Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3418262EC21811ECB7B0DC82F1222468.roa
File:                     3418262EC21811ECB7B0DC82F1222468.roa (raw, json)
Hash identifier:          77V/52WrDvZqnQRSZiCAreNDnE4p6D90iA7xpu7twYA=
Subject key identifier:   A2:16:B6:BA:2E:39:08:55:96:DE:DA:68:BB:E3:BC:F1:47:9E:92:B2
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       134F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3418262EC21811ECB7B0DC82F1222468.roa
Signing time:             Fri 22 Apr 2022 08:42:55 +0000
ROA not before:           Fri 22 Apr 2022 08:42:51 +0000
ROA not after:            Fri 30 Dec 2022 08:42:51 +0000
asID:                     328608
IP address blocks:        45.207.32.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4943 (0x134f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Apr 22 08:42:51 2022 GMT
            Not After : Dec 30 08:42:51 2022 GMT
        Subject: CN=62626a8f-081c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f1:33:93:96:ce:dc:ef:5a:a6:05:da:0c:26:
                    61:b9:66:ef:74:2f:13:50:6d:27:ca:27:15:dc:4b:
                    0a:95:d7:29:67:f4:6e:eb:a1:6c:a5:cb:5e:53:f0:
                    42:80:c3:de:be:7c:d8:1c:12:12:cc:18:4d:8d:3e:
                    83:af:f1:06:1d:8d:f0:31:71:10:a1:cd:cc:14:8a:
                    34:04:1a:07:53:7a:c2:6a:27:02:a6:7f:38:2d:30:
                    e0:11:cb:91:de:47:c5:c8:59:c1:0f:01:08:d7:29:
                    90:c0:c0:68:1f:fb:4a:a4:d1:41:f2:4c:40:99:58:
                    fb:e9:c0:0f:3c:69:e6:0d:cb:4f:d7:3e:98:2e:a5:
                    fa:44:1e:96:fe:7c:0f:f1:b6:ab:61:e1:6f:b6:86:
                    d8:6d:b3:38:2c:0c:35:21:21:7c:69:1a:5e:79:ed:
                    b3:a2:1a:1f:b2:7e:9f:f8:66:c8:32:bd:fa:1a:f1:
                    db:d4:9e:80:49:17:e3:58:69:35:a8:7f:b8:8b:0c:
                    e4:32:7d:17:56:0f:66:7c:66:06:3b:87:d0:d3:25:
                    f0:4c:d4:69:33:88:dd:78:ba:21:6a:61:32:5b:1f:
                    b7:7c:e9:a5:87:df:d4:60:58:fe:17:8b:a4:16:ae:
                    4e:f6:67:29:3c:7f:29:a0:1a:12:13:c0:40:a8:86:
                    cf:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:16:B6:BA:2E:39:08:55:96:DE:DA:68:BB:E3:BC:F1:47:9E:92:B2
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3418262EC21811ECB7B0DC82F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.207.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         1e:01:14:b2:8b:4a:0d:20:ff:88:50:62:c9:84:9e:bf:b6:c8:
         d3:e8:41:06:cf:d6:10:de:a3:e7:2d:52:49:f7:06:10:f0:00:
         5d:68:39:0b:12:b2:b7:96:36:f7:ea:f6:f1:5c:77:64:87:0d:
         9e:b6:c6:9c:1b:3e:e5:6a:5c:73:d1:a1:3b:66:a8:e3:86:70:
         cc:28:0a:2c:fa:7c:3b:b3:b0:e2:73:76:dc:02:1b:dd:53:7b:
         64:0c:8b:0c:8c:48:08:28:c0:b3:e0:c6:d8:6d:38:7e:1d:af:
         5b:dd:df:35:6c:39:df:67:10:d5:0b:6e:6c:7d:7a:80:1f:94:
         a8:a2:4a:e3:80:7c:7b:71:da:13:2b:7c:d8:04:f9:48:22:99:
         c3:44:b3:4c:96:67:7f:34:2d:ed:ee:7f:64:7d:0e:eb:70:b0:
         7b:e4:19:a8:39:03:d1:c2:ce:10:d2:7f:c1:5f:b2:8b:1f:29:
         c9:5a:64:15:a0:73:98:bd:3d:7c:0b:f5:61:5d:24:9f:2d:e5:
         ed:4a:c0:f8:f0:9c:ab:62:7f:ac:9b:be:8e:c8:2b:8b:14:08:
         cf:37:c7:65:fc:c9:65:b8:bd:8d:b1:3d:2e:de:65:6c:ce:74:
         3e:17:63:ec:4e:9d:cf:1e:41:92:fb:93:e7:3d:10:2a:d6:9c:
         00:4f:d1:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----