Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/13F1C0E236DD11ECA153B666D8A014CE.roa
File:                     13F1C0E236DD11ECA153B666D8A014CE.roa (raw, json)
Hash identifier:          eFTuPd1/1M4H5z0j/MI6xqSY/V26K1gIGJWgCR9q6jo=
Subject key identifier:   37:18:40:B6:3B:E6:DF:C9:3F:92:D0:69:DB:D0:64:98:11:B3:1A:68
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0B08
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/13F1C0E236DD11ECA153B666D8A014CE.roa
Signing time:             Wed 27 Oct 2021 04:19:29 +0000
ROA not before:           Wed 27 Oct 2021 04:19:26 +0000
ROA not after:            Thu 27 Oct 2022 04:19:26 +0000
asID:                     58895
IP address blocks:        45.206.78.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2824 (0xb08)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 27 04:19:26 2021 GMT
            Not After : Oct 27 04:19:26 2022 GMT
        Subject: CN=6178d351-f18e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:de:f9:48:d9:e0:25:1a:a2:3f:3e:2a:88:b6:
                    f3:00:2e:d9:21:4d:96:9f:d5:f1:10:88:35:1e:12:
                    ac:24:db:8f:b3:9a:c1:6a:b5:c6:97:e7:2a:51:d7:
                    d3:68:44:04:3e:26:33:56:47:e4:53:a6:1f:e4:17:
                    38:4a:9c:96:9c:62:39:cc:76:00:80:94:78:6b:e8:
                    2b:f4:d6:72:79:ef:e0:e9:bd:6a:90:4d:b2:e5:b6:
                    93:05:52:98:e3:10:35:2b:9f:2c:98:e6:46:99:52:
                    0f:70:65:fe:b6:05:d9:ac:93:29:84:13:3a:3e:41:
                    92:47:67:3a:2d:fc:b4:0f:42:7c:37:d3:c9:f7:57:
                    c1:f6:c5:81:01:d0:59:54:6e:94:c8:75:81:90:48:
                    fa:8a:31:bc:f4:d7:a1:8a:85:6d:2e:30:55:b8:b7:
                    44:ca:6b:6f:d3:43:ed:57:68:54:09:16:41:fe:65:
                    82:cb:60:d2:cb:0e:b9:c0:54:44:4f:63:5b:fe:21:
                    2e:5e:96:d9:70:87:62:b6:95:ec:33:a3:b2:b9:67:
                    af:19:91:fc:57:cc:41:1f:ae:b4:d5:b1:c6:a9:2a:
                    9b:8c:87:7b:1b:84:06:e0:5b:4a:af:62:70:15:36:
                    83:a2:8b:d5:3b:bb:fc:04:b3:5c:2b:ed:90:51:fd:
                    99:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:18:40:B6:3B:E6:DF:C9:3F:92:D0:69:DB:D0:64:98:11:B3:1A:68
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/13F1C0E236DD11ECA153B666D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.206.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:39:e4:38:35:4a:fb:fa:c3:24:e2:09:d1:6c:9c:a5:70:74:
         d6:e7:2b:5c:51:f3:5d:ec:fb:4f:3c:f5:8f:72:d4:82:b3:6c:
         06:cd:9b:16:6a:0f:ef:f1:c6:8a:40:9c:7f:15:58:cb:f4:5d:
         4a:f6:c6:2a:d2:1e:35:f4:55:11:4f:f3:54:34:95:16:3a:09:
         f0:a9:50:63:28:c6:f5:7b:f5:e2:75:49:29:c1:00:6b:a9:cd:
         7a:83:a0:22:43:c2:5c:d9:fb:ab:a3:47:4d:db:2d:6d:f2:53:
         65:18:4d:ed:6f:bc:57:2d:af:18:76:25:2e:cc:c2:7b:fb:10:
         43:0b:67:f9:ce:45:b6:fb:df:5b:3c:b8:7e:fe:6d:e5:93:b3:
         45:be:e1:a6:9e:5d:ad:7a:e8:5b:f6:66:94:c0:76:0e:5a:a0:
         ed:68:b9:9f:b0:5d:00:66:cd:c8:d7:44:5b:79:7c:de:a1:a2:
         8f:01:61:86:56:4a:9f:fe:24:7f:95:07:24:61:15:45:94:7a:
         80:d6:05:2d:67:52:90:f5:06:8a:6a:b7:f3:4a:8a:8e:89:7d:
         e8:ea:b3:5d:21:f1:4d:0e:30:8c:f4:55:ac:cc:9d:9c:9f:4b:
         3b:b9:35:bf:96:63:d4:fa:15:e2:ae:39:7d:08:1b:fa:fe:8f:
         46:c5:da:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----