Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F5439314616111EC91E27E825A40D577.roa
File:                     F5439314616111EC91E27E825A40D577.roa (raw, json)
Hash identifier:          vNB1RN86UlS7pUwgJx3MgSGW+7Jp6mI1T329sV5B4xs=
Subject key identifier:   F7:6F:10:F3:3F:F8:9B:DF:F5:15:7A:10:04:5D:EF:D6:06:11:EC:C1
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       058E
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F5439314616111EC91E27E825A40D577.roa
Signing time:             Mon 20 Dec 2021 06:56:30 +0000
ROA not before:           Mon 20 Dec 2021 06:56:25 +0000
ROA not after:            Tue 20 Dec 2022 06:56:25 +0000
asID:                     23470
IP address blocks:        102.165.12.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1422 (0x58e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Dec 20 06:56:25 2021 GMT
            Not After : Dec 20 06:56:25 2022 GMT
        Subject: CN=61c0291e-2f7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7b:5f:87:61:67:90:aa:f5:26:f1:89:8f:5b:
                    f6:a0:34:7d:9b:26:f7:dd:47:22:ba:89:9d:36:c0:
                    95:64:79:a2:d7:13:f8:27:c2:61:f9:29:2d:48:0e:
                    f8:31:fa:3e:f1:9a:a0:46:f4:ce:34:1e:c2:36:73:
                    a1:aa:2d:8e:39:e6:dc:9f:5e:78:bb:d3:2e:58:af:
                    ac:be:24:48:53:a4:65:1d:8d:9f:0f:90:37:0e:a1:
                    ec:b1:56:f3:cf:4d:53:5f:cd:de:de:cd:e4:d9:53:
                    2c:3f:ae:da:b4:24:6a:54:0b:ae:c1:42:08:98:e4:
                    b9:5f:5f:80:73:47:de:78:65:37:82:4d:20:b9:0e:
                    f2:4b:37:5e:b0:63:b2:e0:3e:cc:db:f0:ab:ea:1c:
                    ad:48:45:6d:57:27:a7:09:73:48:b4:33:16:82:c2:
                    07:7b:71:0e:75:6c:11:5b:78:4c:fc:59:68:b4:54:
                    eb:6b:ed:da:be:b5:03:82:7e:b6:88:fd:c7:f1:b3:
                    b0:c1:3e:9f:0a:f9:e7:ef:08:8b:28:1a:4e:20:8a:
                    ca:26:8e:85:9d:28:2b:5d:4e:16:f5:2a:e6:48:6b:
                    ec:26:88:ab:ad:f5:97:55:15:1b:0f:f2:86:c4:aa:
                    3b:7f:35:3e:5c:71:69:d0:48:75:cf:bb:4a:eb:cb:
                    a8:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:6F:10:F3:3F:F8:9B:DF:F5:15:7A:10:04:5D:EF:D6:06:11:EC:C1
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F5439314616111EC91E27E825A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.165.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:dc:5f:3d:1b:bc:04:ad:9a:7c:f1:39:82:72:42:eb:81:07:
         13:dd:41:43:5e:33:85:b0:9a:c5:06:01:a2:6d:b3:b0:4d:99:
         f4:c2:e7:5a:12:1e:35:46:28:43:5b:3d:84:56:a7:1f:e2:2a:
         f8:82:81:4d:7b:1d:38:51:50:1a:79:cd:1d:b3:1f:11:e6:b7:
         fe:0a:2b:0f:0f:b0:65:a3:f4:fb:60:49:b7:36:c9:eb:8f:b8:
         de:d8:85:aa:91:df:c5:dc:33:09:f6:e2:10:2b:b2:f6:6f:e4:
         b4:c0:8e:2a:8a:76:64:e9:01:2f:69:a1:d7:80:f8:16:ed:58:
         cf:69:0d:94:1d:55:47:57:3d:5b:d8:de:0a:d2:c5:59:93:0f:
         d2:fe:f4:ad:bb:d4:8b:0a:be:6a:63:06:5a:ff:bb:24:c9:85:
         b9:6f:2e:37:df:e8:31:20:14:78:9b:d7:f7:c9:cd:5f:a9:7b:
         5b:97:69:93:ef:67:b6:3d:41:d9:02:a9:07:ad:89:7a:a3:d6:
         2c:6b:10:42:f9:41:49:27:8a:ac:0f:ba:82:24:52:15:52:ef:
         55:df:ae:49:16:0d:c9:43:24:88:8d:b7:3e:95:b1:fd:dd:13:
         38:bf:fc:f5:9e:dd:25:03:e3:ec:f6:be:21:08:17:d6:7c:92:
         d1:aa:b6:cc
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBY4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yMTEyMjAwNjU2MjVaFw0yMjEyMjAwNjU2MjVaMBgxFjAU
BgNVBAMMDTYxYzAyOTFlLTJmN2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCee1+HYWeQqvUm8YmPW/agNH2bJvfdRyK6iZ02wJVkeaLXE/gnwmH5KS1I
Dvgx+j7xmqBG9M40HsI2c6GqLY455tyfXni70y5Yr6y+JEhTpGUdjZ8PkDcOoeyx
VvPPTVNfzd7ezeTZUyw/rtq0JGpUC67BQgiY5LlfX4BzR954ZTeCTSC5DvJLN16w
Y7LgPszb8KvqHK1IRW1XJ6cJc0i0MxaCwgd7cQ51bBFbeEz8WWi0VOtr7dq+tQOC
fraI/cfxs7DBPp8K+efvCIsoGk4gisomjoWdKCtdThb1KuZIa+wmiKut9ZdVFRsP
8obEqjt/NT5ccWnQSHXPu0rry6gPAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU928Q
8z/4m9/1FXoQBF3v1gYR7MEwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4L0Y1NDM5MzE0NjE2MTExRUM5MUUyN0U4MjVBNDBENTc3LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmpQwwDQYJKoZIhvcNAQEL
BQADggEBAD3cXz0bvAStmnzxOYJyQuuBBxPdQUNeM4WwmsUGAaJts7BNmfTC51oS
HjVGKENbPYRWpx/iKviCgU17HThRUBp5zR2zHxHmt/4KKw8PsGWj9PtgSbc2yeuP
uN7YhaqR38XcMwn24hArsvZv5LTAjiqKdmTpAS9podeA+BbtWM9pDZQdVUdXPVvY
3grSxVmTD9L+9K271IsKvmpjBlr/uyTJhblvLjff6DEgFHib1/fJzV+pe1uXaZPv
Z7Y9QdkCqQetiXqj1ixrEEL5QUkniqwPuoIkUhVS71XfrkkWDclDJIiNtz6Vsf3d
Ezi//PWe3SUD4+z2viEIF9Z8ktGqtsw=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:31 2023 by rpki-client on console-ams.rpki-client.org