Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1093F9AA16CC11ECB841F77BD8A014CE.roa
File:                     1093F9AA16CC11ECB841F77BD8A014CE.roa (raw, json)
Hash identifier:          DIslYC3BQnAUkOa1J65B7YWXAbxXg7zT1JlCGZ5htZQ=
Subject key identifier:   F3:75:09:37:DA:39:1C:E4:CB:B0:4C:DF:78:64:76:E4:BA:50:40:91
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0974
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1093F9AA16CC11ECB841F77BD8A014CE.roa
Signing time:             Thu 16 Sep 2021 08:57:05 +0000
ROA not before:           Thu 16 Sep 2021 08:57:01 +0000
ROA not after:            Fri 16 Dec 2022 08:57:01 +0000
asID:                     135097
IP address blocks:        156.225.144.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2420 (0x974)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 16 08:57:01 2021 GMT
            Not After : Dec 16 08:57:01 2022 GMT
        Subject: CN=614306e1-06f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:bf:51:f1:57:21:c7:42:e0:91:98:74:eb:d8:
                    cc:aa:9e:50:20:f5:7c:f0:5d:27:4d:f2:b1:a4:eb:
                    32:f6:4d:04:80:f7:67:c2:0a:0e:6f:94:d1:4f:e9:
                    ae:1d:7f:24:59:ea:1b:60:90:4c:63:ba:86:35:3d:
                    dd:f4:27:67:8e:f7:8b:cf:e4:05:af:ab:ef:d6:89:
                    d8:ed:b8:ee:6a:0b:89:4b:2f:1d:30:5b:b8:1b:c1:
                    4e:66:aa:11:c7:ee:05:44:bb:93:01:34:39:cd:dc:
                    fb:d6:da:2d:e2:63:3d:99:dc:fa:7a:f7:6f:67:b0:
                    82:66:55:0a:ff:0a:c8:52:c3:78:1d:a8:8c:40:d9:
                    84:10:48:6e:5a:2d:d7:e8:ad:b8:5d:bd:95:4d:2a:
                    f9:44:d3:dd:27:06:92:83:2c:78:72:be:bf:57:62:
                    67:ee:89:35:56:17:75:4f:f5:03:c6:a0:c1:5b:97:
                    4e:73:06:1d:6e:63:de:7b:95:40:72:16:3f:b8:80:
                    e3:1a:ee:6f:76:c1:36:69:d4:23:13:9a:64:e1:ac:
                    53:8d:32:0e:d9:18:a6:98:80:52:d3:7f:0c:18:4a:
                    67:68:52:a9:4c:05:b6:50:3c:65:0d:6b:f1:a0:2a:
                    84:ed:d3:29:9a:66:c4:f9:2f:d0:d8:43:aa:05:7c:
                    78:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:75:09:37:DA:39:1C:E4:CB:B0:4C:DF:78:64:76:E4:BA:50:40:91
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1093F9AA16CC11ECB841F77BD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.225.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2d:b4:92:a8:27:7d:c4:31:3d:41:bc:09:ec:e9:fd:8b:6c:2d:
         c2:94:6e:c3:ed:2b:cf:65:5c:9f:64:33:93:0e:02:90:dc:55:
         df:bd:ee:92:89:d7:fc:31:c3:99:49:2b:e8:75:0a:ec:d5:d4:
         2c:ad:7d:d4:89:77:55:45:26:7f:d8:bf:21:d1:a1:3d:15:06:
         d3:4b:bf:82:52:01:0a:5f:c4:61:f7:c3:46:b2:ad:19:24:1d:
         b2:a6:4a:22:2d:fd:97:25:ac:78:b8:a8:a0:ea:34:c7:39:bd:
         20:a5:e5:87:a3:59:6d:69:1d:5b:94:17:25:a4:76:c7:93:2a:
         dc:2b:12:bd:79:8b:f6:05:7f:65:b6:43:d8:a4:59:46:34:b9:
         62:31:0f:23:77:3a:82:0e:15:00:2b:04:34:12:58:60:4f:c9:
         e3:e1:26:48:d4:ca:68:79:78:42:34:01:f5:fd:45:39:6b:ca:
         4d:85:38:9d:56:b6:8f:30:42:e1:76:ef:16:08:74:f5:d0:09:
         f8:78:ab:f5:ff:03:36:11:d8:ab:6f:67:a5:6b:8e:36:2d:ab:
         53:3e:6a:f6:72:c9:9c:12:7e:bf:fb:69:59:bb:8e:7c:66:3c:
         32:e9:c3:dc:89:df:0a:ea:7c:c5:1d:df:fa:4c:12:36:35:55:
         67:27:bc:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----