Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EFE030C057CB11ECBBBAB6A95A40D577.roa
File:                     EFE030C057CB11ECBBBAB6A95A40D577.roa (raw, json)
Hash identifier:          poWaVB77vqI4S8iM7aPLExTPZYUGahIrjQjGldc5ovA=
Subject key identifier:   62:7E:25:83:21:95:F6:3E:C7:A4:E3:BD:F3:0B:7C:BE:B8:83:2B:C9
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       104E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EFE030C057CB11ECBBBAB6A95A40D577.roa
Signing time:             Wed 08 Dec 2021 02:09:56 +0000
ROA not before:           Wed 08 Dec 2021 02:09:50 +0000
ROA not after:            Fri 30 Dec 2022 02:09:50 +0000
asID:                     9009
IP address blocks:        45.192.148.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4174 (0x104e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec  8 02:09:50 2021 GMT
            Not After : Dec 30 02:09:50 2022 GMT
        Subject: CN=61b013f4-e52c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:53:51:dd:fb:04:14:0f:a8:e1:d2:bb:e0:d6:
                    8b:08:c2:b8:46:bf:9c:59:63:83:94:1d:80:3b:98:
                    6b:fd:cc:0e:c2:14:1f:94:fc:d3:56:90:c1:db:67:
                    00:75:77:bc:61:5c:fb:1e:25:c0:61:f4:9a:d2:10:
                    45:c3:fb:79:62:70:54:92:39:0b:cf:0a:e1:b6:63:
                    ac:f6:a9:13:98:2f:13:75:b8:9b:1e:1b:ce:4a:33:
                    8a:ac:80:c2:8f:7e:13:e2:45:1f:ac:1f:7c:06:fb:
                    ec:2e:d6:1a:87:bc:16:63:3b:27:b6:7a:de:40:95:
                    e8:e7:33:3b:7d:03:b1:98:80:15:42:aa:0f:85:c3:
                    8d:4b:6d:38:a7:66:30:61:2f:e0:43:82:47:52:d1:
                    45:12:64:1e:e0:76:8b:3e:92:73:72:62:1c:05:c8:
                    42:be:9c:ac:35:3e:1c:69:72:d2:68:6c:39:cf:c8:
                    6a:c1:2e:fe:68:d2:b4:d0:59:b9:27:58:bd:f3:19:
                    cd:6d:cd:6b:7c:45:75:b3:e4:f9:cc:ed:1c:0d:dc:
                    b2:0f:04:cb:1d:a6:7f:6e:11:f7:2d:45:c2:71:8c:
                    c8:24:7a:f1:91:99:b3:f9:ae:30:df:a0:a6:d4:15:
                    a4:a6:60:ba:ff:59:48:5e:11:60:9c:67:45:c5:11:
                    3d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:7E:25:83:21:95:F6:3E:C7:A4:E3:BD:F3:0B:7C:BE:B8:83:2B:C9
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EFE030C057CB11ECBBBAB6A95A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:42:37:65:19:57:48:97:47:be:03:95:7c:e9:98:f0:a2:bc:
         f3:c3:7b:40:38:25:76:3c:d1:da:4c:5b:b8:7b:d4:55:f6:25:
         2b:0b:fb:ee:62:02:0f:b4:2a:ef:c7:3d:30:29:13:bd:ac:8a:
         58:3a:0a:c3:89:70:f5:c2:34:46:94:4c:7f:75:de:3f:7a:19:
         29:9c:63:f7:62:94:ec:f6:31:71:02:18:f8:8c:3e:be:4b:fe:
         75:af:2e:0b:b4:54:c9:9d:9e:13:bc:a8:bb:95:d0:a7:81:7f:
         d0:ff:7e:83:49:68:a4:3e:e3:6b:3d:3a:43:68:7e:aa:d7:60:
         43:78:8c:d4:a1:1a:7b:44:96:35:08:10:85:88:93:02:30:fe:
         b4:2d:37:e6:cb:9e:ad:37:7a:12:4e:4d:ba:b0:28:b8:6b:60:
         df:80:fd:a5:b6:9b:ee:70:db:b1:e5:c9:ad:28:c3:f3:dc:c1:
         cd:c5:62:fb:6d:c7:1c:7f:3d:30:09:a1:45:c0:b3:37:09:44:
         c7:a8:0d:c3:43:51:f5:72:f1:83:51:f1:3a:a6:c5:6a:1b:42:
         eb:49:99:a2:2f:c0:0d:a0:08:25:55:c9:96:05:d5:0a:72:0f:
         e2:aa:fc:5e:b8:1f:16:be:38:e2:65:26:63:ff:d5:33:1f:65:
         a2:b9:48:b2
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICEE4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMTEyMDgwMjA5NTBaFw0yMjEyMzAwMjA5NTBaMBgxFjAU
BgNVBAMMDTYxYjAxM2Y0LWU1MmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCxU1Hd+wQUD6jh0rvg1osIwrhGv5xZY4OUHYA7mGv9zA7CFB+U/NNWkMHb
ZwB1d7xhXPseJcBh9JrSEEXD+3licFSSOQvPCuG2Y6z2qROYLxN1uJseG85KM4qs
gMKPfhPiRR+sH3wG++wu1hqHvBZjOye2et5AlejnMzt9A7GYgBVCqg+Fw41LbTin
ZjBhL+BDgkdS0UUSZB7gdos+knNyYhwFyEK+nKw1PhxpctJobDnPyGrBLv5o0rTQ
WbknWL3zGc1tzWt8RXWz5PnM7RwN3LIPBMsdpn9uEfctRcJxjMgkevGRmbP5rjDf
oKbUFaSmYLr/WUheEWCcZ0XFET2tAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUYn4l
gyGV9j7HpOO98wt8vriDK8kwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4L0VGRTAzMEMwNTdDQjExRUNCQkJBQjZBOTVBNDBENTc3LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtwJQwDQYJKoZIhvcNAQELBQAD
ggEBAGhCN2UZV0iXR74DlXzpmPCivPPDe0A4JXY80dpMW7h71FX2JSsL++5iAg+0
Ku/HPTApE72silg6CsOJcPXCNEaUTH913j96GSmcY/dilOz2MXECGPiMPr5L/nWv
Lgu0VMmdnhO8qLuV0KeBf9D/foNJaKQ+42s9OkNofqrXYEN4jNShGntEljUIEIWI
kwIw/rQtN+bLnq03ehJOTbqwKLhrYN+A/aW2m+5w27Hlya0ow/Pcwc3FYvttxxx/
PTAJoUXAszcJRMeoDcNDUfVy8YNR8TqmxWobQutJmaIvwA2gCCVVyZYF1QpyD+Kq
/F64Hxa+OOJlJmP/1TMfZaK5SLI=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:29 2023 by rpki-client on console-ams.rpki-client.org