Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/75559AB07DFB11EC820B32D75A40D577.roa
File:                     75559AB07DFB11EC820B32D75A40D577.roa (raw, json)
Hash identifier:          FS/Sks5QSu2VbAj3LOqEkfJ6gTA/MW45gW0S9RN4I58=
Subject key identifier:   04:4A:B2:6E:F5:48:42:0C:DB:68:1D:92:AC:E4:73:FF:5C:19:21:9B
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       0530
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/75559AB07DFB11EC820B32D75A40D577.roa
Signing time:             Tue 25 Jan 2022 16:25:50 +0000
ROA not before:           Tue 25 Jan 2022 16:25:46 +0000
ROA not after:            Wed 25 Jan 2023 16:25:46 +0000
asID:                     327790
IP address blocks:        161.123.116.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1328 (0x530)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Jan 25 16:25:46 2022 GMT
            Not After : Jan 25 16:25:46 2023 GMT
        Subject: CN=61f0248e-78fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:f6:8b:a9:2c:f1:56:4e:35:12:30:c6:fa:0f:
                    da:0b:8b:e9:35:ea:b2:9c:52:93:28:43:95:0a:67:
                    b6:18:2d:3c:73:65:f9:a1:6a:92:02:e6:85:87:92:
                    88:d3:82:ef:8f:57:c9:77:71:52:28:4f:17:9e:98:
                    70:9c:a0:a3:95:a9:c5:5b:a7:20:5c:79:0a:9e:53:
                    ac:4d:61:b6:07:f5:0e:ba:ca:f4:02:e4:22:94:b8:
                    68:6d:eb:07:6a:fb:c8:90:23:cc:5f:21:06:57:7d:
                    85:36:9f:77:7c:5d:dc:e5:29:a2:72:14:ae:c2:42:
                    a6:eb:c5:7f:b6:35:d1:b4:57:98:e6:77:27:fc:fd:
                    62:a1:62:14:c4:34:4c:34:d4:6a:b0:4e:b0:b8:a8:
                    9f:e2:a7:59:04:15:0b:67:d7:73:93:c9:cb:08:15:
                    de:03:d2:1c:5e:a3:c6:f3:22:ea:93:fb:55:58:bb:
                    c1:5a:ad:92:77:f6:97:5e:11:e0:f7:98:ce:9e:f3:
                    68:81:41:29:35:7a:05:75:79:17:04:ad:81:a7:34:
                    c8:17:82:09:cf:b3:55:e8:b4:4e:4c:17:11:0e:3e:
                    27:48:69:03:b4:7a:8f:99:c0:02:d1:5c:68:74:19:
                    bc:74:24:4d:3d:48:03:54:7c:5b:17:2c:7d:b9:e0:
                    88:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:4A:B2:6E:F5:48:42:0C:DB:68:1D:92:AC:E4:73:FF:5C:19:21:9B
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/75559AB07DFB11EC820B32D75A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b6:fb:00:db:fe:ee:d2:d1:35:4f:84:6d:8d:01:c8:94:35:9d:
         ac:80:4a:61:d8:86:69:d7:bf:2e:00:88:57:75:c9:e6:a5:9d:
         fc:29:0c:59:15:a8:ac:d9:9c:2e:cc:c9:85:99:28:fc:ca:fa:
         4b:02:f0:1d:1c:5d:d2:5a:ae:23:4f:6a:79:7b:47:fe:1c:9e:
         3d:f3:9f:5d:69:f1:b1:b9:bc:aa:e9:6e:3b:d8:ac:87:86:7c:
         13:d5:76:45:40:08:fc:93:84:d8:85:b7:7c:03:a7:3a:a5:f2:
         86:05:78:ba:f8:d7:cc:9a:d7:d9:ab:70:18:0b:11:bf:1f:07:
         dd:56:3f:dc:c1:9c:ca:3e:f2:14:e2:88:84:9b:26:f9:78:01:
         21:52:62:4b:82:20:d3:aa:e5:12:a8:fb:f3:26:14:d9:56:7d:
         46:f6:e1:e8:d5:0a:b8:e4:6a:fa:0a:a4:b9:cf:2f:ca:90:56:
         30:07:6d:1f:3a:df:81:18:9a:c4:3e:24:ca:0b:37:6b:d5:ce:
         5b:3d:c9:9e:0f:d6:8f:9f:6e:99:3d:a4:f8:68:31:00:4b:27:
         96:19:fe:cd:f5:e2:64:07:0b:aa:f7:e9:10:24:fc:a2:36:15:
         92:70:8e:73:31:4b:9c:8d:da:57:5a:42:cc:4c:9a:e7:68:4a:
         33:9d:4e:c1
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBTAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
RkExNURBUjExMC8GA1UEBRMoNDRBOUY2OUY0MTQxREE3NkI3MzUzRUIwRDU4MTUy
M0FGRTJCODFFMTAeFw0yMjAxMjUxNjI1NDZaFw0yMzAxMjUxNjI1NDZaMBgxFjAU
BgNVBAMMDTYxZjAyNDhlLTc4ZmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQD39oupLPFWTjUSMMb6D9oLi+k16rKcUpMoQ5UKZ7YYLTxzZfmhapIC5oWH
kojTgu+PV8l3cVIoTxeemHCcoKOVqcVbpyBceQqeU6xNYbYH9Q66yvQC5CKUuGht
6wdq+8iQI8xfIQZXfYU2n3d8XdzlKaJyFK7CQqbrxX+2NdG0V5jmdyf8/WKhYhTE
NEw01GqwTrC4qJ/ip1kEFQtn13OTycsIFd4D0hxeo8bzIuqT+1VYu8FarZJ39pde
EeD3mM6e82iBQSk1egV1eRcErYGnNMgXggnPs1XotE5MFxEOPidIaQO0eo+ZwALR
XGh0Gbx0JE09SANUfFsXLH254IhpAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUBEqy
bvVIQgzbaB2SrORz/1wZIZswHwYDVR0jBBgwFoAURKn2n0FB2na3NT6w1YFSOv4r
geEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVBMjI4L1JLbjJu
MEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1JLbjJuMEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVB
MjI4Lzc1NTU5QUIwN0RGQjExRUM4MjBCMzJENzVBNDBENTc3LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGhe3QwDQYJKoZIhvcNAQELBQAD
ggEBALb7ANv+7tLRNU+EbY0ByJQ1nayASmHYhmnXvy4AiFd1yealnfwpDFkVqKzZ
nC7MyYWZKPzK+ksC8B0cXdJariNPanl7R/4cnj3zn11p8bG5vKrpbjvYrIeGfBPV
dkVACPyThNiFt3wDpzql8oYFeLr418ya19mrcBgLEb8fB91WP9zBnMo+8hTiiISb
Jvl4ASFSYkuCINOq5RKo+/MmFNlWfUb24ejVCrjkavoKpLnPL8qQVjAHbR8634EY
msQ+JMoLN2vVzls9yZ4P1o+fbpk9pPhoMQBLJ5YZ/s314mQHC6r36RAk/KI2FZJw
jnMxS5yN2ldaQsxMmudoSjOdTsE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:53 2024 by rpki-client on console-fra.rpki-client.org