Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/237D76920E4F11ED8E17EAA1F1222468.roa
File:                     237D76920E4F11ED8E17EAA1F1222468.roa (raw, json)
Hash identifier:          nI1PMY+RffHBv2g2TZ+hY67AAZ5uyNuipW2hTcJxjzc=
Subject key identifier:   30:8C:27:34:C7:3C:8B:80:F0:E7:8E:D6:66:70:C9:8F:0B:44:23:67
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       15E2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/237D76920E4F11ED8E17EAA1F1222468.roa
Signing time:             Thu 28 Jul 2022 08:27:38 +0000
ROA not before:           Thu 28 Jul 2022 08:27:34 +0000
ROA not after:            Mon 15 May 2023 08:27:34 +0000
asID:                     397630
IP address blocks:        156.225.12.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5602 (0x15e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jul 28 08:27:34 2022 GMT
            Not After : May 15 08:27:34 2023 GMT
        Subject: CN=62e2487a-5fa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:58:2f:21:3e:8f:33:41:8e:62:a9:e1:22:de:
                    06:50:25:86:20:05:89:f6:c1:cc:43:da:1b:3b:a5:
                    c7:9d:6b:6c:4c:f6:21:40:52:a6:01:2f:0e:ca:9e:
                    57:1a:a7:33:7e:42:77:5d:d4:bd:ff:78:cb:45:be:
                    13:b1:9e:f1:7e:09:41:24:a8:60:26:9b:1e:11:9b:
                    b7:e4:14:93:a5:44:81:bc:84:3e:bf:2f:4d:66:96:
                    65:63:96:dc:0a:20:e9:db:4d:cd:a1:38:a6:b6:91:
                    92:72:50:1b:c8:75:1c:72:bd:73:cd:d5:9c:bd:db:
                    56:76:d5:54:9e:7f:da:ba:20:68:39:c3:e0:ed:44:
                    60:79:75:46:37:46:c6:8e:7f:df:76:f6:a0:42:f3:
                    fb:32:fc:6c:00:4f:e1:45:2f:6c:3c:7d:05:86:15:
                    de:f3:8a:bc:6c:a6:2d:b9:49:10:b7:a3:f3:b3:2d:
                    6b:e6:e6:6c:74:39:a0:f1:1c:6e:27:d4:98:d7:05:
                    79:88:3a:e2:9a:7f:8d:6c:26:61:ba:e9:b2:96:b4:
                    12:b9:b5:54:44:ae:75:11:22:45:6b:fa:59:1f:9d:
                    b4:4d:d8:8b:0c:5b:59:8e:ec:e0:69:92:27:ef:f5:
                    56:09:4e:77:8f:c0:2a:41:a7:1f:f2:89:c5:49:31:
                    b8:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:8C:27:34:C7:3C:8B:80:F0:E7:8E:D6:66:70:C9:8F:0B:44:23:67
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/237D76920E4F11ED8E17EAA1F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.225.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:78:01:60:75:c7:da:7c:fd:0f:52:8a:2d:13:b3:c3:f9:de:
         80:c7:19:31:80:1c:35:cf:d8:12:19:a0:01:8f:9e:d2:c8:6f:
         4c:29:76:de:15:e7:31:30:d4:00:f7:fc:6b:a1:18:d5:a1:4f:
         ac:1b:d4:f4:2f:d6:2a:19:71:42:41:83:80:b3:69:c8:e5:c7:
         60:31:2a:f3:7f:30:3f:61:35:40:cd:44:9d:bf:f7:8f:eb:35:
         5d:19:6c:96:73:43:cb:f0:b5:3b:4f:3c:ea:6a:c4:38:38:23:
         0b:8d:01:1d:5a:28:36:46:0e:1a:25:02:ef:8f:90:63:0d:9f:
         31:b9:6d:f2:89:c9:ee:78:f5:5b:22:78:18:4b:9c:7b:4e:07:
         36:f6:e6:73:f2:66:20:d9:25:4f:c0:6b:5f:ec:81:ed:52:8f:
         92:8e:8e:27:37:d2:b7:c6:ec:97:39:43:ac:dd:d4:e8:55:55:
         00:af:bd:34:5d:49:9b:11:5b:6b:10:ba:29:b2:0a:03:ac:ad:
         08:63:45:95:50:8e:cb:10:91:ee:3c:7d:92:21:85:05:28:72:
         4c:98:8b:20:10:b6:f4:74:1a:d1:e9:e0:46:57:96:6b:45:e7:
         74:48:cd:90:79:18:81:a6:77:18:ca:fb:dd:db:b1:53:b5:27:
         17:4f:02:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----