Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B1676A1436DF11ECB688CB6BD8A014CE.roa
File:                     B1676A1436DF11ECB688CB6BD8A014CE.roa (raw, json)
Hash identifier:          tKum6BriVdEZapJfHZBSgJ2Pj44UhIKfEk8kUFMVt2w=
Subject key identifier:   4E:0B:AF:35:F0:1E:45:B6:97:9E:23:3E:02:B4:92:29:22:E6:1E:A8
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0B83
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B1676A1436DF11ECB688CB6BD8A014CE.roa
Signing time:             Wed 27 Oct 2021 04:38:12 +0000
ROA not before:           Wed 27 Oct 2021 04:38:09 +0000
ROA not after:            Thu 27 Oct 2022 04:38:09 +0000
asID:                     58895
IP address blocks:        45.206.110.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2947 (0xb83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 27 04:38:09 2021 GMT
            Not After : Oct 27 04:38:09 2022 GMT
        Subject: CN=6178d7b4-f385
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:60:9e:2c:f6:c2:6a:53:3d:c4:64:d7:c9:0d:
                    ff:c0:5e:83:ae:d7:6f:f9:82:35:9c:78:c4:4d:1d:
                    51:a6:3f:dc:7e:31:4d:07:70:6b:cf:10:41:c0:07:
                    85:37:6a:d1:43:a2:ba:b9:47:1a:e9:71:b5:a3:18:
                    b1:d7:ce:f1:c2:cd:98:c7:dc:95:7b:82:4e:e3:ff:
                    aa:03:65:b7:e9:bb:7d:70:d1:e2:30:13:81:5d:ce:
                    d6:c8:ad:36:b0:22:08:5e:0b:5c:22:5c:34:74:7c:
                    f5:aa:10:fb:69:96:10:3d:64:99:08:bc:6b:f3:f7:
                    5b:53:a4:ab:c3:c1:0d:b1:20:bb:01:49:13:4f:38:
                    c9:e0:89:eb:7b:0b:2a:68:6f:bf:1e:7e:38:43:30:
                    46:a2:60:0b:41:7e:07:30:30:07:05:0c:02:39:c4:
                    84:a2:93:c5:5d:00:ef:55:1d:3a:d0:d0:3f:b9:87:
                    d5:b1:ce:11:f8:30:60:be:bf:7b:e9:f4:b3:73:f2:
                    5e:26:74:0b:e0:97:40:3d:5b:4c:b0:a6:e9:db:14:
                    50:95:fc:73:ee:bc:d6:e0:5b:ef:41:8e:0d:cb:84:
                    1f:85:59:d3:b8:f0:94:a1:39:73:a5:32:14:74:07:
                    89:c0:b9:93:18:5d:6e:89:c6:39:d8:e0:04:ee:1d:
                    db:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:0B:AF:35:F0:1E:45:B6:97:9E:23:3E:02:B4:92:29:22:E6:1E:A8
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B1676A1436DF11ECB688CB6BD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.206.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:74:09:34:f2:57:f5:60:99:e4:10:da:62:2d:e2:eb:57:9e:
         77:e6:ee:10:af:ac:d8:1f:f3:67:ba:30:47:ea:4c:3e:4d:aa:
         0b:e9:aa:d8:c0:50:e3:59:bb:6d:53:af:f1:d1:90:17:c1:b3:
         c8:81:65:67:7b:70:2a:f7:cd:b1:ce:15:3a:87:3b:5a:b4:6a:
         a3:8b:83:7e:cb:f3:8b:c3:1a:77:aa:f1:36:cc:8b:5a:b8:47:
         53:1c:77:31:c6:0c:1c:de:d6:2d:43:02:d5:60:06:43:bb:aa:
         ca:1a:de:03:aa:4c:9a:93:87:75:f3:c8:bc:f5:6a:58:fb:de:
         c9:b1:8e:75:7d:d1:78:17:fb:a6:1b:85:e6:7c:d2:14:ff:48:
         88:07:c2:88:c1:5c:9e:e8:06:de:c2:d6:c1:d6:ad:bc:b0:b5:
         33:37:b1:f1:cb:11:c4:aa:be:bd:a8:23:39:3c:47:6f:2c:06:
         5a:68:a1:12:f3:89:18:0d:8f:02:12:2b:21:06:4a:89:43:58:
         e9:c9:fc:9e:cc:60:81:3a:f8:7c:1c:cd:cd:95:2d:9e:bf:6a:
         e9:2f:78:c6:28:9f:77:60:08:12:40:3e:46:b8:ab:57:d3:56:
         ff:9c:bb:68:51:28:16:a9:e2:11:06:56:6a:72:da:a7:20:ca:
         2a:a9:15:33
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICC4MwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMTEwMjcwNDM4MDlaFw0yMjEwMjcwNDM4MDlaMBgxFjAU
BgNVBAMMDTYxNzhkN2I0LWYzODUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDZYJ4s9sJqUz3EZNfJDf/AXoOu12/5gjWceMRNHVGmP9x+MU0HcGvPEEHA
B4U3atFDorq5RxrpcbWjGLHXzvHCzZjH3JV7gk7j/6oDZbfpu31w0eIwE4FdztbI
rTawIgheC1wiXDR0fPWqEPtplhA9ZJkIvGvz91tTpKvDwQ2xILsBSRNPOMngiet7
Cypob78efjhDMEaiYAtBfgcwMAcFDAI5xISik8VdAO9VHTrQ0D+5h9WxzhH4MGC+
v3vp9LNz8l4mdAvgl0A9W0ywpunbFFCV/HPuvNbgW+9Bjg3LhB+FWdO48JShOXOl
MhR0B4nAuZMYXW6JxjnY4ATuHdsjAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUTguv
NfAeRbaXniM+ArSSKSLmHqgwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4L0IxNjc2QTE0MzZERjExRUNCNjg4Q0I2QkQ4QTAxNENFLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtzm4wDQYJKoZIhvcNAQELBQAD
ggEBAKR0CTTyV/VgmeQQ2mIt4utXnnfm7hCvrNgf82e6MEfqTD5NqgvpqtjAUONZ
u21Tr/HRkBfBs8iBZWd7cCr3zbHOFTqHO1q0aqOLg37L84vDGneq8TbMi1q4R1Mc
dzHGDBze1i1DAtVgBkO7qsoa3gOqTJqTh3XzyLz1alj73smxjnV90XgX+6YbheZ8
0hT/SIgHwojBXJ7oBt7C1sHWrbywtTM3sfHLEcSqvr2oIzk8R28sBlpooRLziRgN
jwISKyEGSolDWOnJ/J7MYIE6+Hwczc2VLZ6/aukveMYon3dgCBJAPka4q1fTVv+c
u2hRKBap4hEGVmpy2qcgyiqpFTM=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:25 2023 by rpki-client on console-fra.rpki-client.org