Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FD469BA8488711EC931D423AD8A014CE.roa
File:                     FD469BA8488711EC931D423AD8A014CE.roa (raw, json)
Hash identifier:          zJ768A4YlIv6TJ+RpSCrWBMRiNwL5NQToZBjFH0idkk=
Subject key identifier:   E9:CF:32:FC:B8:00:2F:BE:01:24:57:23:41:6D:75:08:38:F0:97:42
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0DB6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FD469BA8488711EC931D423AD8A014CE.roa
Signing time:             Thu 18 Nov 2021 15:55:45 +0000
ROA not before:           Fri 19 Nov 2021 15:55:42 +0000
ROA not after:            Sat 19 Nov 2022 15:55:42 +0000
asID:                     139879
IP address blocks:        156.249.178.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3510 (0xdb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 19 15:55:42 2021 GMT
            Not After : Nov 19 15:55:42 2022 GMT
        Subject: CN=61967781-83df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:fe:3a:fb:ff:d9:9f:b4:1a:c4:7f:87:fe:8c:
                    48:98:bd:18:e0:4a:93:6b:df:08:54:f8:47:f1:b2:
                    87:d1:cc:55:7d:39:cc:ec:f8:9e:52:df:46:ce:08:
                    8a:9f:30:76:68:4b:13:67:80:e3:03:34:08:29:05:
                    4b:40:cd:48:46:79:54:73:aa:a1:cb:4c:10:3e:4c:
                    52:eb:fe:fb:2a:7f:18:0e:43:ce:75:4f:ff:92:e7:
                    24:b7:23:5c:4b:aa:f4:38:4b:b5:aa:76:db:ce:78:
                    25:42:00:d8:09:ca:52:44:cd:a7:31:62:e4:36:5e:
                    c8:12:90:d5:37:93:4e:15:54:9d:28:ff:2d:9e:6f:
                    3e:7b:ec:0a:9c:ca:5c:90:89:ed:0d:77:c0:9c:46:
                    16:73:be:63:bf:9d:74:d5:4f:81:da:ee:d2:78:78:
                    2e:ec:38:40:60:5c:05:4c:55:1e:ec:17:e9:88:18:
                    8e:ef:10:2c:b6:c4:e9:0e:aa:bf:15:3b:4f:ce:f2:
                    88:d5:aa:1d:26:04:a4:01:83:f0:6c:8e:e9:da:5c:
                    ae:d1:11:cc:96:53:e3:b7:3e:c2:3d:25:bf:53:ff:
                    fd:85:a8:72:9b:c8:7b:f6:3d:f7:5f:bb:d6:5c:b5:
                    27:71:c5:14:5a:0c:d4:eb:4d:ac:7a:e1:3a:22:1f:
                    5f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:CF:32:FC:B8:00:2F:BE:01:24:57:23:41:6D:75:08:38:F0:97:42
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FD469BA8488711EC931D423AD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.249.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:62:6a:5b:18:6e:c1:c0:19:a1:88:d4:4b:93:02:a9:aa:b5:
         e8:11:58:fe:e6:a5:e9:b5:0e:e7:3c:e6:bf:ad:72:eb:01:61:
         95:9f:9a:82:cb:1d:86:5a:51:cf:7d:3e:de:f1:8d:b0:0d:31:
         91:b3:c2:3d:3a:78:4f:b6:15:ca:dd:00:08:5e:14:46:98:35:
         5a:4b:37:51:56:4e:e0:8d:26:62:27:46:ac:ad:d2:b8:84:38:
         c6:89:2e:6a:ba:1d:87:39:e3:44:77:06:1e:dc:bb:39:22:21:
         53:5e:e2:34:20:1a:c7:b5:36:92:35:c0:c7:5e:07:9e:93:4c:
         2b:a6:bb:de:0b:17:bf:72:8d:10:b3:e8:65:47:45:c4:0f:e1:
         7a:55:7b:d9:d1:35:d9:49:db:c6:e0:19:e3:18:99:9d:da:7c:
         74:56:2c:f4:ee:b6:26:27:25:c5:52:d8:87:eb:4b:cc:3c:54:
         eb:d8:a0:61:45:b2:58:ed:79:86:3a:7c:19:18:c4:0f:25:ca:
         d9:fb:1d:fd:d7:2f:be:0a:89:46:12:b6:5f:93:cf:f3:f4:e4:
         88:db:6d:f5:95:c3:2a:51:c2:49:89:e9:62:dd:0c:77:ac:e5:
         73:61:9c:80:33:61:f4:f0:c4:79:b8:4e:a0:c1:90:1f:00:2e:
         cc:2c:5a:3c
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICDbYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMTExMTkxNTU1NDJaFw0yMjExMTkxNTU1NDJaMBgxFjAU
BgNVBAMMDTYxOTY3NzgxLTgzZGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDb/jr7/9mftBrEf4f+jEiYvRjgSpNr3whU+EfxsofRzFV9Oczs+J5S30bO
CIqfMHZoSxNngOMDNAgpBUtAzUhGeVRzqqHLTBA+TFLr/vsqfxgOQ851T/+S5yS3
I1xLqvQ4S7WqdtvOeCVCANgJylJEzacxYuQ2XsgSkNU3k04VVJ0o/y2ebz577Aqc
ylyQie0Nd8CcRhZzvmO/nXTVT4Ha7tJ4eC7sOEBgXAVMVR7sF+mIGI7vECy2xOkO
qr8VO0/O8ojVqh0mBKQBg/BsjunaXK7REcyWU+O3PsI9Jb9T//2FqHKbyHv2Pfdf
u9ZctSdxxRRaDNTrTax64ToiH19vAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU6c8y
/LgAL74BJFcjQW11CDjwl0IwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4L0ZENDY5QkE4NDg4NzExRUM5MzFENDIzQUQ4QTAxNENFLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACc+bIwDQYJKoZIhvcNAQELBQAD
ggEBAJBialsYbsHAGaGI1EuTAqmqtegRWP7mpem1Duc85r+tcusBYZWfmoLLHYZa
Uc99Pt7xjbANMZGzwj06eE+2FcrdAAheFEaYNVpLN1FWTuCNJmInRqyt0riEOMaJ
Lmq6HYc540R3Bh7cuzkiIVNe4jQgGse1NpI1wMdeB56TTCumu94LF79yjRCz6GVH
RcQP4XpVe9nRNdlJ28bgGeMYmZ3afHRWLPTutiYnJcVS2IfrS8w8VOvYoGFFsljt
eYY6fBkYxA8lytn7Hf3XL74KiUYStl+Tz/P05IjbbfWVwypRwkmJ6WLdDHes5XNh
nIAzYfTwxHm4TqDBkB8ALswsWjw=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:32 2023 by rpki-client on console-fra.rpki-client.org