Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1A4E74BE404211EF93B87892762E951A.roa
File:                     1A4E74BE404211EF93B87892762E951A.roa (raw, json)
Hash identifier:          koA5e3Gp5mcygN1YLVutLhzzt+gzEBBxgLo8gBUoFQ4=
Subject key identifier:   65:A4:C1:CE:F3:38:E8:FB:18:B3:67:D9:50:82:6E:6A:A9:1B:34:11
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       9BE1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1A4E74BE404211EF93B87892762E951A.roa
Signing time:             Fri 12 Jul 2024 11:30:13 +0000
ROA not before:           Fri 12 Jul 2024 11:30:09 +0000
ROA not after:            Tue 13 Aug 2024 11:30:09 +0000
asID:                     138915
IP address blocks:        156.244.23.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39905 (0x9be1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jul 12 11:30:09 2024 GMT
            Not After : Aug 13 11:30:09 2024 GMT
        Subject: CN=669113c4-8549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0e:6f:56:17:c0:1c:49:ec:3a:3f:fe:4c:7e:
                    5a:19:da:7c:da:c6:8b:f8:f4:2b:b0:bc:4f:86:7b:
                    5b:b9:b1:0a:8b:62:91:0b:91:db:d5:76:9b:3e:35:
                    49:fe:ac:89:b6:35:41:44:4c:60:fb:4e:99:ec:39:
                    66:dc:39:eb:aa:a4:1f:61:93:84:e1:1b:63:42:f2:
                    80:e9:13:f3:19:50:db:1a:60:3f:ba:0f:b3:c9:1c:
                    32:d0:a2:3e:e5:51:7f:b9:0d:16:87:1f:a1:01:51:
                    db:40:53:fb:8e:70:d3:3d:c4:da:3e:7b:a6:1d:b5:
                    9e:5f:45:f0:c0:a8:4d:8b:e2:71:90:c9:61:1c:c1:
                    0d:52:4a:29:1c:bb:00:52:03:79:b8:bf:9e:50:cc:
                    30:56:43:a0:2a:91:82:28:db:be:61:99:1f:35:c4:
                    46:54:28:6c:c7:30:76:e5:64:a4:f4:13:41:b7:07:
                    a1:8c:3d:75:b5:a5:50:3b:18:cd:23:f4:d3:62:40:
                    4a:53:b7:63:e2:c8:c0:7a:fb:d4:37:d8:81:78:47:
                    68:97:3e:4b:6e:cb:ab:fc:30:03:3e:39:db:b0:11:
                    f8:8f:eb:15:b4:08:a0:d0:06:bb:b5:f9:c3:e6:fe:
                    4e:89:64:18:38:90:2f:ed:c9:ff:9c:a4:4e:be:59:
                    00:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:A4:C1:CE:F3:38:E8:FB:18:B3:67:D9:50:82:6E:6A:A9:1B:34:11
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1A4E74BE404211EF93B87892762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.244.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:1b:d8:97:81:17:5e:3c:7d:6f:4a:a5:e5:3c:d3:30:35:f1:
         4b:9d:20:a1:11:e6:b0:93:0e:fa:a7:7d:8e:cd:c8:84:92:c1:
         4a:6c:80:ed:7e:da:76:41:c0:37:95:3a:50:b7:f2:12:d6:34:
         26:a7:56:e7:21:d3:d0:e2:ff:bf:02:a2:c9:ec:5e:8b:e8:55:
         d4:b1:d1:a7:3f:11:92:8f:55:8d:6b:55:48:1f:a6:8e:48:41:
         29:58:1b:39:a7:23:ee:dd:ef:a0:8b:33:1f:a4:a4:9c:a1:4f:
         4a:35:cd:e5:2a:5f:30:5c:e4:54:58:d6:a2:d0:19:d8:db:d9:
         c9:ac:2a:dc:2c:65:ec:ec:04:44:3c:a3:f2:cc:b4:66:83:53:
         37:e5:53:d4:b1:83:93:11:e5:d4:34:a8:6c:5e:95:10:ab:91:
         14:cd:9d:f4:c6:d0:30:57:c4:22:47:6b:0e:d6:39:40:91:51:
         c6:d4:74:c2:74:4b:73:54:95:ee:56:a3:23:22:4b:9a:d3:08:
         c7:90:36:2b:e2:43:ea:59:d8:47:3b:23:1a:d0:12:8c:2f:a7:
         28:a7:2e:6a:41:58:70:4b:84:dd:6d:ef:0a:e5:93:bf:64:8c:
         f6:95:ea:f0:e1:31:4d:68:83:a7:0b:a0:92:74:5d:b2:3d:ae:
         22:94:68:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----