Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C7E3E0E457D011EC983838B85A40D577.roa
File:                     C7E3E0E457D011EC983838B85A40D577.roa (raw, json)
Hash identifier:          dczERlZ+hIRB8kTsnGUNDCK7SLONmrkzZchm8HtpewA=
Subject key identifier:   2A:AC:73:67:C9:D5:A0:E9:F6:30:59:C6:60:13:9D:68:D0:CE:45:98
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       108E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C7E3E0E457D011EC983838B85A40D577.roa
Signing time:             Wed 08 Dec 2021 02:44:36 +0000
ROA not before:           Wed 08 Dec 2021 02:44:33 +0000
ROA not after:            Fri 30 Dec 2022 02:44:33 +0000
asID:                     9009
IP address blocks:        156.238.5.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4238 (0x108e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec  8 02:44:33 2021 GMT
            Not After : Dec 30 02:44:33 2022 GMT
        Subject: CN=61b01c14-160e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3a:a3:6c:1e:a9:00:c5:d5:70:b5:47:cf:42:
                    7d:92:e3:88:34:8f:c1:b7:37:dd:36:df:e7:20:f8:
                    0c:a4:89:2c:8a:52:a8:d4:22:25:21:c1:8d:15:f4:
                    31:88:ca:02:f8:0f:5f:55:07:a5:1a:a5:cb:28:54:
                    c8:d3:2f:b4:cd:80:4f:39:2b:9a:d8:81:6f:3d:2e:
                    5d:e7:05:39:17:bd:e8:aa:47:8e:d9:5f:58:d7:7f:
                    f0:fa:09:bf:46:9c:9b:40:38:27:b2:73:a8:bb:c6:
                    4c:c3:45:04:ff:61:fd:cb:a3:b3:56:66:7e:81:44:
                    5d:2b:92:18:88:70:60:5a:f8:02:c0:02:ff:17:a2:
                    60:4c:38:57:46:01:26:dc:f6:2d:24:26:4e:2b:a3:
                    e4:f6:f1:09:75:88:93:57:a9:bb:cb:33:15:d6:17:
                    84:00:50:49:e9:6a:84:d1:20:81:03:ed:f9:25:76:
                    fd:83:2c:0c:c8:c6:2a:06:de:1a:c0:8b:fb:77:76:
                    2f:52:ee:0f:77:fe:17:6b:18:32:48:d6:eb:17:9d:
                    1d:1f:fe:51:e1:e3:5e:80:4b:4e:f0:37:16:52:ca:
                    45:e8:26:4e:0d:ba:a8:50:6c:ab:6a:40:01:49:fe:
                    1e:50:06:ff:e2:1b:77:bf:df:1f:96:5d:16:f1:76:
                    e6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:AC:73:67:C9:D5:A0:E9:F6:30:59:C6:60:13:9D:68:D0:CE:45:98
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C7E3E0E457D011EC983838B85A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.238.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:d2:f7:59:1b:8e:5f:2f:2d:ad:c7:83:88:68:f4:06:72:ff:
         24:bc:1d:b6:50:0d:7b:15:f4:9c:1d:83:7d:ae:bc:99:3f:06:
         70:b4:b0:a7:2c:a7:cc:e5:a8:4a:ca:ad:ce:0f:71:60:8f:fd:
         82:9e:b3:39:55:83:f3:3a:06:96:4c:61:cb:17:0a:da:39:f0:
         1b:10:27:69:7a:f2:c2:82:7c:57:50:44:be:d7:a8:da:d8:ea:
         b3:1f:22:6c:d7:7f:2b:80:c7:9b:ba:ea:b1:1f:83:16:45:8d:
         3a:74:9b:87:96:c9:b5:a0:9e:b4:b8:ae:bc:90:3b:fd:0e:aa:
         a6:e0:fb:0e:a1:1a:82:88:20:6d:18:ac:7f:8b:09:0e:4e:94:
         0b:b3:3b:fe:92:79:62:b7:f8:de:3b:cd:4b:14:e4:58:43:fe:
         cc:e0:9f:59:2d:12:ce:ab:0d:40:c9:39:76:4f:84:72:8a:c6:
         89:9a:fc:95:1e:7c:5f:a4:5a:4a:f9:74:3f:97:02:a6:eb:26:
         5d:92:3f:5a:de:46:5c:84:9f:1b:fd:e4:fa:40:c5:39:7b:3b:
         dd:a9:94:17:fd:4d:3c:e8:b2:b7:0f:6f:c9:65:bd:68:4a:c3:
         37:7f:c1:8a:96:f9:e9:6f:f3:7e:e8:82:64:ef:29:83:ac:3c:
         8a:f4:f0:e2
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICEI4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMTEyMDgwMjQ0MzNaFw0yMjEyMzAwMjQ0MzNaMBgxFjAU
BgNVBAMMDTYxYjAxYzE0LTE2MGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC+OqNsHqkAxdVwtUfPQn2S44g0j8G3N9023+cg+AykiSyKUqjUIiUhwY0V
9DGIygL4D19VB6UapcsoVMjTL7TNgE85K5rYgW89Ll3nBTkXveiqR47ZX1jXf/D6
Cb9GnJtAOCeyc6i7xkzDRQT/Yf3Lo7NWZn6BRF0rkhiIcGBa+ALAAv8XomBMOFdG
ASbc9i0kJk4ro+T28Ql1iJNXqbvLMxXWF4QAUEnpaoTRIIED7fkldv2DLAzIxioG
3hrAi/t3di9S7g93/hdrGDJI1usXnR0f/lHh416AS07wNxZSykXoJk4NuqhQbKtq
QAFJ/h5QBv/iG3e/3x+WXRbxdua5AgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUKqxz
Z8nVoOn2MFnGYBOdaNDORZgwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4L0M3RTNFMEU0NTdEMDExRUM5ODM4MzhCODVBNDBENTc3LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACc7gUwDQYJKoZIhvcNAQELBQAD
ggEBABzS91kbjl8vLa3Hg4ho9AZy/yS8HbZQDXsV9Jwdg32uvJk/BnC0sKcsp8zl
qErKrc4PcWCP/YKeszlVg/M6BpZMYcsXCto58BsQJ2l68sKCfFdQRL7XqNrY6rMf
ImzXfyuAx5u66rEfgxZFjTp0m4eWybWgnrS4rryQO/0Oqqbg+w6hGoKIIG0YrH+L
CQ5OlAuzO/6SeWK3+N47zUsU5FhD/szgn1ktEs6rDUDJOXZPhHKKxoma/JUefF+k
Wkr5dD+XAqbrJl2SP1reRlyEnxv95PpAxTl7O92plBf9TTzosrcPb8llvWhKwzd/
wYqW+elv837ogmTvKYOsPIr08OI=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:27 2023 by rpki-client on console-ams.rpki-client.org