Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/065F7DECB00F11EC821E27755A40D577.roa
File:                     065F7DECB00F11EC821E27755A40D577.roa (raw, json)
Hash identifier:          r5HTjwxVZUE5xva7hsHDt9MRHc/RYea8ZAfJB4N9JtQ=
Subject key identifier:   DF:6C:81:F4:E8:FE:9E:33:B8:F0:9F:D3:F0:E3:68:3A:59:43:E2:BB
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       0631
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/065F7DECB00F11EC821E27755A40D577.roa
Signing time:             Wed 30 Mar 2022 09:51:52 +0000
ROA not before:           Wed 30 Mar 2022 09:51:49 +0000
ROA not after:            Thu 30 Mar 2023 09:51:49 +0000
asID:                     400377
IP address blocks:        161.123.130.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1585 (0x631)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Mar 30 09:51:49 2022 GMT
            Not After : Mar 30 09:51:49 2023 GMT
        Subject: CN=62442838-2088
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8e:2f:de:88:ef:e7:2c:9b:18:37:85:b8:da:
                    d9:c0:5d:51:92:b7:66:17:02:fe:83:a7:5b:73:00:
                    9d:e8:ff:6c:84:96:67:ba:00:26:99:ce:a9:73:32:
                    0f:f9:3f:53:9e:80:e6:0a:26:da:c9:59:a9:1b:e0:
                    c0:74:83:c5:3c:3e:c7:28:47:7a:0b:91:2f:a3:7d:
                    36:86:82:62:3b:f0:23:a7:76:c6:e5:79:1a:1e:f3:
                    60:ce:a2:8d:53:32:24:1b:2f:3c:7d:be:99:dc:a3:
                    c2:03:e0:11:ea:41:fc:b1:74:5f:59:0a:9a:5d:5b:
                    aa:89:d0:2a:a7:c5:86:73:5e:49:f6:2f:16:b6:b2:
                    0c:07:1c:de:e4:1b:8f:52:40:c8:97:66:2c:ff:5f:
                    34:ab:93:04:6f:63:fb:ed:17:9f:6b:ee:65:80:94:
                    54:3f:6c:b4:52:85:13:55:25:ea:80:d5:5d:cb:23:
                    1b:b4:ab:fc:c0:c4:27:b3:42:ac:a5:c3:9f:b5:83:
                    10:95:21:be:f8:97:a6:d3:d4:a4:ff:23:56:78:c9:
                    97:33:5c:b4:c7:06:e5:b2:ce:9a:e0:e3:7a:d3:f7:
                    a5:7e:bd:d4:c6:63:62:96:34:3f:8f:c2:94:8e:50:
                    65:b4:2b:ec:1c:42:f2:1d:35:ea:07:7e:53:c5:22:
                    31:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:6C:81:F4:E8:FE:9E:33:B8:F0:9F:D3:F0:E3:68:3A:59:43:E2:BB
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/065F7DECB00F11EC821E27755A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:fd:82:9e:27:66:d9:e9:5d:38:f7:4e:32:43:7e:cf:16:5f:
         f5:cb:32:57:b8:6a:cb:ac:bc:47:7d:0a:30:a6:4e:c1:5f:7f:
         cb:0c:de:0e:fe:67:71:5c:71:9f:45:4c:5e:28:c3:83:e4:51:
         c0:2b:3c:98:67:89:26:be:15:53:7d:d6:07:73:9f:ce:1a:7e:
         b1:64:8e:1d:99:f4:1c:0c:c0:77:57:b9:bc:b1:e1:27:e7:86:
         b0:d4:6b:12:c8:ae:c3:3c:86:5c:61:9e:07:f2:c7:99:a2:1e:
         0c:85:c3:ec:c7:d8:4a:ee:e6:90:56:28:5a:ea:9b:38:69:06:
         41:7d:ef:dd:ea:f6:d2:72:17:b2:83:d0:15:bd:ad:73:dd:67:
         2a:26:21:d9:f9:f2:c3:21:f3:e4:a7:5e:4f:c6:09:5f:11:0d:
         77:d8:fe:99:ec:ef:5b:33:12:bb:b7:99:d7:d4:e0:9c:ba:49:
         86:73:68:7e:29:3f:03:5f:3a:4e:97:ee:c3:79:f4:35:27:fd:
         c1:59:6d:a6:88:df:98:0c:0d:fb:b6:3f:89:5e:4e:d0:a9:59:
         df:09:fa:a6:16:53:cb:04:59:bc:19:64:71:d8:15:f7:50:64:
         87:32:dc:34:06:85:a8:5f:60:93:c4:2f:58:da:c7:fb:55:80:
         96:87:af:ca
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBjEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
RkExNURBUjExMC8GA1UEBRMoNDRBOUY2OUY0MTQxREE3NkI3MzUzRUIwRDU4MTUy
M0FGRTJCODFFMTAeFw0yMjAzMzAwOTUxNDlaFw0yMzAzMzAwOTUxNDlaMBgxFjAU
BgNVBAMMDTYyNDQyODM4LTIwODgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDDji/eiO/nLJsYN4W42tnAXVGSt2YXAv6Dp1tzAJ3o/2yElme6ACaZzqlz
Mg/5P1OegOYKJtrJWakb4MB0g8U8PscoR3oLkS+jfTaGgmI78COndsbleRoe82DO
oo1TMiQbLzx9vpnco8ID4BHqQfyxdF9ZCppdW6qJ0CqnxYZzXkn2Lxa2sgwHHN7k
G49SQMiXZiz/XzSrkwRvY/vtF59r7mWAlFQ/bLRShRNVJeqA1V3LIxu0q/zAxCez
Qqylw5+1gxCVIb74l6bT1KT/I1Z4yZczXLTHBuWyzprg43rT96V+vdTGY2KWND+P
wpSOUGW0K+wcQvIdNeoHflPFIjG1AgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU32yB
9Oj+njO48J/T8ONoOllD4rswHwYDVR0jBBgwFoAURKn2n0FB2na3NT6w1YFSOv4r
geEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVBMjI4L1JLbjJu
MEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1JLbjJuMEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVB
MjI4LzA2NUY3REVDQjAwRjExRUM4MjFFMjc3NTVBNDBENTc3LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAChe4IwDQYJKoZIhvcNAQELBQAD
ggEBAIP9gp4nZtnpXTj3TjJDfs8WX/XLMle4asusvEd9CjCmTsFff8sM3g7+Z3Fc
cZ9FTF4ow4PkUcArPJhniSa+FVN91gdzn84afrFkjh2Z9BwMwHdXubyx4SfnhrDU
axLIrsM8hlxhngfyx5miHgyFw+zH2Eru5pBWKFrqmzhpBkF9793q9tJyF7KD0BW9
rXPdZyomIdn58sMh8+SnXk/GCV8RDXfY/pns71szEru3mdfU4Jy6SYZzaH4pPwNf
Ok6X7sN59DUn/cFZbaaI35gMDfu2P4leTtCpWd8J+qYWU8sEWbwZZHHYFfdQZIcy
3DQGhahfYJPEL1jax/tVgJaHr8o=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:34 2023 by rpki-client on console-fra.rpki-client.org