Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0252C536E89711EC8CFFAFC7F1222468.roa
File:                     0252C536E89711EC8CFFAFC7F1222468.roa (raw, json)
Hash identifier:          m3ZqZGpOyy9b6ZuI6BWP3W/keTdxvUzGp53z9hKueKM=
Subject key identifier:   5E:A4:A8:AF:3A:77:F7:41:55:AB:56:95:1E:02:C0:D6:D1:F8:A7:5B
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       147C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0252C536E89711EC8CFFAFC7F1222468.roa
Signing time:             Fri 10 Jun 2022 08:26:22 +0000
ROA not before:           Fri 10 Jun 2022 08:26:19 +0000
ROA not after:            Wed 30 Nov 2022 08:26:19 +0000
asID:                     133199
IP address blocks:        156.245.28.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5244 (0x147c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jun 10 08:26:19 2022 GMT
            Not After : Nov 30 08:26:19 2022 GMT
        Subject: CN=62a3002e-6627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f0:e3:e4:a4:94:9a:9c:63:00:de:bd:64:ea:
                    ab:6b:43:26:41:80:f7:5a:23:c8:02:c5:62:0f:7d:
                    11:85:d2:ba:25:18:a4:c6:79:50:9d:85:51:0c:23:
                    6a:65:1a:49:4a:83:ce:17:f3:48:4f:a1:c1:13:5f:
                    f3:f7:6c:7a:cd:b8:34:64:a8:d4:e9:ac:5f:08:34:
                    43:71:21:e4:97:6e:9d:5f:0f:84:28:22:02:60:33:
                    cc:02:a7:26:4e:45:65:73:2d:55:21:72:ee:5f:7a:
                    38:82:1e:24:0f:ea:3d:19:b3:db:a2:89:6a:a7:cf:
                    cb:c6:fc:78:31:ce:1f:1a:00:24:99:a1:d7:4d:32:
                    87:a5:ed:b1:cb:9e:50:4a:45:ad:02:7e:d1:08:7c:
                    eb:4c:ee:82:17:04:4b:5f:31:d5:6d:e3:88:48:ec:
                    7e:58:e7:65:c6:3f:94:ba:67:f9:24:a2:25:f2:36:
                    16:07:aa:73:4a:e3:2c:f0:05:75:f4:bb:4d:e5:13:
                    ea:af:8b:19:8e:42:06:4b:45:fa:40:2f:b8:44:35:
                    0a:d5:37:74:9a:89:9f:21:d1:a8:b3:d5:ab:ef:ac:
                    c4:63:f0:bb:29:b2:6d:5d:27:bf:3c:b7:24:4e:42:
                    30:b2:3f:86:de:da:d5:1f:d0:40:a5:aa:55:ba:7b:
                    62:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:A4:A8:AF:3A:77:F7:41:55:AB:56:95:1E:02:C0:D6:D1:F8:A7:5B
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0252C536E89711EC8CFFAFC7F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.245.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:61:48:42:ff:8a:cb:8d:7f:42:3a:16:79:25:25:ac:1c:02:
         28:b4:32:5a:52:38:50:eb:50:18:8d:1e:7e:83:08:55:30:30:
         83:59:f2:34:e0:c1:5d:f6:f3:e1:1f:01:d1:b6:88:a1:5e:d0:
         3a:4e:49:5b:b9:75:ed:85:60:2c:7c:8c:0a:15:55:e4:c1:b3:
         61:f7:64:3a:e9:e5:64:39:c4:9a:10:fa:8e:ab:7d:24:42:50:
         95:98:9b:a6:aa:b9:6a:fd:9e:05:da:cf:66:04:ae:50:e9:41:
         2c:e2:e9:e6:4a:b9:9a:cf:5b:f2:1c:e9:90:af:2f:e7:03:fe:
         24:bc:48:36:91:82:fa:1a:3a:1e:ed:a7:92:01:9b:95:2e:cd:
         3c:97:31:2f:18:6f:e8:ea:91:9d:5a:3d:cf:ad:e1:89:32:ec:
         a0:a4:ea:4c:b6:03:37:e7:69:e3:4f:2d:e8:61:75:41:b2:47:
         95:97:9a:94:45:d1:ff:ba:9b:5a:4e:a8:0f:84:3e:c2:f0:c7:
         2a:3e:ac:18:55:33:36:96:d5:32:c0:09:71:30:3e:f0:a2:c1:
         69:7b:60:8d:30:cb:64:2f:71:cb:80:d1:a3:cf:46:7e:3f:1d:
         ca:69:c2:f0:29:ba:1e:39:c5:13:4f:aa:f7:8c:02:12:ae:4b:
         aa:73:7c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----