Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/90345B5EFA8511EB94336D12D8A014CE.roa
File:                     90345B5EFA8511EB94336D12D8A014CE.roa (raw, json)
Hash identifier:          WOqu+tJ2Xk8MsiHgYIwca/JzOJIHzwUG2Q6jcCtI2wQ=
Subject key identifier:   BF:78:59:1F:F2:F7:42:AF:7C:33:0B:AE:E6:47:B8:84:6D:7E:DF:92
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       088A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/90345B5EFA8511EB94336D12D8A014CE.roa
Signing time:             Wed 11 Aug 2021 09:22:33 +0000
ROA not before:           Wed 11 Aug 2021 09:22:28 +0000
ROA not after:            Thu 11 Aug 2022 09:22:28 +0000
asID:                     137443
IP address blocks:        45.204.64.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2186 (0x88a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 11 09:22:28 2021 GMT
            Not After : Aug 11 09:22:28 2022 GMT
        Subject: CN=611396d9-d3f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:6e:08:b2:73:e9:c9:64:56:e2:73:10:33:e6:
                    bd:c9:a5:ef:90:a0:b5:54:2d:44:1f:f0:a6:0d:cf:
                    4f:a0:df:2a:18:e4:59:64:ac:54:05:c3:74:ce:16:
                    c7:49:84:2f:6a:09:68:13:ad:c5:b8:d4:24:c9:cf:
                    3e:bd:dd:f1:67:d6:e6:bc:2e:ca:05:f8:06:66:86:
                    7a:06:83:19:d1:23:d5:0e:78:a2:d3:a0:7c:22:01:
                    34:81:de:7f:a4:93:52:8d:41:06:61:a2:8b:84:e4:
                    3b:e5:35:83:be:b6:b0:e2:86:32:d0:ee:30:8b:15:
                    9b:27:a1:f0:77:b9:ed:28:76:88:81:75:73:df:e6:
                    90:0b:9f:6a:6e:d7:c0:6c:4c:16:e5:7a:cd:09:77:
                    f6:d6:1c:c1:ec:90:45:38:f6:29:5e:4a:49:9d:51:
                    e3:fb:87:65:7b:b2:61:e4:01:3d:71:ad:69:b2:ae:
                    d9:9b:eb:1e:22:c0:3f:63:69:78:ef:c4:72:bb:ec:
                    7b:71:ef:6d:c1:be:13:1f:01:6c:be:a5:46:8b:29:
                    99:a9:d5:e0:02:cd:bf:7e:b6:ea:aa:16:e4:87:7d:
                    ad:c5:e8:6c:e6:1f:50:30:fe:f5:c5:ab:04:10:99:
                    c7:b3:7d:47:4c:31:8d:ec:b2:a3:60:69:72:10:21:
                    5f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:78:59:1F:F2:F7:42:AF:7C:33:0B:AE:E6:47:B8:84:6D:7E:DF:92
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/90345B5EFA8511EB94336D12D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.204.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b6:53:00:07:6e:17:ec:06:71:c1:89:8a:af:5d:40:0c:6a:e9:
         0a:4e:29:37:0f:0a:8b:ac:60:f8:ea:e4:c4:91:d2:08:1c:94:
         6d:32:72:4a:b4:c2:b6:54:fb:cc:9b:56:23:87:19:fb:02:54:
         e1:23:da:25:69:07:42:0f:ce:32:60:ee:46:ae:fc:a1:57:13:
         c3:d1:8f:a6:4b:9f:e8:08:00:16:9f:e5:0f:cf:b0:2f:13:d0:
         37:b8:9e:3a:06:d5:44:b1:f4:d5:15:97:cb:f2:d0:50:12:b8:
         12:60:8d:07:84:d7:ed:bf:a7:14:74:bc:5f:04:92:f8:25:be:
         a3:f8:2b:1f:0f:e0:46:88:d1:08:45:1d:4c:cc:ea:19:b3:ff:
         1d:78:5d:da:0d:33:fc:0d:3a:c5:91:46:8d:cd:5b:ef:30:6d:
         d6:5d:8d:f5:72:6c:f7:99:35:09:c5:ec:ef:5b:87:52:1b:65:
         ad:15:eb:76:f7:86:ba:1b:03:41:22:d6:4a:0a:d0:75:57:d6:
         3f:18:0a:4e:dd:1c:25:99:6e:d3:bb:11:c4:e1:c9:1f:9c:f1:
         a9:0c:ec:52:e7:90:36:3c:2c:0b:44:df:13:13:05:4f:7f:f8:
         25:5c:0f:ac:60:77:77:2d:3c:5e:05:3c:a8:a7:90:ae:1e:7f:
         b4:19:f3:e2
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICCIowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMTA4MTEwOTIyMjhaFw0yMjA4MTEwOTIyMjhaMBgxFjAU
BgNVBAMMDTYxMTM5NmQ5LWQzZjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDebgiyc+nJZFbicxAz5r3Jpe+QoLVULUQf8KYNz0+g3yoY5FlkrFQFw3TO
FsdJhC9qCWgTrcW41CTJzz693fFn1ua8LsoF+AZmhnoGgxnRI9UOeKLToHwiATSB
3n+kk1KNQQZhoouE5DvlNYO+trDihjLQ7jCLFZsnofB3ue0odoiBdXPf5pALn2pu
18BsTBbles0Jd/bWHMHskEU49ileSkmdUeP7h2V7smHkAT1xrWmyrtmb6x4iwD9j
aXjvxHK77Htx723BvhMfAWy+pUaLKZmp1eACzb9+tuqqFuSHfa3F6GzmH1Aw/vXF
qwQQmcezfUdMMY3ssqNgaXIQIV/lAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUv3hZ
H/L3Qq98Mwuu5ke4hG1+35IwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzkwMzQ1QjVFRkE4NTExRUI5NDMzNkQxMkQ4QTAxNENFLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEtzEAwDQYJKoZIhvcNAQELBQAD
ggEBALZTAAduF+wGccGJiq9dQAxq6QpOKTcPCousYPjq5MSR0ggclG0yckq0wrZU
+8ybViOHGfsCVOEj2iVpB0IPzjJg7kau/KFXE8PRj6ZLn+gIABaf5Q/PsC8T0De4
njoG1USx9NUVl8vy0FASuBJgjQeE1+2/pxR0vF8EkvglvqP4Kx8P4EaI0QhFHUzM
6hmz/x14XdoNM/wNOsWRRo3NW+8wbdZdjfVybPeZNQnF7O9bh1IbZa0V63b3hrob
A0Ei1koK0HVX1j8YCk7dHCWZbtO7EcThyR+c8akM7FLnkDY8LAtE3xMTBU9/+CVc
D6xgd3ctPF4FPKinkK4ef7QZ8+I=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:24 2023 by rpki-client on console-fra.rpki-client.org