Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0430E27CDFF311ECB44602EBF1222468.roa
File:                     0430E27CDFF311ECB44602EBF1222468.roa (raw, json)
Hash identifier:          KOONNiuet+d5bWgkquDh92QvMv7P327FrEdPSgbA8Ik=
Subject key identifier:   2A:EF:D1:C8:2D:AC:8D:9C:73:54:19:10:81:98:C1:8B:40:0B:56:1A
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       1426
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0430E27CDFF311ECB44602EBF1222468.roa
Signing time:             Mon 30 May 2022 08:32:18 +0000
ROA not before:           Mon 30 May 2022 08:32:14 +0000
ROA not after:            Thu 30 Jun 2022 08:32:14 +0000
asID:                     271916
IP address blocks:        45.207.16.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5158 (0x1426)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: May 30 08:32:14 2022 GMT
            Not After : Jun 30 08:32:14 2022 GMT
        Subject: CN=62948112-2384
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:03:15:a6:2c:46:b4:91:38:ea:f9:f3:76:35:
                    40:12:19:3f:d1:f7:e9:3d:9b:76:89:32:fc:dc:29:
                    b9:b7:e1:53:c5:b9:7a:ab:b5:9a:98:57:ea:df:d3:
                    98:e8:1f:2a:a5:fa:32:76:95:50:01:30:b8:89:44:
                    c1:d6:72:6b:35:27:48:7f:6b:4b:12:8b:4d:1d:ff:
                    d2:f8:22:49:b3:f4:31:d6:23:34:78:ba:33:de:b3:
                    b9:da:87:2c:b0:45:31:3a:a4:57:8d:e3:57:7d:d6:
                    52:a7:11:7c:c9:76:54:c7:6f:dc:bc:76:7f:85:a4:
                    e1:3a:db:77:ae:00:0a:4c:7b:b4:28:a1:80:61:e3:
                    85:f8:e9:f4:34:3c:16:84:ff:28:8d:4f:c8:c4:d9:
                    8a:db:39:47:80:a3:93:e7:18:60:4b:f5:5c:0e:c7:
                    db:74:c8:f7:b4:3e:27:67:d7:35:78:e7:2c:2b:a9:
                    8a:1d:3c:8e:65:48:50:b8:6d:29:2f:a6:64:83:25:
                    95:55:c3:03:16:eb:d0:86:8e:29:f5:d1:1c:89:07:
                    5f:9b:a4:c4:cc:04:33:fb:2f:73:89:50:8a:6f:82:
                    9f:c7:73:e9:af:10:25:11:54:1f:b1:4a:73:05:9d:
                    cc:c2:c6:78:b0:36:6e:73:62:0a:84:5c:da:1b:8e:
                    45:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:EF:D1:C8:2D:AC:8D:9C:73:54:19:10:81:98:C1:8B:40:0B:56:1A
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0430E27CDFF311ECB44602EBF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.207.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:83:17:1a:9d:d0:8d:e1:46:3b:c1:12:69:74:73:27:ed:7d:
         1b:d4:d3:e6:e9:c3:26:a4:b8:8e:0f:e5:0d:46:43:24:26:37:
         d6:71:ae:c1:75:5d:51:a0:f9:6e:6a:84:ca:0b:ea:c0:ae:12:
         05:d6:cf:ff:cf:40:66:b7:6f:1d:ba:ca:94:dc:83:d5:8a:5b:
         61:57:e8:43:c8:81:3a:0e:1f:39:71:fa:64:90:10:7a:a9:86:
         06:1b:10:0e:b8:4f:d5:7e:57:12:e7:bb:20:31:5b:c3:b4:b8:
         8b:6f:d2:56:61:3c:7b:be:16:a0:c2:c8:8d:a2:68:21:27:0f:
         0e:7f:09:9a:5b:e9:5d:1c:30:e7:d9:17:98:a1:a4:ec:38:30:
         77:12:71:ac:72:a0:1e:a4:8d:b3:7d:37:5d:18:33:96:24:60:
         1b:ac:3d:ea:c8:c3:82:b7:34:3a:52:89:9e:f4:57:62:c6:b1:
         49:38:c5:75:f2:81:ab:12:52:c4:4c:39:80:b1:32:21:ef:44:
         ea:ce:d5:4e:a3:22:81:48:2a:b4:80:ad:80:ba:46:5d:81:c3:
         df:62:73:1a:1c:53:10:d9:b4:1e:cf:e8:24:fc:af:8b:51:c3:
         d0:a6:08:21:67:2e:60:e7:6c:04:18:de:86:f0:a0:97:f9:a2:
         0e:b4:85:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----