Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7192AC76735911ECB25EBFBB5A40D577.roa
File:                     7192AC76735911ECB25EBFBB5A40D577.roa (raw, json)
Hash identifier:          bad0zn13gtGGsf1gO6MdYQkKH8FV0f9vJFjUFudSnfk=
Subject key identifier:   BD:9A:C0:6B:54:5D:F6:3D:BB:73:92:12:83:38:70:B1:19:0C:A1:6E
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       1151
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7192AC76735911ECB25EBFBB5A40D577.roa
Signing time:             Wed 12 Jan 2022 03:40:54 +0000
ROA not before:           Wed 12 Jan 2022 03:40:49 +0000
ROA not after:            Sun 31 Jul 2022 03:40:49 +0000
asID:                     141432
IP address blocks:        156.241.250.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4433 (0x1151)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 12 03:40:49 2022 GMT
            Not After : Jul 31 03:40:49 2022 GMT
        Subject: CN=61de4dc6-945e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2e:62:8c:83:6f:b6:96:81:b5:e5:a3:e4:23:
                    9d:a8:7d:b1:36:ba:14:ea:e8:37:86:d6:8a:bc:ed:
                    b3:f7:b9:74:96:03:f1:db:d8:ff:df:e3:39:0e:8d:
                    78:91:02:0d:90:08:a2:a1:a2:dd:a9:61:c5:a7:c7:
                    ef:f5:7f:1b:d6:33:8d:08:ec:fc:ff:7d:1c:79:b6:
                    82:de:1f:b9:40:6f:4c:5f:6b:5e:e9:4c:d6:09:2d:
                    9f:ac:cc:9f:94:56:8a:2f:31:e7:4d:19:82:7a:bb:
                    fc:fe:2e:67:ba:6a:0b:09:26:65:b9:47:68:bf:40:
                    86:0b:b9:51:c4:9b:17:8b:68:0b:58:4a:82:ac:38:
                    6b:a3:c9:5a:65:bf:45:d2:3f:f1:19:43:7f:27:fa:
                    11:91:ca:c2:78:18:d1:ab:43:b9:8d:ce:1e:16:c1:
                    10:8d:b0:53:54:fc:5e:53:cf:df:d7:cb:08:86:1a:
                    9b:52:33:a8:e0:04:08:03:79:dd:37:66:a8:04:6b:
                    ba:cb:c2:81:6d:57:02:b6:60:05:b2:c7:48:27:94:
                    1d:b0:0b:e3:b2:ea:f5:e8:c0:cf:c3:48:eb:66:f5:
                    13:4e:11:d5:90:b2:54:ee:cb:60:1e:7b:93:cc:89:
                    76:4d:3e:1e:47:76:bf:65:c0:34:2e:73:09:c4:b3:
                    98:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:9A:C0:6B:54:5D:F6:3D:BB:73:92:12:83:38:70:B1:19:0C:A1:6E
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7192AC76735911ECB25EBFBB5A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.241.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:35:61:3c:9c:14:47:ac:08:24:7c:78:41:93:4e:26:43:57:
         75:12:83:8e:29:a0:84:6f:ab:34:9f:f6:38:c8:ad:28:bd:31:
         a8:5f:80:8c:19:6d:75:bd:d6:46:fc:1b:dd:29:f6:8f:4f:30:
         ee:2e:1a:b6:54:c8:62:17:fd:6e:f7:8c:0d:3c:af:75:02:a7:
         7d:ed:b5:1b:26:44:e7:bb:11:59:69:aa:fa:bd:7d:e5:af:b7:
         d5:dc:18:ed:47:3c:df:5b:cd:0a:e9:8c:74:3e:40:60:68:d1:
         b2:58:94:c9:68:69:f0:b7:6e:86:65:4b:f8:99:ca:df:c8:0b:
         9e:74:4d:1b:02:26:89:ce:81:57:56:f9:44:b4:99:8d:8c:ad:
         6a:f4:01:f9:6d:30:e2:d4:9c:43:e3:63:05:b8:ea:df:64:03:
         58:22:dd:35:e8:ac:ee:fd:9c:03:6e:63:1c:1a:b8:aa:e0:7b:
         28:0f:98:4c:3f:18:29:0a:f8:c9:bb:8b:15:9a:b5:7a:cf:42:
         5d:86:6a:a0:8c:0a:f4:b9:98:90:2b:bc:bd:df:2f:20:f8:9c:
         cb:88:b9:93:39:6c:42:62:76:fb:64:55:47:98:d1:60:12:99:
         3c:02:f5:b2:88:5b:52:18:25:6a:e4:a9:d0:44:65:2c:24:3f:
         28:6f:06:4c
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICEVEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMjAxMTIwMzQwNDlaFw0yMjA3MzEwMzQwNDlaMBgxFjAU
BgNVBAMMDTYxZGU0ZGM2LTk0NWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC7LmKMg2+2loG15aPkI52ofbE2uhTq6DeG1oq87bP3uXSWA/Hb2P/f4zkO
jXiRAg2QCKKhot2pYcWnx+/1fxvWM40I7Pz/fRx5toLeH7lAb0xfa17pTNYJLZ+s
zJ+UVoovMedNGYJ6u/z+Lme6agsJJmW5R2i/QIYLuVHEmxeLaAtYSoKsOGujyVpl
v0XSP/EZQ38n+hGRysJ4GNGrQ7mNzh4WwRCNsFNU/F5Tz9/XywiGGptSM6jgBAgD
ed03ZqgEa7rLwoFtVwK2YAWyx0gnlB2wC+Oy6vXowM/DSOtm9RNOEdWQslTuy2Ae
e5PMiXZNPh5Hdr9lwDQucwnEs5hbAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUvZrA
a1Rd9j27c5ISgzhwsRkMoW4wHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzcxOTJBQzc2NzM1OTExRUNCMjVFQkZCQjVBNDBENTc3LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACc8fowDQYJKoZIhvcNAQELBQAD
ggEBAJE1YTycFEesCCR8eEGTTiZDV3USg44poIRvqzSf9jjIrSi9MahfgIwZbXW9
1kb8G90p9o9PMO4uGrZUyGIX/W73jA08r3UCp33ttRsmROe7EVlpqvq9feWvt9Xc
GO1HPN9bzQrpjHQ+QGBo0bJYlMloafC3boZlS/iZyt/IC550TRsCJonOgVdW+US0
mY2MrWr0AfltMOLUnEPjYwW46t9kA1gi3TXorO79nANuYxwauKrgeygPmEw/GCkK
+Mm7ixWatXrPQl2GaqCMCvS5mJArvL3fLyD4nMuIuZM5bEJidvtkVUeY0WASmTwC
9bKIW1IYJWrkqdBEZSwkPyhvBkw=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:22 2023 by rpki-client on console-fra.rpki-client.org