Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/079DECF4488911ECB62B8E3CD8A014CE.roa
File:                     079DECF4488911ECB62B8E3CD8A014CE.roa (raw, json)
Hash identifier:          irrWLpGDbQcSdDIfyE1RhYvyGkwP0I3WbsibfjJL2rY=
Subject key identifier:   6D:5B:13:53:B2:3B:C7:20:B4:28:5C:40:7C:65:30:F7:68:24:35:ED
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0DF1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/079DECF4488911ECB62B8E3CD8A014CE.roa
Signing time:             Thu 18 Nov 2021 16:03:12 +0000
ROA not before:           Fri 19 Nov 2021 16:03:08 +0000
ROA not after:            Sat 19 Nov 2022 16:03:08 +0000
asID:                     139879
IP address blocks:        156.247.188.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3569 (0xdf1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 19 16:03:08 2021 GMT
            Not After : Nov 19 16:03:08 2022 GMT
        Subject: CN=61967940-baa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:38:57:1f:06:80:36:3a:20:de:ba:69:79:ca:
                    d1:e4:4f:5b:1a:63:b5:b5:72:06:36:38:8b:21:2c:
                    52:8c:b1:73:7d:3e:b4:d8:98:f5:0b:31:1a:99:73:
                    29:e1:75:a2:cf:ae:1c:a2:24:17:9a:52:b7:d6:af:
                    72:f1:75:e6:3e:35:e4:b9:6d:72:73:55:ae:85:62:
                    1d:77:b1:7e:26:ac:61:95:e6:4b:fa:cf:65:50:52:
                    3f:32:0d:85:eb:cd:b9:b1:a6:28:3f:d6:de:9e:26:
                    67:0a:4f:14:a0:96:0d:09:50:dd:64:81:a3:47:2a:
                    d4:d2:28:de:48:94:58:c8:25:49:18:03:9a:3b:ee:
                    0c:3f:a3:bb:49:ca:c7:06:02:c8:12:06:5e:79:d9:
                    b1:23:9b:28:a1:ef:a9:e6:84:18:8e:67:ca:95:f3:
                    7d:65:1a:1a:92:72:82:28:45:3c:c8:e1:38:b1:f7:
                    35:0e:48:b3:0e:15:fc:5b:63:ce:86:cc:04:33:c8:
                    8e:99:49:d1:43:af:f5:89:a6:b4:6d:36:e8:02:f1:
                    71:91:f7:fa:14:07:75:4b:1b:04:5c:f6:df:f2:67:
                    70:4a:1f:6f:e9:43:04:09:66:6e:70:89:44:31:2e:
                    77:e7:9a:fb:7a:b1:ab:93:dd:9a:cd:43:8d:58:95:
                    db:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:5B:13:53:B2:3B:C7:20:B4:28:5C:40:7C:65:30:F7:68:24:35:ED
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/079DECF4488911ECB62B8E3CD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.247.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:98:fe:d9:06:f0:ce:2b:76:82:48:b6:9e:ec:5f:40:fa:76:
         43:64:e6:86:0d:a2:e7:10:8d:f3:21:f1:00:7d:5d:03:a6:35:
         27:2a:f5:31:51:a1:0f:d9:b3:fa:17:b7:e5:95:61:d0:6e:59:
         43:d0:ee:17:9d:ab:97:1a:c3:f1:ee:d1:d2:d5:2b:c7:cf:5d:
         4d:7f:df:e1:c0:56:24:5a:84:4b:f8:e7:58:6f:d4:7f:09:28:
         5e:a9:a1:08:ef:43:a2:25:c4:39:d3:53:20:73:1d:93:e3:11:
         63:21:cb:6a:52:83:47:ec:4b:22:bc:66:01:29:c0:cb:aa:c1:
         b5:8a:9f:96:2a:48:9f:b8:a0:40:09:f9:35:e2:5a:cf:dc:ff:
         b7:da:52:b1:f0:87:37:a2:0e:83:44:a3:91:52:00:0c:6f:d8:
         35:72:16:c6:a2:ce:75:ce:a6:2f:05:af:c8:f4:16:a1:c5:6f:
         7a:21:f6:af:54:f4:7c:19:d3:3f:33:74:c5:ed:f0:a7:08:97:
         ef:fb:53:c6:27:16:e4:33:41:11:e9:f1:cb:72:a9:24:4d:bd:
         0e:de:c2:6b:e4:a2:cb:dd:f0:89:54:d1:c2:1b:de:20:99:88:
         b9:93:73:b0:d8:dd:f9:b9:3f:4c:04:d7:83:8e:52:ef:fb:62:
         91:13:5c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----