Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B310E8E2DC0A11EC8093DBA0F1222468.roa
File:                     B310E8E2DC0A11EC8093DBA0F1222468.roa (raw, json)
Hash identifier:          1zkuPOYKmCkQHhDZdNFdIMsni5rguayYvoXTQ910HMM=
Subject key identifier:   48:1C:94:FA:23:C3:BD:D3:57:D7:D4:E4:50:9A:BA:C4:8E:94:2E:AF
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       140F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B310E8E2DC0A11EC8093DBA0F1222468.roa
Signing time:             Wed 25 May 2022 09:11:45 +0000
ROA not before:           Wed 25 May 2022 09:11:42 +0000
ROA not after:            Fri 30 Jun 2023 09:11:42 +0000
asID:                     132698
IP address blocks:        45.207.27.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5135 (0x140f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: May 25 09:11:42 2022 GMT
            Not After : Jun 30 09:11:42 2023 GMT
        Subject: CN=628df2d1-7b8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:28:06:fc:69:a9:ab:9e:8d:62:2e:36:e5:fc:
                    db:fb:f7:5d:9d:18:8e:58:0e:c4:ff:55:f5:6b:31:
                    d6:de:dd:23:68:c2:40:44:7e:3c:a5:5d:49:08:1f:
                    ea:61:f4:ab:e8:1b:88:18:85:d2:25:5f:36:29:77:
                    5b:60:f0:73:dc:8f:8f:56:4a:8b:28:2e:cb:a9:34:
                    35:8d:f1:7a:d3:eb:50:4b:4b:12:a7:e4:f6:11:cb:
                    c0:a8:8e:70:6b:2e:e3:83:a7:07:77:47:d7:27:6d:
                    8a:f6:0d:05:0e:7a:46:a4:0b:2f:b2:71:60:6f:d7:
                    79:71:f5:93:d4:8e:4c:98:ff:ff:23:02:68:85:13:
                    51:72:3b:56:17:bd:d5:b0:6c:dc:35:d2:20:24:26:
                    57:74:af:25:a7:f1:89:1c:48:b5:17:f5:a7:d8:40:
                    81:25:26:4c:95:32:72:1c:13:67:7a:9e:6b:a0:4f:
                    d0:58:9f:97:7e:62:e5:40:44:51:bf:03:9a:bd:c1:
                    b9:f5:c6:97:af:62:b2:42:24:39:4e:0b:48:d4:2a:
                    a5:18:d6:70:eb:34:3f:5a:05:ba:cd:1d:a9:17:38:
                    7d:58:9e:67:72:01:6f:53:b5:1c:8c:76:fc:37:f8:
                    40:4a:11:3b:80:47:1b:2f:06:a1:15:2a:dc:cc:19:
                    08:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:1C:94:FA:23:C3:BD:D3:57:D7:D4:E4:50:9A:BA:C4:8E:94:2E:AF
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B310E8E2DC0A11EC8093DBA0F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.207.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:77:b6:f1:8d:43:e9:33:3f:30:13:c8:5a:5d:f7:b4:2f:f7:
         db:b8:a0:fe:23:a4:dd:0b:40:28:09:ac:fe:bd:6a:36:40:21:
         ad:38:0f:11:f5:4f:d8:ec:a7:a9:7b:47:a4:b8:64:7e:e7:28:
         32:4a:e0:b0:11:f5:6c:84:68:b7:21:99:ec:7d:f7:d6:3c:32:
         fd:ed:35:13:ec:78:54:7a:e1:e9:03:ae:63:c4:56:ef:2c:eb:
         e9:e7:ec:93:e5:71:d2:58:28:e9:3c:6f:35:d9:b3:5c:65:d9:
         6d:9e:c9:3b:05:13:b1:8c:fb:00:7e:47:45:54:49:55:17:cf:
         51:9f:5f:c4:48:0a:42:df:c9:e3:40:a7:16:5b:60:80:db:43:
         8e:9c:b8:5a:ca:65:da:d9:e5:f8:29:a4:e1:6f:9e:cd:f5:bd:
         90:c8:87:e3:18:eb:8d:68:be:de:7c:2d:80:65:bd:85:9c:d9:
         ac:20:b5:62:0e:bf:e6:fb:17:38:ed:0d:4d:39:f5:2e:01:42:
         db:8d:3c:0f:75:08:2d:31:e0:a2:24:4d:49:d6:98:7f:e5:73:
         3a:01:11:d8:e8:e1:b1:1b:e5:dc:a1:75:17:97:a8:c7:bb:dc:
         a7:08:57:9c:95:c6:a4:ee:82:3b:0e:60:6d:79:c1:98:e4:72:
         50:62:d3:5e
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICFA8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMjA1MjUwOTExNDJaFw0yMzA2MzAwOTExNDJaMBgxFjAU
BgNVBAMMDTYyOGRmMmQxLTdiOGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQChKAb8aamrno1iLjbl/Nv7912dGI5YDsT/VfVrMdbe3SNowkBEfjylXUkI
H+ph9KvoG4gYhdIlXzYpd1tg8HPcj49WSosoLsupNDWN8XrT61BLSxKn5PYRy8Co
jnBrLuODpwd3R9cnbYr2DQUOekakCy+ycWBv13lx9ZPUjkyY//8jAmiFE1FyO1YX
vdWwbNw10iAkJld0ryWn8YkcSLUX9afYQIElJkyVMnIcE2d6nmugT9BYn5d+YuVA
RFG/A5q9wbn1xpevYrJCJDlOC0jUKqUY1nDrND9aBbrNHakXOH1YnmdyAW9TtRyM
dvw3+EBKETuARxsvBqEVKtzMGQhpAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUSByU
+iPDvdNX19TkUJq6xI6ULq8wHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4L0IzMTBFOEUyREMwQTExRUM4MDkzREJBMEYxMjIyNDY4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtzxswDQYJKoZIhvcNAQELBQAD
ggEBAHt3tvGNQ+kzPzATyFpd97Qv99u4oP4jpN0LQCgJrP69ajZAIa04DxH1T9js
p6l7R6S4ZH7nKDJK4LAR9WyEaLchmex999Y8Mv3tNRPseFR64ekDrmPEVu8s6+nn
7JPlcdJYKOk8bzXZs1xl2W2eyTsFE7GM+wB+R0VUSVUXz1GfX8RICkLfyeNApxZb
YIDbQ46cuFrKZdrZ5fgppOFvns31vZDIh+MY641ovt58LYBlvYWc2awgtWIOv+b7
FzjtDU059S4BQtuNPA91CC0x4KIkTUnWmH/lczoBEdjo4bEb5dyhdReXqMe73KcI
V5yVxqTugjsOYG15wZjkclBi014=
-----END CERTIFICATE-----