Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8111AEE6D19011EC90FCC5A8F1222468.roa
File:                     8111AEE6D19011EC90FCC5A8F1222468.roa (raw, json)
Hash identifier:          FwUDNtUd+/u9TfjIsomNhbSY4iS1YYedpg7CYW4L8Q0=
Subject key identifier:   DC:BE:E3:72:02:10:36:00:48:EC:E9:C8:4F:FE:AE:A7:0C:42:F7:D2
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       13D1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8111AEE6D19011EC90FCC5A8F1222468.roa
Signing time:             Thu 12 May 2022 01:11:51 +0000
ROA not before:           Tue 17 May 2022 01:11:47 +0000
ROA not after:            Fri 31 Mar 2023 01:11:47 +0000
asID:                     29074
IP address blocks:        156.246.24.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5073 (0x13d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: May 17 01:11:47 2022 GMT
            Not After : Mar 31 01:11:47 2023 GMT
        Subject: CN=627c5ed7-d5a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a6:48:41:04:8a:ac:6b:0d:bb:7b:4a:a3:94:
                    08:21:dc:cc:60:03:66:12:65:c0:62:96:5e:23:21:
                    7f:e4:4b:6f:8f:59:6f:9d:21:f0:7d:23:ae:46:f5:
                    d2:8b:8c:e4:68:21:ae:07:69:38:83:7a:7f:76:f8:
                    01:d2:39:1e:0f:8b:74:36:c8:87:fb:1b:e1:0a:58:
                    0a:2a:8e:87:db:28:ba:23:39:bd:d8:27:b9:ee:33:
                    13:90:69:a5:47:93:82:12:66:69:3f:10:88:78:35:
                    ad:e2:e2:9b:9b:eb:97:7d:e1:a5:9e:ed:78:9d:20:
                    74:ad:cf:2e:89:04:2f:62:33:4b:cd:c3:11:7e:7a:
                    bc:4d:2e:1b:95:44:37:e3:c5:90:bc:47:13:30:16:
                    a7:c5:4e:38:30:55:83:4b:2e:4e:62:13:78:09:a9:
                    39:e4:61:91:45:52:e8:a1:36:98:aa:a9:31:69:61:
                    38:8c:8d:a0:e1:8d:19:e6:0e:e4:63:94:4d:2d:bf:
                    15:65:f2:0c:e5:68:eb:3e:a7:92:96:9d:0a:88:c0:
                    f0:73:74:84:8a:e2:b4:1a:41:88:5a:b1:c3:92:e5:
                    a0:ed:30:a4:64:5a:6a:6b:9d:33:87:f4:67:0c:37:
                    07:e5:d6:e7:12:1c:a4:92:fc:22:88:bd:31:d3:af:
                    29:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:BE:E3:72:02:10:36:00:48:EC:E9:C8:4F:FE:AE:A7:0C:42:F7:D2
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8111AEE6D19011EC90FCC5A8F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.246.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:a2:41:a0:b1:7a:71:d1:48:56:47:0e:54:b5:46:8a:e2:ec:
         b6:85:29:1f:53:45:b6:41:5d:11:74:33:4b:9e:9a:e3:e9:85:
         4d:c2:4c:a2:dc:d7:3b:65:5f:aa:14:1c:ef:93:19:72:4d:c4:
         3a:a6:0d:42:a9:89:6c:22:eb:5d:97:cf:4e:ac:53:a6:04:ea:
         6e:1a:eb:c5:a9:7b:ec:74:25:f4:63:6d:c2:07:68:d7:02:ce:
         fe:88:75:ac:df:8e:21:16:14:51:59:30:7b:ac:b2:e6:68:87:
         89:5f:94:42:81:9f:c5:2d:c4:55:ad:5c:7b:5b:24:28:78:2c:
         b0:77:05:93:f2:ba:81:e3:e0:d0:6e:ad:2f:0e:7b:6f:c3:f9:
         28:c0:50:a8:0a:a5:6d:7c:da:c2:13:4b:bc:7e:f9:f6:9a:2f:
         c0:8b:88:64:c4:b1:ee:a1:21:7d:51:2f:78:50:1a:bf:1a:78:
         d8:62:23:d0:de:98:2d:99:a7:4d:7c:cb:2e:5c:7a:84:7d:c7:
         61:bd:44:fa:9a:13:02:9c:8b:52:c6:a4:33:29:ca:e0:fd:4f:
         b3:83:7d:ed:2a:43:9d:6b:aa:91:81:3b:60:2f:42:39:79:a5:
         13:73:d7:90:8d:db:44:49:7a:e2:2e:2a:7f:d1:85:ee:da:99:
         fc:0f:26:af
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICE9EwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMjA1MTcwMTExNDdaFw0yMzAzMzEwMTExNDdaMBgxFjAU
BgNVBAMMDTYyN2M1ZWQ3LWQ1YTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCTpkhBBIqsaw27e0qjlAgh3MxgA2YSZcBill4jIX/kS2+PWW+dIfB9I65G
9dKLjORoIa4HaTiDen92+AHSOR4Pi3Q2yIf7G+EKWAoqjofbKLojOb3YJ7nuMxOQ
aaVHk4ISZmk/EIh4Na3i4pub65d94aWe7XidIHStzy6JBC9iM0vNwxF+erxNLhuV
RDfjxZC8RxMwFqfFTjgwVYNLLk5iE3gJqTnkYZFFUuihNpiqqTFpYTiMjaDhjRnm
DuRjlE0tvxVl8gzlaOs+p5KWnQqIwPBzdISK4rQaQYhascOS5aDtMKRkWmprnTOH
9GcMNwfl1ucSHKSS/CKIvTHTrymHAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU3L7j
cgIQNgBI7OnIT/6upwxC99IwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzgxMTFBRUU2RDE5MDExRUM5MEZDQzVBOEYxMjIyNDY4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACc9hgwDQYJKoZIhvcNAQELBQAD
ggEBAK2iQaCxenHRSFZHDlS1Rori7LaFKR9TRbZBXRF0M0uemuPphU3CTKLc1ztl
X6oUHO+TGXJNxDqmDUKpiWwi612Xz06sU6YE6m4a68Wpe+x0JfRjbcIHaNcCzv6I
dazfjiEWFFFZMHussuZoh4lflEKBn8UtxFWtXHtbJCh4LLB3BZPyuoHj4NBurS8O
e2/D+SjAUKgKpW182sITS7x++faaL8CLiGTEse6hIX1RL3hQGr8aeNhiI9DemC2Z
p018yy5ceoR9x2G9RPqaEwKci1LGpDMpyuD9T7ODfe0qQ51rqpGBO2AvQjl5pRNz
15CN20RJeuIuKn/Rhe7amfwPJq8=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:21 2023 by rpki-client on console-ams.rpki-client.org