Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/004336DC34DB11ED9262B8BAF1222468.roa
File:                     004336DC34DB11ED9262B8BAF1222468.roa (raw, json)
Hash identifier:          4YLSK9AJx6hpX1Izq8f3gq5usSzcx+oQ9Vg0zyULOkg=
Subject key identifier:   1D:E6:CE:D3:F8:4F:82:34:B3:56:70:48:E5:52:62:E7:F7:80:1D:09
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       17C9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/004336DC34DB11ED9262B8BAF1222468.roa
Signing time:             Thu 15 Sep 2022 09:44:33 +0000
ROA not before:           Thu 15 Sep 2022 09:44:29 +0000
ROA not after:            Wed 31 May 2023 09:44:29 +0000
asID:                     1239
IP address blocks:        45.200.160.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6089 (0x17c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 15 09:44:29 2022 GMT
            Not After : May 31 09:44:29 2023 GMT
        Subject: CN=6322f401-8d49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:06:8d:61:ce:30:71:d4:3c:72:f8:e9:89:df:
                    c7:0e:bc:5c:a8:be:60:7a:c9:4e:02:a6:01:fd:e2:
                    4b:74:95:57:86:ca:80:a4:35:94:93:48:dc:90:d7:
                    d4:3c:fe:0b:c8:2c:9c:97:ff:7d:c1:68:ce:6f:81:
                    e3:54:9b:b6:a6:6b:d8:5b:9e:0c:27:32:98:35:38:
                    0a:58:92:6a:13:69:17:09:5e:c6:89:fd:dc:6a:4c:
                    15:a7:73:5d:73:a1:47:0a:3d:8a:d1:31:a4:ff:54:
                    46:8a:75:f8:d5:4e:f4:24:35:df:4a:ec:e5:b6:f9:
                    52:e7:a4:5d:87:52:98:df:68:08:fa:29:66:d4:b1:
                    9f:b8:df:21:ba:71:81:10:ec:d4:e5:b0:08:c4:f9:
                    01:a2:9d:91:e0:ce:7a:3e:1c:b7:db:39:4c:1c:80:
                    7e:7d:a7:7b:4a:22:fe:7d:d7:65:6b:f1:72:97:77:
                    f8:a9:30:da:93:1c:c0:44:0e:fd:9f:fa:d1:ab:24:
                    ea:82:7c:c5:89:80:75:6d:a1:33:53:80:b7:ac:f6:
                    12:e0:b2:8e:21:66:2a:26:f2:c6:db:65:21:e8:80:
                    e9:4b:bf:ae:3e:9e:eb:57:7a:4c:c9:6d:71:ab:83:
                    22:f6:f5:77:f9:b4:ea:f2:77:50:26:71:06:81:5e:
                    e5:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:E6:CE:D3:F8:4F:82:34:B3:56:70:48:E5:52:62:E7:F7:80:1D:09
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/004336DC34DB11ED9262B8BAF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.200.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7d:a1:ef:08:46:db:4d:06:9d:3c:04:7b:d6:bd:80:a3:39:63:
         a0:a5:29:15:b7:cd:da:ef:1a:68:2b:65:5a:5f:25:15:98:64:
         7e:6b:48:d4:af:33:b2:3b:47:72:5c:1b:7c:93:80:8a:fc:86:
         92:0d:46:e6:63:c9:89:84:8b:48:c0:d3:a8:90:7f:d9:f3:bc:
         03:b1:d8:d4:5c:4c:17:e9:0b:0d:5b:2c:3e:6b:c1:06:0a:6b:
         ab:4b:66:b4:be:90:5f:f9:6e:f6:d1:ff:bd:f7:92:2d:4f:6f:
         01:fd:f5:db:76:2f:3b:ca:81:54:f4:40:46:bc:07:3b:10:f3:
         6f:9c:3c:9b:6e:e1:14:f1:f1:d1:29:d2:2b:61:e1:07:86:61:
         15:16:a9:4d:8f:d7:ad:2b:b8:6a:9a:7a:16:2e:82:26:83:a9:
         f5:d8:59:73:19:61:71:68:71:ec:57:87:fe:9b:4c:64:2a:82:
         dd:7b:df:70:1a:bb:84:0a:55:0f:0e:9f:fe:52:fc:6e:60:3a:
         c0:f2:d9:ef:08:a4:b5:f0:ff:85:7a:97:33:ab:da:9b:8b:68:
         a4:12:99:45:8c:58:8f:9d:0b:6e:1a:01:22:05:29:ff:31:52:
         d8:09:74:eb:30:dc:b7:8e:51:e6:f6:20:f0:42:b8:1c:aa:d8:
         ce:b7:86:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----