37 +0000
ROA not before:           Mon 28 Feb 2022 08:49:33 +0000
ROA not after:            Fri 30 Dec 2022 08:49:33 +0000
asID:                     328608
IP address blocks:        45.197.240.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4648 (0x1228)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Feb 28 08:49:33 2022 GMT
            Not After : Dec 30 08:49:33 2022 GMT
        Subject: CN=621c8ca0-ce6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9e:d7:8a:8d:e3:b1:61:77:6d:c7:cd:a6:e6:
                    96:35:f3:b4:8c:96:3b:c5:30:78:05:96:1c:0f:c4:
                    0e:ee:1b:01:49:73:d4:76:2e:5c:53:14:49:35:94:
                    7d:d2:d4:e8:97:d0:05:4f:f7:8b:2e:e7:0f:53:2b:
                    47:07:f7:a3:69:4c:11:b3:f9:73:ba:10:f4:99:94:
                    a6:f3:61:39:50:34:38:38:4c:57:91:b2:b0:d3:05:
                    86:a5:59:5d:3e:05:b6:f8:33:52:23:7d:b5:f1:c1:
                    94:80:58:0d:a4:62:e0:d2:82:10:eb:4f:5d:1d:8c:
                    84:5f:a2:07:58:f1:ee:6e:09:b9:d8:31:01:c1:36:
                    3f:74:2b:4e:57:14:89:29:1b:5b:e2:cf:dd:c9:cb:
                    e8:07:72:6c:1a:01:24:58:71:ac:ed:98:ef:b7:46:
                    e6:f2:1f:d9:9b:6d:a9:e7:65:7c:17:59:7c:2c:0c:
                    44:d1:17:d9:8a:5e:9a:dc:2d:aa:c9:82:b9:1f:56:
                    fa:69:a8:c9:04:fb:21:0d:3e:11:d4:48:47:e3:44:
                    09:1c:c6:e7:3c:14:f2:eb:7c:2e:63:60:1c:77:ed:
                    6f:74:3e:68:c1:f3:8a:2d:52:9a:5b:b0:77:0c:f8:
                    5e:a4:0d:79:3c:4e:a2:7a:74:9e:1c:7d:30:79:cd:
                    d5:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:97:67:32:7C:87:2E:81:EA:1A:30:7F:2A:67:D4:BB:D6:57:88:37
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5B73FC12987311ECB8EA789B5A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.197.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         46:f1:c6:87:00:49:9d:19:40:cf:d4:17:b5:59:f5:e1:13:5f:
         12:95:dd:27:5a:de:92:85:95:21:6b:c3:d0:20:f5:66:10:73:
         62:27:de:a8:0c:52:cf:d8:93:07:8b:c6:7a:92:bd:81:ed:c9:
         9c:e0:ed:bf:47:18:0a:e4:a7:b2:05:7a:38:d9:10:15:b0:4f:
         4a:24:44:9b:f3:64:d5:0e:e1:c7:1a:59:23:29:ba:71:9a:85:
         7b:95:a0:78:d2:6f:ad:11:78:cd:d4:b2:62:b5:05:cb:84:4a:
         b9:c5:9d:e2:4a:74:40:f7:b2:7e:4b:5c:cc:42:a5:08:0d:d2:
         f3:be:ba:a3:0b:8b:57:dd:b8:b4:a0:ac:33:fb:de:ee:b6:0b:
         97:3b:14:0e:7b:e5:7b:25:79:8f:97:8f:58:a0:11:ab:79:d0:
         ae:0b:29:30:25:ca:76:cc:f9:2e:4e:a9:c8:a2:d3:8f:5e:a9:
         e4:72:55:ff:ec:ce:c4:63:b8:6c:c6:0f:20:a3:8d:80:a8:0b:
         5e:7c:bc:86:68:96:cf:4c:a4:c2:a6:39:6c:71:02:53:28:65:
         c0:31:87:05:f3:1c:81:bf:71:ab:fe:7f:40:4e:2e:c1:ae:0c:
         a2:81:c3:af:de:9c:cd:01:5a:5b:e0:bf:52:b4:0e:fe:2a:52:
         3b:d5:07:20
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICEigwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMjAyMjgwODQ5MzNaFw0yMjEyMzAwODQ5MzNaMBgxFjAU
BgNVBAMMDTYyMWM4Y2EwLWNlNmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCinteKjeOxYXdtx82m5pY187SMljvFMHgFlhwPxA7uGwFJc9R2LlxTFEk1
lH3S1OiX0AVP94su5w9TK0cH96NpTBGz+XO6EPSZlKbzYTlQNDg4TFeRsrDTBYal
WV0+Bbb4M1IjfbXxwZSAWA2kYuDSghDrT10djIRfogdY8e5uCbnYMQHBNj90K05X
FIkpG1viz93Jy+gHcmwaASRYcaztmO+3RubyH9mbbannZXwXWXwsDETRF9mKXprc
LarJgrkfVvppqMkE+yENPhHUSEfjRAkcxuc8FPLrfC5jYBx37W90PmjB84otUppb
sHcM+F6kDXk8TqJ6dJ4cfTB5zdVPAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUIZdn
MnyHLoHqGjB/KmfUu9ZXiDcwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzVCNzNGQzEyOTg3MzExRUNCOEVBNzg5QjVBNDBENTc3LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMtxfAwDQYJKoZIhvcNAQELBQAD
ggEBAEbxxocASZ0ZQM/UF7VZ9eETXxKV3Sda3pKFlSFrw9Ag9WYQc2In3qgMUs/Y
kweLxnqSvYHtyZzg7b9HGArkp7IFejjZEBWwT0okRJvzZNUO4ccaWSMpunGahXuV
oHjSb60ReM3UsmK1BcuESrnFneJKdED3sn5LXMxCpQgN0vO+uqMLi1fduLSgrDP7
3u62C5c7FA575XsleY+Xj1igEat50K4LKTAlynbM+S5Oqcii049eqeRyVf/szsRj
uGzGDyCjjYCoC158vIZols9MpMKmOWxxAlMoZcAxhwXzHIG/cav+f0BOLsGuDKKB
w6/enM0BWlvgv1K0Dv4qUjvVByA=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:19 2023 by rpki-client on console-ams.rpki-client.org