Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9CA2B50AB61B11EC941FF4B25A40D577.roa
File:                     9CA2B50AB61B11EC941FF4B25A40D577.roa (raw, json)
Hash identifier:          ltzVio/Y1oRRxkbrBQAlWktBykkOThts6fProSz7rqA=
Subject key identifier:   A2:73:5E:68:25:06:48:43:58:48:36:2A:E5:54:07:EB:F3:43:BE:CE
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       12EF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9CA2B50AB61B11EC941FF4B25A40D577.roa
Signing time:             Thu 07 Apr 2022 02:37:05 +0000
ROA not before:           Thu 07 Apr 2022 02:37:01 +0000
ROA not after:            Wed 30 Nov 2022 02:37:01 +0000
asID:                     131471
IP address blocks:        45.206.37.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4847 (0x12ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Apr  7 02:37:01 2022 GMT
            Not After : Nov 30 02:37:01 2022 GMT
        Subject: CN=624e4e51-bb47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ec:17:3b:75:0b:61:c6:20:64:62:1a:09:e7:
                    8d:c8:da:44:60:c8:6b:1f:91:8e:25:f8:dd:42:3a:
                    a5:35:ae:1a:ef:9f:d7:e4:63:a7:6e:7e:41:7c:fa:
                    1c:77:c5:df:90:ba:23:50:77:0e:3e:d9:8d:00:30:
                    9f:51:cb:af:f0:b1:a8:da:7e:a8:7f:31:06:69:6e:
                    69:46:9e:32:2c:76:96:49:c2:c4:4e:40:21:16:32:
                    41:82:e6:5a:7e:f3:6c:0c:5c:38:ec:84:f1:cf:a5:
                    19:24:e6:54:ed:1c:bf:81:38:c6:12:bc:08:b4:45:
                    ee:46:94:66:a9:50:58:bc:63:a3:70:f1:61:51:87:
                    17:49:99:f8:a1:99:9e:0f:68:17:a6:bc:0a:c2:82:
                    6e:30:3a:db:81:26:5c:61:97:2d:ff:f9:b4:69:75:
                    a5:e4:7d:61:4f:8e:41:8c:57:6d:0c:8d:e2:15:a7:
                    68:dd:49:11:9a:d6:b3:16:25:d6:e3:93:54:1c:39:
                    25:9c:0d:45:32:83:2c:54:ea:41:4f:09:39:ac:bc:
                    d2:a2:d1:7d:80:08:ad:ee:e9:b2:bf:99:c7:c4:5d:
                    63:1e:95:b0:2f:03:fb:22:b1:77:93:14:2f:7a:50:
                    ee:a2:5c:ab:dd:7f:fb:ab:c7:9c:66:f5:5c:ab:78:
                    ab:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:73:5E:68:25:06:48:43:58:48:36:2A:E5:54:07:EB:F3:43:BE:CE
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9CA2B50AB61B11EC941FF4B25A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.206.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:06:93:91:ef:e2:c4:8f:7b:ed:2e:95:ce:0c:e0:a1:0a:57:
         4d:c3:e5:48:95:ab:ca:b5:77:fd:2e:65:f9:57:c6:04:7b:21:
         e4:a9:20:cc:0c:1a:fb:01:89:9c:f8:a5:27:ca:0f:56:a2:e2:
         15:36:26:15:bb:5e:d0:ab:b8:1d:25:e6:6d:d3:e2:dd:56:27:
         7e:c8:87:d7:a3:73:cf:cf:9f:37:c9:4b:fc:04:61:ca:3f:a9:
         75:3f:94:57:bd:4f:71:93:3f:ac:89:40:e5:ca:9e:29:7a:6e:
         4d:53:67:97:9f:9e:aa:1a:ce:95:c1:7c:82:3f:be:11:a4:a3:
         6c:2a:88:0e:48:a8:e3:98:a8:57:af:9a:91:56:18:df:a0:ea:
         5d:0b:ec:f0:5e:f0:5d:e6:d6:1e:11:2d:26:c5:68:b5:eb:d6:
         7d:f7:27:0d:30:ff:fd:ab:15:90:b4:1e:5a:3a:2b:fe:68:2d:
         ba:f8:2b:9b:94:ff:1b:5a:ac:6e:ea:2e:ec:e3:ed:99:85:aa:
         45:f0:b6:ca:99:fc:aa:75:a8:f0:36:1a:5d:c3:c4:0e:c6:f5:
         e3:21:76:23:ca:88:7f:f1:85:65:e8:9e:88:12:ed:ed:5f:fe:
         cf:52:be:6f:f7:de:91:ce:ab:11:2f:f2:14:1f:13:39:5a:bf:
         8f:0e:8c:f2
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICEu8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMjA0MDcwMjM3MDFaFw0yMjExMzAwMjM3MDFaMBgxFjAU
BgNVBAMMDTYyNGU0ZTUxLWJiNDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDD7Bc7dQthxiBkYhoJ543I2kRgyGsfkY4l+N1COqU1rhrvn9fkY6dufkF8
+hx3xd+QuiNQdw4+2Y0AMJ9Ry6/wsajafqh/MQZpbmlGnjIsdpZJwsROQCEWMkGC
5lp+82wMXDjshPHPpRkk5lTtHL+BOMYSvAi0Re5GlGapUFi8Y6Nw8WFRhxdJmfih
mZ4PaBemvArCgm4wOtuBJlxhly3/+bRpdaXkfWFPjkGMV20MjeIVp2jdSRGa1rMW
Jdbjk1QcOSWcDUUygyxU6kFPCTmsvNKi0X2ACK3u6bK/mcfEXWMelbAvA/sisXeT
FC96UO6iXKvdf/urx5xm9VyreKt7AgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUonNe
aCUGSENYSDYq5VQH6/NDvs4wHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzlDQTJCNTBBQjYxQjExRUM5NDFGRjRCMjVBNDBENTc3LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtziUwDQYJKoZIhvcNAQELBQAD
ggEBAI4Gk5Hv4sSPe+0ulc4M4KEKV03D5UiVq8q1d/0uZflXxgR7IeSpIMwMGvsB
iZz4pSfKD1ai4hU2JhW7XtCruB0l5m3T4t1WJ37Ih9ejc8/PnzfJS/wEYco/qXU/
lFe9T3GTP6yJQOXKnil6bk1TZ5efnqoazpXBfII/vhGko2wqiA5IqOOYqFevmpFW
GN+g6l0L7PBe8F3m1h4RLSbFaLXr1n33Jw0w//2rFZC0Hlo6K/5oLbr4K5uU/xta
rG7qLuzj7ZmFqkXwtsqZ/Kp1qPA2Gl3DxA7G9eMhdiPKiH/xhWXonogS7e1f/s9S
vm/33pHOqxEv8hQfEzlav48OjPI=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:22 2023 by rpki-client on console-ams.rpki-client.org