Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E5ACF1CE488511ECAC2ABB35D8A014CE.roa
File:                     E5ACF1CE488511ECAC2ABB35D8A014CE.roa (raw, json)
Hash identifier:          eBKls0KIFJZPE8Vc/w2VdCdB5o2uZDISMBpZlVD6xaI=
Subject key identifier:   82:B2:4B:52:C6:90:AB:AD:F7:89:DF:4B:48:E7:11:4E:3C:3F:C2:66
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0D44
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E5ACF1CE488511ECAC2ABB35D8A014CE.roa
Signing time:             Thu 18 Nov 2021 15:40:46 +0000
ROA not before:           Fri 19 Nov 2021 15:40:43 +0000
ROA not after:            Sat 19 Nov 2022 15:40:43 +0000
asID:                     139879
IP address blocks:        156.231.156.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3396 (0xd44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 19 15:40:43 2021 GMT
            Not After : Nov 19 15:40:43 2022 GMT
        Subject: CN=619673fe-f185
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2f:d9:7f:2d:f0:e0:f4:e0:53:10:5d:10:65:
                    8b:a8:77:a8:37:d5:c9:a9:d6:0f:e0:ed:11:d2:44:
                    a4:0c:51:4b:f3:36:1b:2d:1b:54:31:07:12:86:c9:
                    13:8e:16:3e:36:30:9f:54:39:e6:88:42:f6:68:99:
                    84:dd:b2:0f:ca:f6:bc:4f:4a:43:19:1c:dc:3d:8f:
                    ab:07:c2:a9:34:bb:c6:c8:61:76:3f:3e:45:1e:0f:
                    e1:7c:45:6e:69:56:2d:75:7d:3f:c0:79:d3:b0:d8:
                    90:fc:40:a7:a2:59:3f:51:05:ca:c5:50:33:e8:19:
                    6a:c9:2b:5a:84:97:ef:f3:fd:6f:ec:c6:31:44:8f:
                    14:0b:e7:7c:fe:e2:8e:f6:6b:fb:b4:5c:be:0a:07:
                    24:2f:08:ad:36:5d:f7:d9:5b:03:d8:eb:3c:73:5e:
                    06:eb:81:66:b5:90:4b:03:27:0b:8f:fe:c3:03:ab:
                    de:88:b5:9f:91:6d:58:2e:c6:d4:cb:53:a5:ca:c5:
                    0c:e7:80:a3:62:35:10:a9:5c:2f:35:02:ea:3d:0c:
                    70:08:19:bd:82:66:3d:22:0f:fd:28:a7:27:44:74:
                    65:db:8d:d1:1e:99:a1:00:73:d3:b3:99:26:cf:df:
                    68:52:22:36:8e:b4:4a:8b:9f:06:5a:8b:7b:be:4f:
                    6a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:B2:4B:52:C6:90:AB:AD:F7:89:DF:4B:48:E7:11:4E:3C:3F:C2:66
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E5ACF1CE488511ECAC2ABB35D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.231.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:5e:62:29:f5:09:8f:5e:88:82:0b:6c:f5:3c:f6:07:33:93:
         43:38:01:39:7d:d2:20:67:85:51:2b:be:2e:e9:aa:3e:32:a9:
         db:f9:c2:a7:43:39:2a:fe:68:73:3b:62:bf:44:05:68:52:42:
         77:d0:ad:01:c4:c5:dd:7b:6b:d9:0f:db:df:39:9a:33:58:1d:
         af:54:83:2d:fa:dc:c2:97:b0:6c:a9:84:50:ea:f8:03:76:ec:
         e6:cc:f5:0e:97:9d:e3:8d:61:91:b6:d8:38:bd:0e:d7:64:fd:
         c3:c3:d4:90:9d:58:0e:33:98:a8:d0:6f:f4:1c:d4:69:0a:6b:
         71:c8:c6:7b:97:a8:bd:b6:09:22:8b:f8:f5:ef:34:78:c1:20:
         d3:1c:e1:71:f6:47:02:6b:5c:20:ad:ea:26:9b:01:b5:2e:f2:
         3f:50:bf:23:f0:2b:15:21:e0:1b:45:07:ae:d8:9c:47:d7:84:
         1f:a2:bd:20:37:58:04:1d:16:31:bd:65:0f:16:87:c4:19:f3:
         7c:b8:34:48:d5:94:9f:a7:45:30:0d:42:b9:b0:2b:5d:4f:40:
         e4:e5:81:07:0f:1d:54:de:be:ad:19:cf:8a:86:09:75:d7:e7:
         60:bc:9c:69:b2:cc:75:e2:3e:f8:a4:88:f3:b9:4d:1b:97:4f:
         c8:c4:92:54
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICDUQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMTExMTkxNTQwNDNaFw0yMjExMTkxNTQwNDNaMBgxFjAU
BgNVBAMMDTYxOTY3M2ZlLWYxODUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC6L9l/LfDg9OBTEF0QZYuod6g31cmp1g/g7RHSRKQMUUvzNhstG1QxBxKG
yROOFj42MJ9UOeaIQvZomYTdsg/K9rxPSkMZHNw9j6sHwqk0u8bIYXY/PkUeD+F8
RW5pVi11fT/AedOw2JD8QKeiWT9RBcrFUDPoGWrJK1qEl+/z/W/sxjFEjxQL53z+
4o72a/u0XL4KByQvCK02XffZWwPY6zxzXgbrgWa1kEsDJwuP/sMDq96ItZ+RbVgu
xtTLU6XKxQzngKNiNRCpXC81Auo9DHAIGb2CZj0iD/0opydEdGXbjdEemaEAc9Oz
mSbP32hSIjaOtEqLnwZai3u+T2qBAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUgrJL
UsaQq633id9LSOcRTjw/wmYwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4L0U1QUNGMUNFNDg4NTExRUNBQzJBQkIzNUQ4QTAxNENFLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACc55wwDQYJKoZIhvcNAQELBQAD
ggEBABNeYin1CY9eiIILbPU89gczk0M4ATl90iBnhVErvi7pqj4yqdv5wqdDOSr+
aHM7Yr9EBWhSQnfQrQHExd17a9kP2985mjNYHa9Ugy363MKXsGyphFDq+AN27ObM
9Q6XneONYZG22Di9Dtdk/cPD1JCdWA4zmKjQb/Qc1GkKa3HIxnuXqL22CSKL+PXv
NHjBINMc4XH2RwJrXCCt6iabAbUu8j9QvyPwKxUh4BtFB67YnEfXhB+ivSA3WAQd
FjG9ZQ8Wh8QZ83y4NEjVlJ+nRTANQrmwK11PQOTlgQcPHVTevq0Zz4qGCXXX52C8
nGmyzHXiPvikiPO5TRuXT8jEklQ=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:28 2023 by rpki-client on console-ams.rpki-client.org