Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6269533AFE9111ECB2EC3899F1222468.roa
File:                     6269533AFE9111ECB2EC3899F1222468.roa (raw, json)
Hash identifier:          4qP6CtTXMyMxWI5oIZ47XrWzKCu2VcjqfNgUmBIi/Yo=
Subject key identifier:   AC:6C:93:2C:45:CB:F4:48:B9:EC:10:75:DF:7D:1F:FE:73:0C:20:E5
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       1548
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6269533AFE9111ECB2EC3899F1222468.roa
Signing time:             Fri 08 Jul 2022 07:41:32 +0000
ROA not before:           Fri 08 Jul 2022 07:41:28 +0000
ROA not after:            Fri 30 Jun 2023 07:41:28 +0000
asID:                     984
IP address blocks:        45.195.244.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5448 (0x1548)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jul  8 07:41:28 2022 GMT
            Not After : Jun 30 07:41:28 2023 GMT
        Subject: CN=62c7dfac-39e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:2f:c5:46:c3:52:a8:fe:06:c9:1d:c2:ff:e7:
                    5f:c3:e8:0b:0c:ea:41:ef:2e:f3:0b:a1:16:9f:a1:
                    7c:ed:3b:ca:64:77:88:39:02:ea:bf:8a:3d:e3:78:
                    bb:fc:f3:82:04:5c:af:91:ff:42:2d:fe:37:6f:b1:
                    90:02:90:4b:b9:ee:8e:35:a1:2e:c3:78:55:e0:b4:
                    a0:17:c7:63:b8:2d:4f:ce:4e:34:3c:df:1c:3b:94:
                    ae:78:23:d1:89:b6:f5:91:91:43:70:42:5a:9f:cc:
                    b7:fc:cf:01:5f:03:71:62:aa:64:60:fc:0b:94:ed:
                    2d:17:93:ef:78:c5:1d:72:1e:2a:2d:78:bf:e8:f3:
                    00:c6:ea:49:5d:77:f1:d6:d1:05:dd:95:4b:31:b9:
                    ba:f6:0f:f7:0c:2f:81:64:0c:73:bb:12:95:9a:37:
                    2f:55:60:11:d6:a3:43:84:1a:19:75:e4:cb:10:bf:
                    ff:58:4d:e7:80:0a:e2:58:79:67:75:74:62:37:68:
                    48:23:56:c5:40:ad:7c:89:98:da:da:c2:c2:cf:3e:
                    3a:a0:6a:4a:c6:fd:d6:a7:09:ca:fe:ea:12:97:37:
                    fe:21:8f:6b:8d:0a:cb:03:0b:59:09:66:06:46:b1:
                    21:b1:a9:83:d2:43:b8:d4:77:51:4c:09:0a:ed:62:
                    a4:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:6C:93:2C:45:CB:F4:48:B9:EC:10:75:DF:7D:1F:FE:73:0C:20:E5
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6269533AFE9111ECB2EC3899F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:14:41:45:5a:2e:80:0f:c9:4d:5f:a3:97:a5:4d:8d:7a:51:
         9d:01:bb:93:15:d0:c1:81:c0:ae:44:ee:08:d6:fd:db:28:c4:
         70:04:4f:97:30:d3:3c:27:50:f0:55:50:8d:0c:f8:ed:6b:af:
         b1:f8:2c:87:cd:e2:f2:d0:db:a7:66:55:17:e7:0f:df:76:ea:
         22:6c:cd:b3:ad:57:31:91:f2:90:c8:27:db:c3:ea:80:50:c4:
         99:4b:25:c1:67:b2:a7:1d:f1:90:c0:ed:33:08:24:c9:57:b1:
         0f:2f:c1:20:06:ad:27:5a:89:22:ea:2d:4c:53:6d:6f:6b:99:
         f3:c2:73:de:56:69:9f:9f:36:57:92:e6:82:dd:d5:6e:0c:db:
         0b:01:8b:66:05:6e:87:44:f3:ec:6a:ce:2b:38:e0:b7:26:fc:
         4a:49:d1:de:25:03:9e:0d:f7:b8:c8:f6:c5:3a:c2:24:23:bb:
         56:3c:28:26:c1:06:ff:00:98:a2:30:ef:e1:86:7d:46:0f:c6:
         71:d6:5e:b4:80:5f:e7:e8:1d:7c:b4:e0:9e:e0:d4:67:e8:af:
         aa:3a:ee:e5:37:f8:16:20:54:9b:fc:b6:fe:35:8d:79:fa:b5:
         1e:a4:ff:38:8d:87:58:11:64:d0:f4:3d:66:c9:8d:f9:cb:62:
         47:07:67:a6
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICFUgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMjA3MDgwNzQxMjhaFw0yMzA2MzAwNzQxMjhaMBgxFjAU
BgNVBAMMDTYyYzdkZmFjLTM5ZTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDOL8VGw1Ko/gbJHcL/51/D6AsM6kHvLvMLoRafoXztO8pkd4g5Auq/ij3j
eLv884IEXK+R/0It/jdvsZACkEu57o41oS7DeFXgtKAXx2O4LU/OTjQ83xw7lK54
I9GJtvWRkUNwQlqfzLf8zwFfA3FiqmRg/AuU7S0Xk+94xR1yHioteL/o8wDG6kld
d/HW0QXdlUsxubr2D/cML4FkDHO7EpWaNy9VYBHWo0OEGhl15MsQv/9YTeeACuJY
eWd1dGI3aEgjVsVArXyJmNrawsLPPjqgakrG/danCcr+6hKXN/4hj2uNCssDC1kJ
ZgZGsSGxqYPSQ7jUd1FMCQrtYqQFAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUrGyT
LEXL9Ei57BB1330f/nMMIOUwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzYyNjk1MzNBRkU5MTExRUNCMkVDMzg5OUYxMjIyNDY4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAItw/QwDQYJKoZIhvcNAQELBQAD
ggEBAEwUQUVaLoAPyU1fo5elTY16UZ0Bu5MV0MGBwK5E7gjW/dsoxHAET5cw0zwn
UPBVUI0M+O1rr7H4LIfN4vLQ26dmVRfnD9926iJszbOtVzGR8pDIJ9vD6oBQxJlL
JcFnsqcd8ZDA7TMIJMlXsQ8vwSAGrSdaiSLqLUxTbW9rmfPCc95WaZ+fNleS5oLd
1W4M2wsBi2YFbodE8+xqzis44Lcm/EpJ0d4lA54N97jI9sU6wiQju1Y8KCbBBv8A
mKIw7+GGfUYPxnHWXrSAX+foHXy04J7g1Gfor6o67uU3+BYgVJv8tv41jXn6tR6k
/ziNh1gRZND0PWbJjfnLYkcHZ6Y=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:19 2023 by rpki-client on console-ams.rpki-client.org