Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0C6AEEEA435811EF9B783EBB762E951A.roa
File:                     0C6AEEEA435811EF9B783EBB762E951A.roa (raw, json)
Hash identifier:          NGzhv+lOV+6b+xsxkGFjzal4DYI5bsoEp2UOBQHmbbQ=
Subject key identifier:   5C:D6:BA:B9:19:CB:C3:AD:D6:53:AF:7D:88:0F:31:D0:57:BC:FA:EE
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       9CAF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0C6AEEEA435811EF9B783EBB762E951A.roa
Signing time:             Tue 16 Jul 2024 09:44:52 +0000
ROA not before:           Tue 16 Jul 2024 09:44:48 +0000
ROA not after:            Tue 13 Aug 2024 09:44:48 +0000
asID:                     138915
IP address blocks:        156.244.39.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40111 (0x9caf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jul 16 09:44:48 2024 GMT
            Not After : Aug 13 09:44:48 2024 GMT
        Subject: CN=66964114-784f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:5c:59:fc:f6:ff:77:56:10:af:58:e1:6e:e6:
                    e3:60:a4:8e:c6:55:9f:37:91:ce:61:92:35:43:38:
                    50:93:41:c1:f4:17:53:18:04:7e:4f:25:ae:f8:72:
                    38:d3:ae:18:ed:00:a1:41:95:d3:b4:35:b3:66:6a:
                    4a:08:8f:1f:48:f0:7b:55:40:f2:17:a6:82:86:64:
                    33:23:da:74:1f:4d:6a:07:50:91:b0:7d:b8:13:b3:
                    43:ed:28:83:2d:ea:22:ad:9d:6f:1c:19:c6:aa:51:
                    e7:f9:45:7c:9e:50:26:f9:6b:86:db:eb:85:67:b5:
                    fc:bd:59:28:8f:4c:24:b8:66:d5:a9:68:24:12:1d:
                    e2:fa:16:ff:ef:84:18:61:db:b6:d6:52:9b:5d:c5:
                    d0:c7:d3:b3:01:b3:89:17:da:12:6a:b9:91:2f:dc:
                    9a:3a:f1:b8:cc:98:60:9e:e5:e7:89:91:d9:f5:87:
                    f6:74:d6:71:10:8f:40:21:67:69:19:8b:49:6d:df:
                    f5:29:3a:a6:34:1b:b0:04:4a:07:0a:f2:c9:92:07:
                    c8:ee:19:68:41:94:00:08:72:85:8e:d8:c4:71:8f:
                    ca:9d:fb:ac:e1:e9:8e:79:4b:aa:d0:2d:f8:ae:b8:
                    d7:7f:72:0b:42:5b:2f:c0:de:3a:b1:f8:de:cd:fc:
                    11:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:D6:BA:B9:19:CB:C3:AD:D6:53:AF:7D:88:0F:31:D0:57:BC:FA:EE
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0C6AEEEA435811EF9B783EBB762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.244.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:a1:da:f4:7b:84:33:54:74:ed:8b:4f:fc:bc:3b:39:9e:15:
         19:8b:b5:ba:b6:85:cb:39:74:88:32:7b:da:b7:7a:1c:09:53:
         3b:d0:48:bb:93:05:30:03:ef:2f:80:54:b6:b7:66:11:e2:35:
         17:32:2c:14:1a:c0:4c:89:84:9e:10:b0:3d:df:1c:27:26:79:
         ad:90:44:66:35:35:28:29:cd:bf:bc:b1:2a:9f:10:f3:da:bb:
         41:a3:8b:0f:05:fa:92:c2:e4:84:73:01:b2:21:cf:b6:e6:2f:
         95:db:b8:30:f8:f9:b3:36:65:36:b0:aa:4e:53:bc:dc:11:27:
         b1:6b:16:2f:59:b7:ec:aa:4c:b4:22:c7:30:62:f9:de:f3:3b:
         88:8f:21:64:7e:b7:da:c8:18:e4:35:1a:b8:5d:fc:41:5f:13:
         10:52:c8:95:3f:96:e6:73:e9:2b:65:b3:e7:a2:50:73:d9:08:
         2a:40:f4:2a:ef:62:5b:e0:d7:d6:4b:ab:8d:7d:2a:46:71:a1:
         58:c2:64:75:b4:72:f3:07:54:26:2d:f8:1f:1e:7c:9d:26:c7:
         8b:3f:b2:9a:99:f6:90:4b:74:8c:10:36:22:ed:cf:0b:a7:58:
         06:fe:ad:1e:5b:1f:16:45:30:f6:62:a8:31:91:90:10:f8:1e:
         65:11:cf:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----