Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B4523AB836CD11EC9936894CD8A014CE.roa
File:                     B4523AB836CD11EC9936894CD8A014CE.roa (raw, json)
Hash identifier:          c4bAu3GYRbhvThKjikVbl7xweGzq/ilfiGEtaJAUoQM=
Subject key identifier:   1F:C7:96:36:EB:99:B4:53:74:12:86:A4:0B:07:B8:A1:05:35:0E:69
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0A96
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B4523AB836CD11EC9936894CD8A014CE.roa
Signing time:             Wed 27 Oct 2021 02:29:27 +0000
ROA not before:           Wed 27 Oct 2021 02:29:23 +0000
ROA not after:            Thu 27 Oct 2022 02:29:23 +0000
asID:                     58895
IP address blocks:        45.206.206.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2710 (0xa96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 27 02:29:23 2021 GMT
            Not After : Oct 27 02:29:23 2022 GMT
        Subject: CN=6178b986-576b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9d:45:3c:03:7b:f3:68:39:a4:13:2b:c0:6e:
                    69:88:07:0c:44:88:ef:a5:13:91:45:54:98:cd:1e:
                    0f:3f:4f:4a:e9:55:3f:c4:f3:09:b4:9b:35:b6:b4:
                    5e:e7:e5:da:10:32:a7:ed:a0:40:54:3f:76:cc:b8:
                    3b:e1:3d:bc:91:70:6f:94:08:e8:64:d4:2f:95:18:
                    ed:27:e3:f4:77:57:85:58:2a:69:22:1d:6c:c9:76:
                    e6:f7:45:4a:f3:9a:78:dd:b0:82:95:ef:c0:ea:f9:
                    79:8e:3c:0b:a8:2f:4b:31:be:07:ef:0e:53:c4:84:
                    88:7d:9b:23:28:a6:92:45:59:f4:2f:2f:43:94:ff:
                    98:9c:e5:a4:09:22:ee:a4:c3:65:d9:8b:65:b0:ed:
                    b4:c8:2b:51:0c:10:b3:6b:4e:9c:ae:a3:af:4b:46:
                    5e:54:80:0f:83:ee:b9:80:96:70:0e:27:bc:48:e1:
                    12:fd:38:6e:63:1d:f9:c0:41:43:5d:94:a1:81:40:
                    9d:de:a9:19:76:78:5a:d4:5c:7b:10:ca:ca:40:7a:
                    bc:0f:6e:26:b9:ea:41:92:70:a2:b3:15:2e:db:5b:
                    ab:de:43:17:49:be:f9:57:29:51:d8:3b:b8:ae:6f:
                    4f:9f:32:f5:45:f1:94:cd:c0:ae:9c:79:20:75:06:
                    01:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:C7:96:36:EB:99:B4:53:74:12:86:A4:0B:07:B8:A1:05:35:0E:69
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B4523AB836CD11EC9936894CD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.206.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:80:2b:ae:9a:ba:7c:b2:43:ea:46:c1:85:67:a8:17:6d:e5:
         d2:72:26:f3:59:1f:40:1b:01:20:d8:47:ba:c9:3e:1a:2b:95:
         06:8d:67:04:51:98:7c:d1:d5:36:e6:21:e7:01:30:9b:37:bc:
         61:52:ad:69:0e:89:11:36:88:c9:8e:5b:30:96:be:aa:83:bf:
         3e:bb:64:e2:cf:75:80:ef:6a:f1:48:f8:bc:c9:5d:ff:7a:3d:
         09:58:58:e1:65:f9:a1:4a:0a:59:5f:2b:8d:08:97:2e:77:72:
         4e:0e:98:f0:7c:c3:78:01:0f:7e:2b:d4:6e:2e:86:ed:64:bb:
         65:a1:8d:79:16:52:14:47:65:4c:c6:b4:17:26:80:07:be:0f:
         70:cb:e2:48:10:5f:b5:80:d2:57:f5:39:78:c0:af:70:b2:d3:
         26:14:37:36:ab:b3:40:00:b0:04:33:52:06:2e:4a:c4:19:8e:
         1c:f3:48:b3:a1:f0:1f:44:cd:c7:b3:03:13:4a:bc:34:d3:c2:
         fc:7e:a2:6d:8f:9f:28:62:b5:3b:fa:e1:7c:ee:44:8d:f6:36:
         75:bf:16:36:c6:4a:9d:33:9b:2f:3d:ff:54:e9:b8:23:c2:cf:
         18:34:a5:43:d7:3c:5b:73:2a:79:d7:71:c9:16:a0:ce:de:d7:
         1c:c2:40:98
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICCpYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMTEwMjcwMjI5MjNaFw0yMjEwMjcwMjI5MjNaMBgxFjAU
BgNVBAMMDTYxNzhiOTg2LTU3NmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCfnUU8A3vzaDmkEyvAbmmIBwxEiO+lE5FFVJjNHg8/T0rpVT/E8wm0mzW2
tF7n5doQMqftoEBUP3bMuDvhPbyRcG+UCOhk1C+VGO0n4/R3V4VYKmkiHWzJdub3
RUrzmnjdsIKV78Dq+XmOPAuoL0sxvgfvDlPEhIh9myMoppJFWfQvL0OU/5ic5aQJ
Iu6kw2XZi2Ww7bTIK1EMELNrTpyuo69LRl5UgA+D7rmAlnAOJ7xI4RL9OG5jHfnA
QUNdlKGBQJ3eqRl2eFrUXHsQyspAerwPbia56kGScKKzFS7bW6veQxdJvvlXKVHY
O7iub0+fMvVF8ZTNwK6ceSB1BgHTAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUH8eW
NuuZtFN0EoakCwe4oQU1DmkwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4L0I0NTIzQUI4MzZDRDExRUM5OTM2ODk0Q0Q4QTAxNENFLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtzs4wDQYJKoZIhvcNAQELBQAD
ggEBABWAK66aunyyQ+pGwYVnqBdt5dJyJvNZH0AbASDYR7rJPhorlQaNZwRRmHzR
1TbmIecBMJs3vGFSrWkOiRE2iMmOWzCWvqqDvz67ZOLPdYDvavFI+LzJXf96PQlY
WOFl+aFKCllfK40Ily53ck4OmPB8w3gBD34r1G4uhu1ku2WhjXkWUhRHZUzGtBcm
gAe+D3DL4kgQX7WA0lf1OXjAr3Cy0yYUNzars0AAsAQzUgYuSsQZjhzzSLOh8B9E
zcezAxNKvDTTwvx+om2PnyhitTv64XzuRI32NnW/FjbGSp0zmy89/1TpuCPCzxg0
pUPXPFtzKnnXcckWoM7e1xzCQJg=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:26 2023 by rpki-client on console-fra.rpki-client.org