Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A1D3DA9EBEBA11EB8ADC611AF8AEA228.roa
File:                     A1D3DA9EBEBA11EB8ADC611AF8AEA228.roa (raw, json)
Hash identifier:          C+GPEpx2aM/WNJbx63SzwMlL+vyxV+nmvLPgeIv3aXI=
Subject key identifier:   C2:4C:E0:8B:9C:65:0D:EB:9D:C6:E5:1F:99:8F:43:EA:81:9A:BC:EF
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0613
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A1D3DA9EBEBA11EB8ADC611AF8AEA228.roa
Signing time:             Thu 27 May 2021 07:10:35 +0000
ROA not before:           Thu 27 May 2021 07:10:32 +0000
ROA not after:            Sun 24 Jul 2022 07:10:32 +0000
asID:                     212552
IP address blocks:        45.195.200.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1555 (0x613)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: May 27 07:10:32 2021 GMT
            Not After : Jul 24 07:10:32 2022 GMT
        Subject: CN=60af45eb-71ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:72:b2:92:1f:b0:a7:84:a2:10:00:92:29:bf:
                    5a:42:31:21:42:73:5c:01:fc:c1:9d:fe:68:9d:e0:
                    3a:6f:a5:65:ef:d3:b3:10:3d:b8:7b:6b:73:81:c0:
                    24:f3:ee:7c:da:d6:84:88:c2:b7:2e:ce:b5:5e:e2:
                    fc:40:ac:1d:e4:7a:46:9b:18:86:7e:3e:e8:ca:75:
                    9b:4c:f9:a2:a0:2c:a3:9f:b3:05:a3:7f:c9:47:05:
                    f5:08:6f:59:62:8f:9b:ef:3f:dc:54:40:9a:1e:b2:
                    58:ca:8c:25:38:d8:2b:69:ed:45:e1:cc:4f:32:90:
                    a3:b3:2a:22:69:96:c8:06:bc:1a:92:95:12:2f:43:
                    0d:ff:e9:24:7f:0e:b7:8c:a6:8f:3e:ff:31:19:a7:
                    83:51:9b:f9:0a:da:93:70:b7:f7:f7:98:08:a8:6f:
                    97:b1:23:dc:ca:ef:1f:39:dd:41:62:cf:1c:4c:e7:
                    f5:04:9d:db:09:8a:74:82:d1:88:ac:e4:35:90:0a:
                    14:6b:a2:8a:3a:bf:bf:f2:d6:99:67:5b:66:3b:8d:
                    b1:5b:0b:4d:33:7c:ec:26:11:da:d6:1f:6b:f9:0e:
                    ca:01:2f:6b:98:f6:0e:55:12:a4:18:47:f7:f8:7e:
                    3c:9f:9d:4c:f4:9c:13:04:13:b7:4a:2e:06:9d:7c:
                    34:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:4C:E0:8B:9C:65:0D:EB:9D:C6:E5:1F:99:8F:43:EA:81:9A:BC:EF
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A1D3DA9EBEBA11EB8ADC611AF8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:d5:35:87:9f:7d:4c:24:91:fa:c1:c4:6a:62:c8:88:2d:98:
         12:fd:1a:48:e2:93:d0:a3:82:50:c4:11:31:fe:a0:3a:73:e7:
         78:ed:26:d8:d0:82:50:8a:46:26:a0:63:40:c8:a2:71:6f:a7:
         24:7e:8c:d0:03:cb:a3:f4:8e:a8:c7:61:24:db:e9:71:c9:e1:
         4e:1d:27:3a:3b:c9:61:1b:94:d1:2b:c5:dc:c8:64:d6:a1:85:
         eb:af:07:b2:eb:a7:34:ac:6d:66:b0:e9:9a:ba:6a:df:ea:0f:
         ea:8c:4d:ab:89:ef:e3:0e:ed:87:ee:74:a8:38:bf:75:fa:6d:
         81:d8:32:f8:47:05:21:68:19:77:f5:d1:dd:f7:a9:22:2a:44:
         3a:91:2c:f2:62:60:0e:62:0f:f3:45:28:df:10:bb:f3:21:d3:
         18:12:4d:ce:b2:34:ff:4a:f5:f8:dc:d3:91:e2:fa:4d:70:1d:
         04:f7:d8:c4:82:2a:b0:d4:96:73:92:77:32:df:ec:a3:06:0a:
         b5:3c:91:3a:36:e1:69:b6:fe:e9:95:e1:05:15:6f:22:d9:33:
         17:57:7f:74:c9:6c:ad:16:c8:5a:4a:72:b0:fe:1d:d6:70:89:
         aa:61:99:7c:6e:fb:21:24:4e:43:4f:7c:d0:7d:35:55:79:7f:
         c0:17:3f:7e
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBhMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMTA1MjcwNzEwMzJaFw0yMjA3MjQwNzEwMzJaMBgxFjAU
BgNVBAMTDTYwYWY0NWViLTcxZWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCzcrKSH7CnhKIQAJIpv1pCMSFCc1wB/MGd/mid4DpvpWXv07MQPbh7a3OB
wCTz7nza1oSIwrcuzrVe4vxArB3kekabGIZ+PujKdZtM+aKgLKOfswWjf8lHBfUI
b1lij5vvP9xUQJoesljKjCU42Ctp7UXhzE8ykKOzKiJplsgGvBqSlRIvQw3/6SR/
DreMpo8+/zEZp4NRm/kK2pNwt/f3mAiob5exI9zK7x853UFizxxM5/UEndsJinSC
0Yis5DWQChRrooo6v7/y1plnW2Y7jbFbC00zfOwmEdrWH2v5DsoBL2uY9g5VEqQY
R/f4fjyfnUz0nBMEE7dKLgadfDTrAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUwkzg
i5xlDeudxuUfmY9D6oGavO8wHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4L0ExRDNEQTlFQkVCQTExRUI4QURDNjExQUY4QUVBMjI4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtw8gwDQYJKoZIhvcNAQELBQAD
ggEBAKrVNYeffUwkkfrBxGpiyIgtmBL9Gkjik9CjglDEETH+oDpz53jtJtjQglCK
RiagY0DIonFvpyR+jNADy6P0jqjHYSTb6XHJ4U4dJzo7yWEblNErxdzIZNahheuv
B7LrpzSsbWaw6Zq6at/qD+qMTauJ7+MO7YfudKg4v3X6bYHYMvhHBSFoGXf10d33
qSIqRDqRLPJiYA5iD/NFKN8Qu/Mh0xgSTc6yNP9K9fjc05Hi+k1wHQT32MSCKrDU
lnOSdzLf7KMGCrU8kTo24Wm2/umV4QUVbyLZMxdXf3TJbK0WyFpKcrD+HdZwiaph
mXxu+yEkTkNPfNB9NVV5f8AXP34=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:25 2023 by rpki-client on console-fra.rpki-client.org