Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6CF9C49636CE11EC82A4044ED8A014CE.roa
File:                     6CF9C49636CE11EC82A4044ED8A014CE.roa (raw, json)
Hash identifier:          WvTzOc3ZyryghxyWVmKOU6LLysYvgpLEX7Tybn2k+bk=
Subject key identifier:   BD:A3:FD:BC:F5:C7:3F:84:16:B7:35:CC:C6:51:A4:F4:C8:AB:EB:54
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0AC7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6CF9C49636CE11EC82A4044ED8A014CE.roa
Signing time:             Wed 27 Oct 2021 02:34:36 +0000
ROA not before:           Wed 27 Oct 2021 02:34:33 +0000
ROA not after:            Thu 27 Oct 2022 02:34:33 +0000
asID:                     58895
IP address blocks:        45.206.159.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2759 (0xac7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 27 02:34:33 2021 GMT
            Not After : Oct 27 02:34:33 2022 GMT
        Subject: CN=6178babc-0df2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6b:38:87:5d:12:23:5a:1a:9f:7c:d8:a0:7a:
                    68:a5:30:df:48:37:01:d3:c7:93:6d:6a:76:cc:c8:
                    33:17:28:80:1a:79:81:1c:4f:ef:54:8f:23:f2:9b:
                    6c:4a:b0:7e:2a:4e:c7:33:01:0b:36:a1:9d:95:04:
                    50:7a:a5:67:39:64:45:89:23:c2:c0:f3:e1:8e:a2:
                    bb:2c:db:ec:77:59:38:5c:25:e5:2f:d8:b8:96:d5:
                    ed:33:e5:b3:76:01:b0:ae:d2:49:00:97:31:12:83:
                    cc:fc:7a:f1:19:75:47:ef:a9:09:fa:5e:5b:3e:7c:
                    85:94:af:e3:f7:b5:6b:b3:07:cf:c3:63:19:0c:4e:
                    f6:f6:26:ee:96:69:46:76:bd:ee:9d:e0:36:4f:0a:
                    7a:24:70:25:59:76:e3:1a:81:9c:df:a5:d4:77:05:
                    12:3c:c4:48:79:a4:42:46:d6:3f:f5:40:5b:0e:ad:
                    c4:86:36:ad:40:fd:a7:23:e1:0f:b6:14:88:6a:7b:
                    3e:bc:4c:46:78:d6:a2:5c:62:a7:44:ea:5f:38:92:
                    37:07:f5:2b:c1:39:27:e4:b4:30:69:fe:9a:20:0c:
                    f7:54:66:61:39:b8:78:ff:1f:91:e9:ac:5d:5b:3e:
                    69:46:ed:e4:64:3e:a4:bf:24:51:d6:31:ee:1d:60:
                    af:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:A3:FD:BC:F5:C7:3F:84:16:B7:35:CC:C6:51:A4:F4:C8:AB:EB:54
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6CF9C49636CE11EC82A4044ED8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.206.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:88:73:01:f0:5e:d3:b1:fe:a7:af:73:df:d4:d0:81:38:33:
         53:ab:f6:57:28:2e:e9:35:32:f1:78:9e:a5:ea:19:0a:5b:74:
         e1:ad:b9:d9:d8:c2:2a:4b:16:21:c9:2a:4d:d3:73:e7:cd:cc:
         91:c5:57:89:21:13:67:f9:89:3d:f6:c9:bf:23:68:47:65:ca:
         d7:da:80:31:9f:de:b5:66:f7:eb:7e:cd:e6:08:ca:88:85:1a:
         f2:cc:81:7e:52:56:ab:57:0f:24:12:f5:d0:1d:08:83:dc:f6:
         20:87:fa:cc:df:f3:d7:0b:f3:0d:01:2b:b9:fe:44:f2:eb:90:
         71:d1:17:db:35:7c:e2:b7:d0:70:c9:2e:9a:91:88:b5:10:a4:
         c9:b8:c9:bf:04:0b:08:54:46:6b:28:75:ac:64:20:89:5a:35:
         67:6e:f7:a6:ec:81:52:f3:6e:54:5f:79:b2:b4:0e:ac:8a:bf:
         2e:89:5c:ee:d3:90:36:5e:3d:66:3d:04:b1:69:5f:96:bb:53:
         e1:f7:b5:f6:5b:2b:61:a2:f7:d8:c5:9c:97:34:aa:e9:ca:ae:
         36:2e:a5:f1:ff:a7:ab:f4:c6:73:ed:3d:72:29:38:1b:35:04:
         18:c2:d8:4d:ed:24:4c:10:f7:51:dc:ab:27:b3:25:b4:5b:e7:
         89:1e:3f:89
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICCscwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMTEwMjcwMjM0MzNaFw0yMjEwMjcwMjM0MzNaMBgxFjAU
BgNVBAMMDTYxNzhiYWJjLTBkZjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC6aziHXRIjWhqffNigemilMN9INwHTx5NtanbMyDMXKIAaeYEcT+9UjyPy
m2xKsH4qTsczAQs2oZ2VBFB6pWc5ZEWJI8LA8+GOorss2+x3WThcJeUv2LiW1e0z
5bN2AbCu0kkAlzESg8z8evEZdUfvqQn6Xls+fIWUr+P3tWuzB8/DYxkMTvb2Ju6W
aUZ2ve6d4DZPCnokcCVZduMagZzfpdR3BRI8xEh5pEJG1j/1QFsOrcSGNq1A/acj
4Q+2FIhqez68TEZ41qJcYqdE6l84kjcH9SvBOSfktDBp/pogDPdUZmE5uHj/H5Hp
rF1bPmlG7eRkPqS/JFHWMe4dYK8HAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUvaP9
vPXHP4QWtzXMxlGk9Mir61QwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzZDRjlDNDk2MzZDRTExRUM4MkE0MDQ0RUQ4QTAxNENFLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtzp8wDQYJKoZIhvcNAQELBQAD
ggEBADCIcwHwXtOx/qevc9/U0IE4M1Or9lcoLuk1MvF4nqXqGQpbdOGtudnYwipL
FiHJKk3Tc+fNzJHFV4khE2f5iT32yb8jaEdlytfagDGf3rVm9+t+zeYIyoiFGvLM
gX5SVqtXDyQS9dAdCIPc9iCH+szf89cL8w0BK7n+RPLrkHHRF9s1fOK30HDJLpqR
iLUQpMm4yb8ECwhURmsodaxkIIlaNWdu96bsgVLzblRfebK0DqyKvy6JXO7TkDZe
PWY9BLFpX5a7U+H3tfZbK2Gi99jFnJc0qunKrjYupfH/p6v0xnPtPXIpOBs1BBjC
2E3tJEwQ91HcqyezJbRb54keP4k=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:20 2023 by rpki-client on console-ams.rpki-client.org