Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D8037968735911ECB6A50EBD5A40D577.roa
File:                     D8037968735911ECB6A50EBD5A40D577.roa (raw, json)
Hash identifier:          ONu3Rty31KWynqnloS0gdb/QxhuwDitaOuGgzUrjnZs=
Subject key identifier:   86:6B:66:B0:9A:26:E2:7B:83:08:B0:C1:CB:C8:1E:BE:FB:4C:A0:51
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       115B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D8037968735911ECB6A50EBD5A40D577.roa
Signing time:             Wed 12 Jan 2022 03:43:46 +0000
ROA not before:           Wed 12 Jan 2022 03:43:42 +0000
ROA not after:            Sun 31 Jul 2022 03:43:42 +0000
asID:                     149009
IP address blocks:        156.241.251.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4443 (0x115b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 12 03:43:42 2022 GMT
            Not After : Jul 31 03:43:42 2022 GMT
        Subject: CN=61de4e71-9635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:05:13:fc:68:bf:8e:7d:fb:4b:ec:49:72:d8:
                    97:12:e3:2d:27:c0:7a:bb:c1:9e:75:08:4d:f7:20:
                    09:7d:57:e8:3d:8e:97:61:dc:d6:77:df:8e:0c:d5:
                    0a:75:50:b2:6b:87:21:60:ab:16:b6:e9:79:d6:3d:
                    4a:a5:21:7e:9b:b1:f2:83:df:ca:30:f9:0d:fd:af:
                    9f:35:d4:c5:3b:fa:e4:b8:95:bf:26:10:5e:ce:51:
                    0b:c6:e9:c2:ac:fc:85:df:be:7a:47:2e:01:56:1d:
                    db:5a:73:65:7d:58:11:5c:c1:26:97:91:fb:6e:e9:
                    c2:c5:87:11:55:96:45:79:ad:de:36:62:d5:32:b2:
                    77:f8:47:96:33:d9:d0:35:18:d1:2a:b7:ac:19:e6:
                    26:2b:57:ae:05:74:da:7a:7b:d3:92:a5:1a:b8:d2:
                    60:d8:ca:96:47:98:3a:f8:ed:a9:26:58:5d:30:b6:
                    4f:cf:c3:58:28:cc:4d:9f:57:82:b0:97:a3:df:30:
                    52:6a:d6:f0:2e:04:ef:b0:4c:28:65:67:7b:a2:f6:
                    7d:78:5b:dd:e4:00:65:b8:68:6b:f9:49:81:61:59:
                    84:87:dd:0c:6c:c3:d7:92:03:2e:4a:a2:3f:2e:34:
                    df:4e:bc:b5:9e:6b:fa:72:30:d5:68:03:d5:e7:bb:
                    0a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:6B:66:B0:9A:26:E2:7B:83:08:B0:C1:CB:C8:1E:BE:FB:4C:A0:51
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D8037968735911ECB6A50EBD5A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.241.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:b8:8b:89:d3:16:f7:d1:86:51:f3:db:b9:8e:55:43:e5:46:
         df:ad:ee:9e:26:ec:b0:0f:c9:a5:97:29:39:a3:b3:2e:56:8f:
         8b:d7:4f:b3:7f:6e:73:fd:b5:bc:82:5d:11:18:a7:2e:96:6f:
         42:9e:cf:16:8b:7d:b9:68:5e:e1:49:b6:29:c7:e7:74:65:74:
         ad:83:b1:8b:2e:bb:97:97:94:c3:00:8b:d6:f4:7a:8f:77:55:
         8a:f7:11:e0:52:75:7a:ce:71:42:52:ab:c8:2a:ca:80:40:bb:
         bf:42:33:46:82:93:ad:b2:92:3f:68:a3:28:80:f4:60:0b:6e:
         5a:69:c8:a0:bb:24:08:43:1b:4a:2c:89:97:a6:dc:7a:67:03:
         56:93:94:ca:8b:f5:1f:13:b7:d8:09:8f:3e:c6:72:6c:0a:ff:
         01:38:8b:18:65:01:b2:e4:5a:e3:a3:3e:07:e9:49:b9:d5:a8:
         8b:e2:bf:2a:91:95:e2:db:31:5b:41:e5:b5:4e:43:f7:e3:c8:
         ca:54:07:42:41:81:75:41:f3:59:30:21:b1:04:e8:17:ab:80:
         99:79:82:1f:10:d3:1a:c6:b3:58:4f:28:33:49:b1:6f:9d:da:
         10:dd:8e:19:0d:63:dc:60:8d:97:d9:db:ca:a2:89:b7:ee:71:
         8c:86:79:6a
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICEVswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMjAxMTIwMzQzNDJaFw0yMjA3MzEwMzQzNDJaMBgxFjAU
BgNVBAMMDTYxZGU0ZTcxLTk2MzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCkBRP8aL+OfftL7Ely2JcS4y0nwHq7wZ51CE33IAl9V+g9jpdh3NZ3344M
1Qp1ULJrhyFgqxa26XnWPUqlIX6bsfKD38ow+Q39r5811MU7+uS4lb8mEF7OUQvG
6cKs/IXfvnpHLgFWHdtac2V9WBFcwSaXkftu6cLFhxFVlkV5rd42YtUysnf4R5Yz
2dA1GNEqt6wZ5iYrV64FdNp6e9OSpRq40mDYypZHmDr47akmWF0wtk/Pw1gozE2f
V4Kwl6PfMFJq1vAuBO+wTChlZ3ui9n14W93kAGW4aGv5SYFhWYSH3Qxsw9eSAy5K
oj8uNN9OvLWea/pyMNVoA9XnuwpzAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUhmtm
sJom4nuDCLDBy8gevvtMoFEwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4L0Q4MDM3OTY4NzM1OTExRUNCNkE1MEVCRDVBNDBENTc3LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACc8fswDQYJKoZIhvcNAQELBQAD
ggEBAA24i4nTFvfRhlHz27mOVUPlRt+t7p4m7LAPyaWXKTmjsy5Wj4vXT7N/bnP9
tbyCXREYpy6Wb0KezxaLfbloXuFJtinH53RldK2DsYsuu5eXlMMAi9b0eo93VYr3
EeBSdXrOcUJSq8gqyoBAu79CM0aCk62ykj9ooyiA9GALblppyKC7JAhDG0osiZem
3HpnA1aTlMqL9R8Tt9gJjz7GcmwK/wE4ixhlAbLkWuOjPgfpSbnVqIvivyqRleLb
MVtB5bVOQ/fjyMpUB0JBgXVB81kwIbEE6BergJl5gh8Q0xrGs1hPKDNJsW+d2hDd
jhkNY9xgjZfZ28qiibfucYyGeWo=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:28 2023 by rpki-client on console-ams.rpki-client.org