Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/86490614E89911EC939305D0F1222468.roa
File:                     86490614E89911EC939305D0F1222468.roa (raw, json)
Hash identifier:          mfikL218wb8fNCy+ZgCZPv7r78iCxA1Z2kOfHoQUPEU=
Subject key identifier:   F8:B3:F5:B5:EA:35:B0:78:44:7E:F0:CC:0B:C2:5C:3F:8E:1A:0B:16
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       14BB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/86490614E89911EC939305D0F1222468.roa
Signing time:             Fri 10 Jun 2022 08:44:22 +0000
ROA not before:           Fri 10 Jun 2022 08:44:19 +0000
ROA not after:            Tue 28 Feb 2023 08:44:19 +0000
asID:                     133199
IP address blocks:        45.207.53.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5307 (0x14bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jun 10 08:44:19 2022 GMT
            Not After : Feb 28 08:44:19 2023 GMT
        Subject: CN=62a30466-ee2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:80:9a:24:4b:d7:07:0f:8d:4e:8e:7a:8f:10:
                    3a:ee:2a:99:b8:fc:e5:fe:76:c4:a8:6a:7a:8f:1c:
                    cd:dc:61:17:d5:04:96:10:a2:3e:a7:3d:46:7c:9e:
                    23:8e:7b:b6:49:90:de:9c:02:5d:60:cd:8b:eb:b6:
                    4b:61:68:d6:b0:4a:b5:a8:2f:df:cc:3a:bd:23:ac:
                    58:ad:72:3d:52:4e:5a:3f:41:69:b7:84:d6:fc:59:
                    dc:03:07:12:2e:58:f8:11:5d:98:84:84:e2:44:ce:
                    01:55:41:d4:43:e7:b2:18:0f:04:e8:a7:84:52:86:
                    3d:ac:b2:b0:fe:86:b1:a8:8e:01:85:de:79:d3:a7:
                    ec:3c:db:cd:4c:67:ff:f2:11:c1:de:78:0b:4d:f1:
                    b2:86:89:54:95:0f:09:59:42:24:31:72:c5:48:5d:
                    c5:ae:33:31:42:df:5e:b3:a5:fa:93:27:8b:69:f1:
                    01:d7:e5:af:87:32:c2:3b:bc:de:af:25:f0:1b:90:
                    df:28:05:5e:b1:15:35:fd:6d:68:3f:6b:e5:f2:50:
                    ee:87:f5:f8:30:bd:7d:fd:b7:d5:f5:f4:75:50:53:
                    f0:05:4b:64:8e:c1:a6:b7:f3:51:ac:e2:d7:e4:88:
                    f9:9d:fe:86:a0:41:93:a6:39:d3:8c:2c:50:ce:76:
                    78:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:B3:F5:B5:EA:35:B0:78:44:7E:F0:CC:0B:C2:5C:3F:8E:1A:0B:16
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/86490614E89911EC939305D0F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.207.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:8d:9e:d3:b1:05:ab:cd:41:18:80:df:d5:88:dc:d7:ef:de:
         68:e1:be:f5:82:21:4d:00:b7:6b:a3:bf:47:06:05:2e:9b:ad:
         5d:5d:59:55:6b:31:d8:b6:6f:32:f6:8f:ca:84:7f:70:21:8b:
         d3:fe:a2:87:a5:82:9e:db:5a:ae:eb:5b:46:2a:91:f4:4f:70:
         95:d2:14:eb:1f:b9:68:8b:16:12:69:09:8e:62:f5:0a:76:dc:
         23:71:72:eb:c2:62:fe:e5:52:f0:52:dd:58:d5:a6:88:c4:89:
         d0:09:f6:cc:fa:c4:9c:6c:8d:b9:43:b0:ed:c5:ce:3d:34:e9:
         d2:34:1e:5b:28:62:95:19:c9:75:cc:ae:57:aa:ce:2f:a2:12:
         1f:eb:a6:48:c2:3f:6d:9d:29:0e:22:3d:01:27:f7:72:fc:f5:
         3c:78:58:22:89:cf:d2:61:40:80:6a:1f:c0:d7:52:3c:9a:9a:
         35:89:a6:bb:21:3b:b3:ef:25:7f:00:1d:d6:d9:cd:36:26:82:
         f3:c1:93:b1:e6:19:3d:8c:17:68:99:76:ad:44:89:4a:52:b9:
         e5:06:5d:a6:bd:27:2d:68:a1:c6:e4:d1:12:33:97:e2:53:eb:
         47:4d:85:ab:27:54:f2:8f:bc:15:33:ac:46:71:0f:06:5e:5a:
         d9:d6:6a:74
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICFLswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMjA2MTAwODQ0MTlaFw0yMzAyMjgwODQ0MTlaMBgxFjAU
BgNVBAMMDTYyYTMwNDY2LWVlMmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDpgJokS9cHD41OjnqPEDruKpm4/OX+dsSoanqPHM3cYRfVBJYQoj6nPUZ8
niOOe7ZJkN6cAl1gzYvrtkthaNawSrWoL9/MOr0jrFitcj1STlo/QWm3hNb8WdwD
BxIuWPgRXZiEhOJEzgFVQdRD57IYDwTop4RShj2ssrD+hrGojgGF3nnTp+w8281M
Z//yEcHeeAtN8bKGiVSVDwlZQiQxcsVIXcWuMzFC316zpfqTJ4tp8QHX5a+HMsI7
vN6vJfAbkN8oBV6xFTX9bWg/a+XyUO6H9fgwvX39t9X19HVQU/AFS2SOwaa381Gs
4tfkiPmd/oagQZOmOdOMLFDOdnhLAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU+LP1
teo1sHhEfvDMC8JcP44aCxYwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4Lzg2NDkwNjE0RTg5OTExRUM5MzkzMDVEMEYxMjIyNDY4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtzzUwDQYJKoZIhvcNAQELBQAD
ggEBAByNntOxBavNQRiA39WI3Nfv3mjhvvWCIU0At2ujv0cGBS6brV1dWVVrMdi2
bzL2j8qEf3Ahi9P+ooelgp7bWq7rW0YqkfRPcJXSFOsfuWiLFhJpCY5i9Qp23CNx
cuvCYv7lUvBS3VjVpojEidAJ9sz6xJxsjblDsO3Fzj006dI0HlsoYpUZyXXMrleq
zi+iEh/rpkjCP22dKQ4iPQEn93L89Tx4WCKJz9JhQIBqH8DXUjyamjWJprshO7Pv
JX8AHdbZzTYmgvPBk7HmGT2MF2iZdq1EiUpSueUGXaa9Jy1oocbk0RIzl+JT60dN
hasnVPKPvBUzrEZxDwZeWtnWanQ=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:21 2023 by rpki-client on console-ams.rpki-client.org