Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/7C155DBC9EE011EC99230A7B5A40D577.roa
File:                     7C155DBC9EE011EC99230A7B5A40D577.roa (raw, json)
Hash identifier:          ASloMXEcB7wVfzVGwysf6j476/khFro8H0JPHECzW0U=
Subject key identifier:   A7:40:83:72:29:BF:7B:05:E9:39:0B:CD:04:F7:75:E6:11:C3:0B:30
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       05FA
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/7C155DBC9EE011EC99230A7B5A40D577.roa
Signing time:             Tue 08 Mar 2022 13:05:53 +0000
ROA not before:           Tue 08 Mar 2022 13:05:48 +0000
ROA not after:            Wed 08 Mar 2023 13:05:48 +0000
asID:                     400377
IP address blocks:        161.123.116.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1530 (0x5fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Mar  8 13:05:48 2022 GMT
            Not After : Mar  8 13:05:48 2023 GMT
        Subject: CN=622754b1-79c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9d:57:51:8f:37:e1:10:53:93:6f:7f:89:9d:
                    ba:82:b9:d6:5d:8d:b1:ae:0e:1d:34:31:68:4d:4e:
                    30:93:89:ff:b2:fe:9f:88:8c:87:56:7a:0e:6f:1d:
                    1b:4d:70:cb:c7:43:24:5d:16:7b:7c:db:fc:57:62:
                    ac:d3:88:a4:a3:36:90:1c:92:26:b8:f2:ef:ae:db:
                    51:03:c0:00:7c:1c:e3:ef:b3:e3:24:81:61:86:b8:
                    c8:7b:76:1f:a0:e2:94:92:b4:99:2a:bb:5a:fc:5b:
                    44:8f:43:de:2d:f3:ac:cf:05:49:03:21:78:54:3c:
                    45:e6:65:08:8b:6c:65:c3:c4:0c:c4:17:80:b5:6d:
                    97:66:07:29:51:a2:88:8d:f1:dd:d7:f7:92:7d:3c:
                    be:3f:85:08:85:12:83:4e:e4:9c:36:a1:88:76:6b:
                    04:cf:d2:5c:9f:38:e7:9c:2c:b8:e8:b5:86:e9:e7:
                    e3:47:5d:3f:88:6e:5d:63:b6:80:4f:8a:db:13:6d:
                    5a:b0:11:37:24:79:c1:1c:07:60:c1:f9:c8:3a:9c:
                    ca:38:f0:26:a9:b7:1b:e1:06:18:25:6e:fa:56:b9:
                    e9:0d:34:a6:5d:cf:45:1e:2b:91:23:fb:98:17:83:
                    3d:dd:2a:3c:8f:67:83:e1:b4:c7:1d:8c:04:db:07:
                    87:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:40:83:72:29:BF:7B:05:E9:39:0B:CD:04:F7:75:E6:11:C3:0B:30
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/7C155DBC9EE011EC99230A7B5A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:e6:11:77:86:f1:75:53:20:62:40:b7:c7:99:0a:4b:6a:c1:
         23:82:e4:0b:fe:cb:59:68:41:04:e8:7c:21:77:da:22:31:11:
         1b:1a:5e:be:e2:eb:2e:75:a8:9f:22:ce:90:4a:b9:64:aa:d3:
         97:71:fc:30:03:ed:b7:b2:2a:7d:f4:5e:1e:83:1c:d5:38:99:
         38:9a:0a:b6:35:b6:8f:70:a6:e0:3f:81:fb:cf:76:f5:cb:a4:
         8d:30:e7:a7:51:57:6d:54:39:7e:54:ca:ea:83:f9:a1:17:64:
         1b:f3:a5:41:40:12:84:60:8a:b7:37:9c:ff:e4:26:68:d5:43:
         22:17:d3:87:8b:f1:a3:b8:4a:ee:12:51:5e:90:bd:9b:2f:4e:
         19:22:6e:72:56:09:0b:83:75:cf:66:4c:01:9e:2e:b8:2d:da:
         94:72:ce:b8:95:ac:8e:66:c3:8d:9f:71:64:f7:56:9e:ba:5a:
         a2:70:45:c3:39:f6:91:80:59:40:a4:1c:5f:d9:a7:14:2f:71:
         71:70:fd:40:17:d1:1f:6a:eb:b9:d1:05:67:99:cc:d5:5d:48:
         13:3e:f4:92:ee:b6:66:29:13:7a:0c:b5:fe:07:54:34:79:d0:
         a3:cf:43:1e:43:d9:1b:07:f7:9b:75:36:e9:4a:5c:bc:c4:78:
         ad:8f:aa:56
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBfowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
RkExNURBUjExMC8GA1UEBRMoNDRBOUY2OUY0MTQxREE3NkI3MzUzRUIwRDU4MTUy
M0FGRTJCODFFMTAeFw0yMjAzMDgxMzA1NDhaFw0yMzAzMDgxMzA1NDhaMBgxFjAU
BgNVBAMMDTYyMjc1NGIxLTc5YzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCfnVdRjzfhEFOTb3+JnbqCudZdjbGuDh00MWhNTjCTif+y/p+IjIdWeg5v
HRtNcMvHQyRdFnt82/xXYqzTiKSjNpAckia48u+u21EDwAB8HOPvs+MkgWGGuMh7
dh+g4pSStJkqu1r8W0SPQ94t86zPBUkDIXhUPEXmZQiLbGXDxAzEF4C1bZdmBylR
ooiN8d3X95J9PL4/hQiFEoNO5Jw2oYh2awTP0lyfOOecLLjotYbp5+NHXT+Ibl1j
toBPitsTbVqwETckecEcB2DB+cg6nMo48CaptxvhBhglbvpWuekNNKZdz0UeK5Ej
+5gXgz3dKjyPZ4PhtMcdjATbB4fHAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUp0CD
cim/ewXpOQvNBPd15hHDCzAwHwYDVR0jBBgwFoAURKn2n0FB2na3NT6w1YFSOv4r
geEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVBMjI4L1JLbjJu
MEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1JLbjJuMEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVB
MjI4LzdDMTU1REJDOUVFMDExRUM5OTIzMEE3QjVBNDBENTc3LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAChe3QwDQYJKoZIhvcNAQELBQAD
ggEBABPmEXeG8XVTIGJAt8eZCktqwSOC5Av+y1loQQTofCF32iIxERsaXr7i6y51
qJ8izpBKuWSq05dx/DAD7beyKn30Xh6DHNU4mTiaCrY1to9wpuA/gfvPdvXLpI0w
56dRV21UOX5UyuqD+aEXZBvzpUFAEoRgirc3nP/kJmjVQyIX04eL8aO4Su4SUV6Q
vZsvThkibnJWCQuDdc9mTAGeLrgt2pRyzriVrI5mw42fcWT3Vp66WqJwRcM59pGA
WUCkHF/ZpxQvcXFw/UAX0R9q67nRBWeZzNVdSBM+9JLutmYpE3oMtf4HVDR50KPP
Qx5D2RsH95t1NulKXLzEeK2PqlY=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:32 2023 by rpki-client on console-ams.rpki-client.org