Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/62EB32A8EBBC11EB9CE71D08D8A014CE.roa
File:                     62EB32A8EBBC11EB9CE71D08D8A014CE.roa (raw, json)
Hash identifier:          TzwhcEIhLkkbNwvS1DszJTRCYWjyHSvcDpy46VVXP1Y=
Subject key identifier:   81:A7:FD:E8:52:C3:CD:EF:1C:74:2D:BD:07:94:D1:55:7E:D5:71:5A
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       080B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/62EB32A8EBBC11EB9CE71D08D8A014CE.roa
Signing time:             Fri 23 Jul 2021 13:46:43 +0000
ROA not before:           Fri 23 Jul 2021 13:46:40 +0000
ROA not after:            Thu 15 Sep 2022 13:46:40 +0000
asID:                     1239
IP address blocks:        45.205.192.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2059 (0x80b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jul 23 13:46:40 2021 GMT
            Not After : Sep 15 13:46:40 2022 GMT
        Subject: CN=60fac843-ae10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a7:3c:e2:ca:c7:52:f2:42:54:f4:ca:71:2d:
                    7e:85:88:57:71:0b:08:97:8f:13:09:25:9f:27:eb:
                    20:fe:c9:d2:8d:f5:29:45:ed:98:8f:19:8c:46:48:
                    c4:3f:36:60:2f:1c:d9:90:8a:91:12:2c:b8:6c:8f:
                    1d:eb:61:91:24:75:ac:07:51:29:42:fe:27:66:da:
                    f3:5d:24:5f:7a:b6:34:ec:07:96:67:70:0d:9f:6c:
                    c2:ab:34:f8:8c:0a:6d:0d:cc:01:0d:ac:21:89:c3:
                    1b:2a:3f:6d:f2:16:25:a5:52:14:3d:15:c3:0d:78:
                    ed:55:90:c5:87:2d:b2:13:7f:c0:ea:cf:bb:08:90:
                    3a:17:fd:8c:25:fb:0c:cc:04:31:33:59:37:b0:93:
                    45:b6:f4:ee:1d:6c:5c:52:3e:ba:b5:76:8e:2e:9b:
                    c9:ac:24:db:e8:bf:26:f6:2f:15:9c:59:bb:6f:73:
                    d6:4e:fa:1e:f8:bb:a9:6e:c5:28:ad:2b:74:08:6d:
                    45:13:6c:81:b9:77:b6:49:e6:38:4b:9c:c5:ea:3c:
                    75:26:8f:02:96:2d:d6:7b:7b:f5:8e:fe:9f:c6:76:
                    1a:cc:cc:7c:6f:d5:1d:c2:fd:25:da:f3:ca:5b:7e:
                    c5:64:2b:9c:80:1f:4e:12:db:42:ca:ce:a9:84:88:
                    b9:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:A7:FD:E8:52:C3:CD:EF:1C:74:2D:BD:07:94:D1:55:7E:D5:71:5A
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/62EB32A8EBBC11EB9CE71D08D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.205.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         56:2b:87:d1:41:a7:60:45:a9:fa:d0:17:68:02:59:dc:aa:c1:
         40:db:aa:07:09:e2:ae:4f:f6:42:e9:fa:42:13:df:20:da:cc:
         05:03:c3:2c:67:6e:6a:7f:8c:ba:b6:70:d0:8c:38:b5:ab:95:
         31:f1:0b:ca:42:c2:b0:ad:7f:eb:2d:51:f4:8f:75:7d:00:ce:
         39:2a:e5:90:24:5d:0d:28:c1:fd:84:39:34:79:3a:95:5a:7e:
         f6:5c:b6:b0:9f:08:eb:17:92:44:76:4b:e2:ad:df:88:3d:c7:
         51:ee:8f:f2:10:27:05:4b:56:f3:f9:cc:de:31:85:a6:10:1c:
         5e:f6:7d:a3:e8:42:57:9e:6d:a2:3d:1e:17:c5:59:41:f1:3c:
         69:3c:2e:e6:62:c0:01:04:ab:ab:4b:dd:ba:cb:09:5e:36:9f:
         65:cd:fe:21:4b:8a:84:d6:62:58:8a:5d:61:9e:6e:a9:2c:c4:
         6e:80:40:5a:4d:d9:84:bc:8d:be:f6:c5:60:79:37:ad:2c:c4:
         5e:5b:1c:bd:f0:e7:f4:57:28:89:31:0f:76:b1:78:7b:8a:86:
         98:6a:eb:af:a8:bb:8e:f2:07:04:88:18:9c:95:40:8c:17:66:
         65:9a:0a:09:85:e5:7c:3e:d1:7b:95:87:bf:3e:9e:a0:b9:06:
         2c:17:e1:95
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICCAswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMTA3MjMxMzQ2NDBaFw0yMjA5MTUxMzQ2NDBaMBgxFjAU
BgNVBAMMDTYwZmFjODQzLWFlMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC3pzziysdS8kJU9MpxLX6FiFdxCwiXjxMJJZ8n6yD+ydKN9SlF7ZiPGYxG
SMQ/NmAvHNmQipESLLhsjx3rYZEkdawHUSlC/idm2vNdJF96tjTsB5ZncA2fbMKr
NPiMCm0NzAENrCGJwxsqP23yFiWlUhQ9FcMNeO1VkMWHLbITf8Dqz7sIkDoX/Ywl
+wzMBDEzWTewk0W29O4dbFxSPrq1do4um8msJNvovyb2LxWcWbtvc9ZO+h74u6lu
xSitK3QIbUUTbIG5d7ZJ5jhLnMXqPHUmjwKWLdZ7e/WO/p/GdhrMzHxv1R3C/SXa
88pbfsVkK5yAH04S20LKzqmEiLnfAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUgaf9
6FLDze8cdC29B5TRVX7VcVowHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzYyRUIzMkE4RUJCQzExRUI5Q0U3MUQwOEQ4QTAxNENFLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAUtzcAwDQYJKoZIhvcNAQELBQAD
ggEBAFYrh9FBp2BFqfrQF2gCWdyqwUDbqgcJ4q5P9kLp+kIT3yDazAUDwyxnbmp/
jLq2cNCMOLWrlTHxC8pCwrCtf+stUfSPdX0Azjkq5ZAkXQ0owf2EOTR5OpVafvZc
trCfCOsXkkR2S+Kt34g9x1Huj/IQJwVLVvP5zN4xhaYQHF72faPoQleebaI9HhfF
WUHxPGk8LuZiwAEEq6tL3brLCV42n2XN/iFLioTWYliKXWGebqksxG6AQFpN2YS8
jb72xWB5N60sxF5bHL3w5/RXKIkxD3axeHuKhphq66+ou47yBwSIGJyVQIwXZmWa
CgmF5Xw+0XuVh78+nqC5BiwX4ZU=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:21 2023 by rpki-client on console-fra.rpki-client.org