Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DC863D9EDCEB11EC9F524FE3F1222468.roa
File:                     DC863D9EDCEB11EC9F524FE3F1222468.roa (raw, json)
Hash identifier:          gwxLH70oTRtNHcCSzjMrffElotXGNsEpRn4zXE5ZknY=
Subject key identifier:   57:C6:3E:34:15:54:15:1A:70:13:4B:11:6D:3E:D3:6C:4A:2B:29:EB
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       1414
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DC863D9EDCEB11EC9F524FE3F1222468.roa
Signing time:             Thu 26 May 2022 12:03:32 +0000
ROA not before:           Thu 26 May 2022 12:03:29 +0000
ROA not after:            Thu 30 Jun 2022 12:03:29 +0000
asID:                     328608
IP address blocks:        45.192.160.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5140 (0x1414)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: May 26 12:03:29 2022 GMT
            Not After : Jun 30 12:03:29 2022 GMT
        Subject: CN=628f6c94-67c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:9d:84:51:38:8f:04:6c:29:10:1b:2c:28:64:
                    9f:69:57:f5:a7:d2:46:7c:cf:04:77:5c:9f:97:e7:
                    2f:a9:70:a0:61:24:5d:76:56:d0:58:fe:6a:97:2e:
                    7c:e9:de:81:fb:3a:64:db:3e:b9:c4:13:a0:d3:87:
                    e5:a2:20:b1:77:72:4a:ca:75:10:60:e9:f7:8d:73:
                    6c:33:7a:ef:05:b0:30:43:b0:0a:62:34:c6:5e:8a:
                    30:5d:ef:ec:7b:8c:6f:d7:2b:b5:ad:92:c4:f0:5d:
                    6a:94:88:e9:cb:29:b4:b2:0f:a4:bc:6a:2c:b0:21:
                    71:de:d7:5c:1e:83:7f:0a:d3:55:50:4b:a1:13:c2:
                    ba:d6:f5:89:c1:e1:84:8a:a5:3f:7c:bc:e2:57:99:
                    bd:24:6a:dc:0f:a2:f8:be:8d:5f:b9:d9:75:48:e2:
                    28:7d:cf:f6:ef:87:53:af:62:77:f9:23:bf:45:e2:
                    a8:f0:63:2f:ab:f8:fd:68:14:64:50:10:5f:74:60:
                    10:9e:b9:4c:b3:c0:64:ec:9c:c1:c0:88:61:8c:7b:
                    ee:51:6c:3e:d6:37:75:57:33:41:bd:20:3c:0a:27:
                    84:ae:63:01:ce:2c:3c:b4:d3:e7:aa:8a:e5:a7:76:
                    4e:0b:fb:46:88:ed:e7:fd:b9:7d:e7:6a:2a:e8:95:
                    10:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:C6:3E:34:15:54:15:1A:70:13:4B:11:6D:3E:D3:6C:4A:2B:29:EB
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DC863D9EDCEB11EC9F524FE3F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0b:bc:56:49:34:51:b1:34:15:38:a3:f5:a5:18:af:ae:26:16:
         0f:9c:04:61:31:73:cd:0d:7c:f6:99:27:62:7b:9c:fa:71:3f:
         82:78:d2:34:a9:cd:87:f0:f5:de:10:27:78:05:62:6d:53:75:
         a3:3b:15:34:32:47:29:45:e0:e3:81:fb:59:c6:1e:ea:8d:91:
         65:96:c8:d0:b2:9c:2d:c1:44:b3:2e:28:82:15:5f:be:31:39:
         c8:39:78:56:33:82:e4:95:e3:63:e3:ed:0f:75:10:3e:5d:70:
         87:b3:e9:71:0d:b4:7d:dc:fe:10:15:84:0d:9b:16:88:a1:f1:
         55:cf:4e:68:b5:2f:8a:b2:3e:49:ca:ac:fb:2b:15:aa:c3:de:
         af:c3:4b:57:1d:bc:47:74:1c:68:2b:b7:c3:08:55:23:27:1b:
         02:19:18:20:27:88:6d:d0:ac:ff:b6:cb:69:c1:5e:7e:28:86:
         7c:fe:d9:8a:d3:52:68:28:33:83:18:f3:85:57:1d:36:c6:ca:
         ed:69:55:ef:2f:24:86:f9:45:a1:da:a0:fa:c6:9c:2b:79:68:
         54:f5:d0:a3:e3:57:a1:d7:32:77:85:30:b4:55:62:d9:83:0b:
         c5:e2:05:09:0d:4e:01:97:45:1f:98:69:2e:a1:e7:b4:36:c1:
         9f:9d:8b:73
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICFBQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMjA1MjYxMjAzMjlaFw0yMjA2MzAxMjAzMjlaMBgxFjAU
BgNVBAMMDTYyOGY2Yzk0LTY3YzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDbnYRROI8EbCkQGywoZJ9pV/Wn0kZ8zwR3XJ+X5y+pcKBhJF12VtBY/mqX
Lnzp3oH7OmTbPrnEE6DTh+WiILF3ckrKdRBg6feNc2wzeu8FsDBDsApiNMZeijBd
7+x7jG/XK7WtksTwXWqUiOnLKbSyD6S8aiywIXHe11weg38K01VQS6ETwrrW9YnB
4YSKpT98vOJXmb0katwPovi+jV+52XVI4ih9z/bvh1OvYnf5I79F4qjwYy+r+P1o
FGRQEF90YBCeuUyzwGTsnMHAiGGMe+5RbD7WN3VXM0G9IDwKJ4SuYwHOLDy00+eq
iuWndk4L+0aI7ef9uX3nairolRD5AgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUV8Y+
NBVUFRpwE0sRbT7TbEorKeswHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4L0RDODYzRDlFRENFQjExRUM5RjUyNEZFM0YxMjIyNDY4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQtwKAwDQYJKoZIhvcNAQELBQAD
ggEBAAu8Vkk0UbE0FTij9aUYr64mFg+cBGExc80NfPaZJ2J7nPpxP4J40jSpzYfw
9d4QJ3gFYm1TdaM7FTQyRylF4OOB+1nGHuqNkWWWyNCynC3BRLMuKIIVX74xOcg5
eFYzguSV42Pj7Q91ED5dcIez6XENtH3c/hAVhA2bFoih8VXPTmi1L4qyPknKrPsr
FarD3q/DS1cdvEd0HGgrt8MIVSMnGwIZGCAniG3QrP+2y2nBXn4ohnz+2YrTUmgo
M4MY84VXHTbGyu1pVe8vJIb5RaHaoPrGnCt5aFT10KPjV6HXMneFMLRVYtmDC8Xi
BQkNTgGXRR+YaS6h57Q2wZ+di3M=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:30 2023 by rpki-client on console-fra.rpki-client.org