Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9EBCAE02488611ECB3715037D8A014CE.roa
File:                     9EBCAE02488611ECB3715037D8A014CE.roa (raw, json)
Hash identifier:          KWPQM5G/IGZYiXOTs5OsUjY8rDzMeL+K7HAriQ/9ki0=
Subject key identifier:   57:63:7F:DF:20:51:8F:2C:D9:AB:C8:39:4D:51:6B:35:4D:11:17:85
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0D6C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9EBCAE02488611ECB3715037D8A014CE.roa
Signing time:             Thu 18 Nov 2021 15:45:57 +0000
ROA not before:           Fri 19 Nov 2021 15:45:51 +0000
ROA not after:            Sat 19 Nov 2022 15:45:51 +0000
asID:                     139879
IP address blocks:        156.231.163.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3436 (0xd6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 19 15:45:51 2021 GMT
            Not After : Nov 19 15:45:51 2022 GMT
        Subject: CN=61967535-4500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:60:86:f5:ea:49:3b:ef:b7:0d:19:fc:98:d9:
                    e9:b9:95:3e:f0:87:17:e3:15:b2:49:8e:2c:62:66:
                    57:f9:9b:ee:85:a2:19:cb:05:ce:88:1a:1a:7e:c4:
                    3e:79:92:59:51:53:0b:14:f7:0a:fb:6f:a0:08:42:
                    ed:b3:69:d7:48:4a:d6:a4:22:ec:d1:33:5b:e0:05:
                    3e:ca:9c:b2:96:c8:89:76:dc:f8:70:93:cc:db:44:
                    d7:5b:20:41:61:22:75:e6:6c:fb:28:44:f4:ae:62:
                    ef:f0:ca:5a:a5:1f:a9:e1:3f:08:5e:0d:65:2a:4e:
                    36:95:b4:e5:67:f1:3b:9d:48:4b:04:a7:08:01:56:
                    1f:c3:98:45:91:58:66:a1:01:26:95:d1:fd:38:e5:
                    98:f5:f5:7e:26:84:7b:1c:bc:cc:d0:5e:30:d6:44:
                    41:b5:79:77:1c:6c:a2:c5:06:b7:9e:62:8f:29:d3:
                    df:36:0b:85:c8:2e:45:fa:3f:f0:cc:e5:94:f3:37:
                    fd:cc:a9:e4:24:99:eb:c6:a1:91:b8:e5:48:91:58:
                    6c:45:9d:91:20:21:63:40:5e:35:71:c1:0a:6a:3c:
                    53:5e:b2:8c:22:c4:c6:38:85:97:8d:a5:df:2f:16:
                    43:12:ff:f0:c2:ac:3a:fe:3c:67:b5:a7:f6:59:47:
                    1d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:63:7F:DF:20:51:8F:2C:D9:AB:C8:39:4D:51:6B:35:4D:11:17:85
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9EBCAE02488611ECB3715037D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.231.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:a6:3a:52:c5:7c:8d:76:74:7f:08:ab:62:41:37:2a:6d:8b:
         95:7e:e1:55:f9:03:5c:55:bc:3b:50:71:f6:b7:16:d7:14:a9:
         a6:62:4b:07:bd:0a:39:57:c9:3c:d7:19:93:93:a8:0a:18:e1:
         f2:a9:25:87:c3:5c:f4:57:b7:5a:6a:ce:ed:94:82:1e:49:b1:
         c2:75:72:12:03:44:a7:68:1f:8d:cc:5d:ba:67:6c:bf:dc:56:
         ae:d2:2a:4d:1c:48:42:0b:71:90:9a:c4:c0:5d:16:45:ed:4a:
         c0:90:a0:30:bf:b2:ce:2c:cb:ab:b5:ef:8c:67:ba:f7:73:a6:
         19:c5:df:23:11:01:3a:e6:22:cf:cc:6e:38:28:9a:75:56:37:
         1d:c6:6b:15:a5:bf:fc:51:76:69:72:2c:bb:fe:c9:25:23:76:
         de:db:07:ec:04:83:d3:b8:c1:57:af:29:d7:07:0a:d8:63:f6:
         09:36:a7:11:ed:41:88:3c:d4:a5:50:0e:04:d9:9d:e9:15:0f:
         ee:5e:2d:c0:fd:7b:fc:5f:a8:18:8c:b2:31:25:bb:04:41:d4:
         8a:e6:2e:53:fa:f9:bd:ff:11:8c:c2:43:37:66:95:5e:da:43:
         a1:5e:1e:4f:d8:31:35:11:5a:1a:48:61:e5:87:fc:e0:59:c1:
         0c:b8:79:3a
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICDWwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMTExMTkxNTQ1NTFaFw0yMjExMTkxNTQ1NTFaMBgxFjAU
BgNVBAMMDTYxOTY3NTM1LTQ1MDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDPYIb16kk777cNGfyY2em5lT7whxfjFbJJjixiZlf5m+6FohnLBc6IGhp+
xD55kllRUwsU9wr7b6AIQu2zaddIStakIuzRM1vgBT7KnLKWyIl23Phwk8zbRNdb
IEFhInXmbPsoRPSuYu/wylqlH6nhPwheDWUqTjaVtOVn8TudSEsEpwgBVh/DmEWR
WGahASaV0f045Zj19X4mhHscvMzQXjDWREG1eXccbKLFBreeYo8p0982C4XILkX6
P/DM5ZTzN/3MqeQkmevGoZG45UiRWGxFnZEgIWNAXjVxwQpqPFNesowixMY4hZeN
pd8vFkMS//DCrDr+PGe1p/ZZRx2DAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUV2N/
3yBRjyzZq8g5TVFrNU0RF4UwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzlFQkNBRTAyNDg4NjExRUNCMzcxNTAzN0Q4QTAxNENFLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACc56MwDQYJKoZIhvcNAQELBQAD
ggEBAJqmOlLFfI12dH8Iq2JBNypti5V+4VX5A1xVvDtQcfa3FtcUqaZiSwe9CjlX
yTzXGZOTqAoY4fKpJYfDXPRXt1pqzu2Ugh5JscJ1chIDRKdoH43MXbpnbL/cVq7S
Kk0cSEILcZCaxMBdFkXtSsCQoDC/ss4sy6u174xnuvdzphnF3yMRATrmIs/Mbjgo
mnVWNx3GaxWlv/xRdmlyLLv+ySUjdt7bB+wEg9O4wVevKdcHCthj9gk2pxHtQYg8
1KVQDgTZnekVD+5eLcD9e/xfqBiMsjEluwRB1IrmLlP6+b3/EYzCQzdmlV7aQ6Fe
Hk/YMTURWhpIYeWH/OBZwQy4eTo=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:22 2023 by rpki-client on console-ams.rpki-client.org