Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9AC122A636DE11ECB832A469D8A014CE.roa
File:                     9AC122A636DE11ECB832A469D8A014CE.roa (raw, json)
Hash identifier:          jTFWP7hwayAQcHI0xCcXb+fOg7NV6HCJ1c4WP/JjylI=
Subject key identifier:   F2:E9:E9:A3:AF:AF:32:42:1E:31:6F:0F:03:15:69:63:5C:9E:E0:AF
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0B51
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9AC122A636DE11ECB832A469D8A014CE.roa
Signing time:             Wed 27 Oct 2021 04:30:25 +0000
ROA not before:           Wed 27 Oct 2021 04:30:21 +0000
ROA not after:            Thu 27 Oct 2022 04:30:21 +0000
asID:                     58895
IP address blocks:        45.206.97.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2897 (0xb51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 27 04:30:21 2021 GMT
            Not After : Oct 27 04:30:21 2022 GMT
        Subject: CN=6178d5e1-8819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e7:1c:27:ec:a7:51:b1:38:a9:29:f1:15:f3:
                    11:15:83:c1:3b:bc:b7:e8:4c:04:0d:c9:ed:aa:38:
                    1b:2d:f5:49:db:a4:76:19:6c:39:85:6c:32:df:15:
                    0c:31:d2:2d:ea:a6:ff:ce:df:cd:8b:dc:b7:8f:e8:
                    19:96:de:26:eb:04:19:8c:5e:1e:85:b6:89:5e:d0:
                    b3:8a:a7:1e:8c:1b:4e:a9:16:76:79:02:fc:0c:43:
                    b2:5c:2d:3a:a5:78:68:8f:0f:1f:69:3d:ed:d6:09:
                    e3:b1:74:6d:b4:e1:c2:49:25:88:e5:ea:38:cf:43:
                    8b:91:d6:37:fd:8f:6c:3e:88:7a:0a:a1:25:42:91:
                    c4:b4:93:5b:d5:b4:95:51:00:df:b1:c0:15:a9:eb:
                    c2:17:a4:dc:9f:6c:5e:13:33:b7:64:41:b9:3b:5e:
                    7d:3b:97:83:be:64:9e:10:7b:5f:9f:5a:fb:25:4e:
                    35:81:03:83:88:4d:bf:38:b8:a7:a9:76:02:dc:37:
                    76:d4:fe:31:99:0c:c9:d4:bc:f7:5a:88:b1:4d:60:
                    40:7c:96:f4:58:9b:53:8c:3f:b6:e5:c4:bf:e7:9a:
                    af:f2:0f:40:22:7f:4d:b8:18:4e:f5:b8:3d:33:08:
                    ec:3a:8d:58:ed:7a:a8:68:fc:13:bf:14:ce:71:4d:
                    20:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:E9:E9:A3:AF:AF:32:42:1E:31:6F:0F:03:15:69:63:5C:9E:E0:AF
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9AC122A636DE11ECB832A469D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.206.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:ed:f1:fc:a4:06:81:d7:6a:7d:a0:78:83:c2:6c:3d:f5:e6:
         3b:6d:52:c1:ff:c5:f8:40:55:3e:d9:37:1f:38:da:da:c2:96:
         2d:b9:65:55:49:fb:90:cd:69:ff:22:7e:65:c0:cb:ee:67:77:
         43:f5:ac:6b:35:ea:40:f1:5b:37:4f:f2:1b:42:2f:99:bc:dd:
         ca:db:45:b7:d4:7f:47:3e:f1:9a:7f:08:8d:9c:33:6f:08:f8:
         88:cf:9b:cc:b1:5e:ed:7a:e7:18:77:d6:69:ec:0b:99:d1:32:
         2c:d9:5c:eb:b1:39:ec:69:9d:21:2c:9b:e2:fb:0a:92:cb:1b:
         40:af:56:20:75:ec:5e:fe:fd:2f:9d:df:1c:0e:59:0c:61:b3:
         29:8f:e7:b5:92:5b:b6:ec:d2:31:cf:7f:7d:b0:00:74:28:22:
         58:7a:ae:7a:b0:ed:a9:dc:bb:b1:f5:80:18:f0:52:c0:43:16:
         df:a3:a3:22:c5:a7:47:55:97:8e:88:c1:f0:28:f8:31:b4:3d:
         40:c6:cd:b1:f2:c3:c3:74:33:af:78:d5:3b:89:d8:61:2e:09:
         69:b7:da:f5:a5:06:1f:bb:57:8e:0e:78:d2:60:2a:72:c1:23:
         25:4a:d5:1d:ea:3e:86:31:f1:eb:20:ec:6c:4d:fb:9d:d1:9a:
         19:4c:ab:bf
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICC1EwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMTEwMjcwNDMwMjFaFw0yMjEwMjcwNDMwMjFaMBgxFjAU
BgNVBAMMDTYxNzhkNWUxLTg4MTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDA5xwn7KdRsTipKfEV8xEVg8E7vLfoTAQNye2qOBst9UnbpHYZbDmFbDLf
FQwx0i3qpv/O382L3LeP6BmW3ibrBBmMXh6Ftole0LOKpx6MG06pFnZ5AvwMQ7Jc
LTqleGiPDx9pPe3WCeOxdG204cJJJYjl6jjPQ4uR1jf9j2w+iHoKoSVCkcS0k1vV
tJVRAN+xwBWp68IXpNyfbF4TM7dkQbk7Xn07l4O+ZJ4Qe1+fWvslTjWBA4OITb84
uKepdgLcN3bU/jGZDMnUvPdaiLFNYEB8lvRYm1OMP7blxL/nmq/yD0Aif024GE71
uD0zCOw6jVjteqho/BO/FM5xTSCdAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU8unp
o6+vMkIeMW8PAxVpY1ye4K8wHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzlBQzEyMkE2MzZERTExRUNCODMyQTQ2OUQ4QTAxNENFLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtzmEwDQYJKoZIhvcNAQELBQAD
ggEBAIbt8fykBoHXan2geIPCbD315jttUsH/xfhAVT7ZNx842trCli25ZVVJ+5DN
af8ifmXAy+5nd0P1rGs16kDxWzdP8htCL5m83crbRbfUf0c+8Zp/CI2cM28I+IjP
m8yxXu165xh31mnsC5nRMizZXOuxOexpnSEsm+L7CpLLG0CvViB17F7+/S+d3xwO
WQxhsymP57WSW7bs0jHPf32wAHQoIlh6rnqw7ancu7H1gBjwUsBDFt+joyLFp0dV
l46IwfAo+DG0PUDGzbHyw8N0M6941TuJ2GEuCWm32vWlBh+7V44OeNJgKnLBIyVK
1R3qPoYx8esg7GxN+53RmhlMq78=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:22 2023 by rpki-client on console-ams.rpki-client.org