Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/943676F6EBBC11EB94A57F08D8A014CE.roa
File:                     943676F6EBBC11EB94A57F08D8A014CE.roa (raw, json)
Hash identifier:          vy07vEZiSdaHc1A+B5kkhrpRcX5gMcZOgN9dLF8lchw=
Subject key identifier:   40:D8:17:9A:9D:8D:2B:E4:12:10:17:C9:EB:C1:18:88:2A:4F:81:74
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0811
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/943676F6EBBC11EB94A57F08D8A014CE.roa
Signing time:             Fri 23 Jul 2021 13:48:06 +0000
ROA not before:           Fri 23 Jul 2021 13:48:02 +0000
ROA not after:            Thu 15 Sep 2022 13:48:02 +0000
asID:                     1239
IP address blocks:        156.242.32.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2065 (0x811)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jul 23 13:48:02 2021 GMT
            Not After : Sep 15 13:48:02 2022 GMT
        Subject: CN=60fac896-514c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ad:7c:fd:cc:5e:7c:46:b3:4f:7f:ad:0d:2a:
                    87:29:fa:70:95:6f:66:76:ea:28:cb:9f:89:4d:60:
                    4d:09:42:73:0b:59:ad:16:33:c1:b5:61:a7:aa:bd:
                    f7:21:6e:74:0f:be:08:92:71:0b:06:26:2f:4f:da:
                    c9:a5:b0:03:9a:0d:42:47:78:30:31:fb:78:54:f9:
                    83:31:8d:71:e5:eb:75:57:f7:93:52:29:71:c4:8a:
                    ab:56:68:bb:19:65:f5:a1:c1:a3:e8:24:98:99:bf:
                    84:67:99:45:23:98:f3:f2:0f:de:43:53:f1:cd:49:
                    30:a4:e0:04:e9:b9:4c:0e:4c:82:98:4f:4f:b4:c7:
                    6c:b2:1b:b6:c2:4a:32:95:01:08:38:45:7a:62:f4:
                    44:61:57:1d:29:f0:4b:7d:c3:4e:f6:b0:f8:d4:94:
                    ef:a5:e7:84:eb:b4:fd:43:87:81:f1:b8:28:c5:3a:
                    29:b5:e3:20:1e:f5:66:ba:5a:51:db:75:41:c2:00:
                    d2:ee:05:d9:f9:64:d9:74:a2:42:b5:0d:56:6e:bc:
                    ed:76:8c:1d:c1:23:5e:f5:fa:5d:16:90:1d:ec:c2:
                    86:0d:e3:2d:86:65:98:67:d0:c7:7e:a9:43:8a:dd:
                    ca:a3:f7:c5:ef:46:4d:59:08:78:01:59:c9:44:cf:
                    44:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:D8:17:9A:9D:8D:2B:E4:12:10:17:C9:EB:C1:18:88:2A:4F:81:74
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/943676F6EBBC11EB94A57F08D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.242.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         42:13:15:75:3c:d2:11:b1:56:06:f7:2c:94:67:b8:da:f0:13:
         19:90:b0:1f:30:71:3d:25:e1:cb:7d:3a:2e:b4:02:d2:97:01:
         02:14:b7:d0:f8:19:66:69:c4:7d:78:a2:47:fd:4a:fe:a5:02:
         c5:3b:a8:cb:b9:16:a8:22:68:23:c2:c9:96:c7:fc:c0:d0:56:
         16:d2:36:35:74:83:14:9e:eb:d6:fe:9c:9d:f9:a2:94:7b:36:
         e8:e0:14:5b:96:60:01:42:aa:30:61:03:4e:ee:c6:70:95:f8:
         e1:28:9a:ca:d6:b2:fc:c0:8c:ee:17:d5:a3:d8:d5:4f:5b:9a:
         3a:50:ea:47:c2:63:08:1d:a1:dd:ce:ba:67:29:06:8c:40:39:
         6a:07:84:17:41:f8:28:34:0c:24:87:ce:7b:1d:89:9b:ed:fc:
         98:08:2e:4e:b3:b2:b2:90:94:82:91:bf:0a:2d:2f:5f:f0:6a:
         9e:b2:fa:bf:56:c8:96:37:4f:cc:6a:1c:88:cd:c3:6a:0a:24:
         85:2a:36:a1:6f:0a:1f:09:f9:c2:ed:44:08:07:00:16:3e:13:
         b4:6d:18:af:9f:22:73:11:ae:cf:0a:b1:4b:53:a7:c6:d9:ee:
         92:91:ad:c9:cb:45:22:b0:34:1f:5c:a5:4b:79:aa:88:2d:2d:
         11:86:08:61
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICCBEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMTA3MjMxMzQ4MDJaFw0yMjA5MTUxMzQ4MDJaMBgxFjAU
BgNVBAMMDTYwZmFjODk2LTUxNGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDjrXz9zF58RrNPf60NKocp+nCVb2Z26ijLn4lNYE0JQnMLWa0WM8G1Yaeq
vfchbnQPvgiScQsGJi9P2smlsAOaDUJHeDAx+3hU+YMxjXHl63VX95NSKXHEiqtW
aLsZZfWhwaPoJJiZv4RnmUUjmPPyD95DU/HNSTCk4ATpuUwOTIKYT0+0x2yyG7bC
SjKVAQg4RXpi9ERhVx0p8Et9w072sPjUlO+l54TrtP1Dh4HxuCjFOim14yAe9Wa6
WlHbdUHCANLuBdn5ZNl0okK1DVZuvO12jB3BI171+l0WkB3swoYN4y2GZZhn0Md+
qUOK3cqj98XvRk1ZCHgBWclEz0QDAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUQNgX
mp2NK+QSEBfJ68EYiCpPgXQwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4Lzk0MzY3NkY2RUJCQzExRUI5NEE1N0YwOEQ4QTAxNENFLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAWc8iAwDQYJKoZIhvcNAQELBQAD
ggEBAEITFXU80hGxVgb3LJRnuNrwExmQsB8wcT0l4ct9Oi60AtKXAQIUt9D4GWZp
xH14okf9Sv6lAsU7qMu5FqgiaCPCyZbH/MDQVhbSNjV0gxSe69b+nJ35opR7Nujg
FFuWYAFCqjBhA07uxnCV+OEomsrWsvzAjO4X1aPY1U9bmjpQ6kfCYwgdod3Oumcp
BoxAOWoHhBdB+Cg0DCSHznsdiZvt/JgILk6zsrKQlIKRvwotL1/wap6y+r9WyJY3
T8xqHIjNw2oKJIUqNqFvCh8J+cLtRAgHABY+E7RtGK+fInMRrs8KsUtTp8bZ7pKR
rcnLRSKwNB9cpUt5qogtLRGGCGE=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:24 2023 by rpki-client on console-fra.rpki-client.org