Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/38BBBF5C21CB11EDA96AA493F1222468.roa
File:                     38BBBF5C21CB11EDA96AA493F1222468.roa (raw, json)
Hash identifier:          8mq2unHcsn9guOAxTjjrYOO3IkeDg1FEsPf3aPXUDe4=
Subject key identifier:   F8:5B:54:27:6F:23:87:3B:BF:9C:BD:40:74:AD:E7:D3:E5:F6:9A:27
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       16E4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/38BBBF5C21CB11EDA96AA493F1222468.roa
Signing time:             Mon 22 Aug 2022 03:33:43 +0000
ROA not before:           Mon 22 Aug 2022 03:33:38 +0000
ROA not after:            Fri 30 Dec 2022 03:33:38 +0000
asID:                     35916
IP address blocks:        45.203.0.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5860 (0x16e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 22 03:33:38 2022 GMT
            Not After : Dec 30 03:33:38 2022 GMT
        Subject: CN=6302f917-ac2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0d:8b:7c:f3:36:a7:17:b3:bc:5d:56:ef:6c:
                    31:2a:2c:88:50:1a:dd:53:29:b7:3d:02:a4:61:6e:
                    21:aa:f9:c7:77:f4:3e:8f:2a:ea:64:71:7f:19:5f:
                    8c:1c:41:54:48:8a:4e:5a:9d:9c:df:34:aa:7e:ac:
                    d6:86:b2:55:bf:d9:d1:b3:d4:06:5b:83:f0:4c:97:
                    68:91:53:ba:22:2f:88:5e:dc:bf:55:2d:73:02:ca:
                    05:72:aa:29:23:fc:c7:44:1c:5d:99:f1:14:64:92:
                    7a:fd:8a:a7:a6:22:b8:9d:58:e3:06:57:8d:2b:f2:
                    a6:de:c2:fe:0b:c8:87:cb:3e:96:17:45:ce:f2:02:
                    e8:b1:e2:ad:47:5e:43:8d:34:28:8d:2c:2a:36:50:
                    df:09:77:b2:d4:85:bf:59:34:50:1e:07:d0:74:51:
                    5e:ba:12:9f:ea:08:ca:ee:f4:06:9d:2b:4a:c6:05:
                    84:a6:70:a4:4c:a8:0c:6b:a3:67:a8:81:71:16:4b:
                    76:29:41:46:6b:0c:bc:3a:4f:dd:93:e7:43:0e:c4:
                    50:1e:b5:97:d2:78:2a:0f:7c:50:fa:5b:0d:2c:7e:
                    11:39:98:9a:9c:6e:ba:2e:b0:a8:19:04:1c:61:78:
                    3f:a8:e9:01:fa:a6:8b:13:de:57:48:78:3b:4a:60:
                    ee:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:5B:54:27:6F:23:87:3B:BF:9C:BD:40:74:AD:E7:D3:E5:F6:9A:27
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/38BBBF5C21CB11EDA96AA493F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.203.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         05:42:6b:5c:07:cb:58:bf:5d:3a:be:62:b5:68:1d:c6:55:bd:
         cb:43:8c:56:82:0b:93:1f:ca:02:0f:42:c2:aa:a9:1c:6f:eb:
         67:d1:da:43:ea:6d:7e:00:40:8b:62:5c:b3:66:33:4d:14:84:
         39:b2:c7:04:2e:b9:04:a5:b3:75:18:ed:1e:d8:d9:ad:88:aa:
         92:13:63:32:63:d5:fc:c4:70:4a:11:57:3e:6b:54:0e:71:80:
         d6:0e:70:09:6b:0d:f7:03:dd:31:37:da:01:f0:b0:81:40:23:
         c9:95:da:e9:ae:76:3b:ea:26:33:9d:59:63:81:a6:fc:29:1d:
         43:8b:2e:94:73:06:75:b1:dd:6a:38:73:40:5d:de:36:c0:db:
         27:84:88:01:07:20:25:27:44:1b:c1:e4:42:1d:90:67:83:a2:
         dc:8a:48:c1:17:23:ae:2f:c0:37:47:10:aa:f0:c5:d0:14:7f:
         16:c9:4c:e5:dc:15:9c:81:a5:46:87:82:40:b8:13:fe:fa:74:
         b8:7a:1d:67:ec:55:65:c7:8e:2c:4c:32:95:22:1c:f0:d4:9b:
         1c:01:2d:c8:dc:51:53:78:da:0e:90:d0:46:1e:ec:a6:f0:49:
         26:60:da:5b:98:55:46:99:fe:2b:d5:09:91:c9:b6:77:17:10:
         66:95:a5:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----