Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F3E751A36CE11EC9D33AF4DD8A014CE.roa
File:                     3F3E751A36CE11EC9D33AF4DD8A014CE.roa (raw, json)
Hash identifier:          Q88HdhNNOyIpDKAkR3PRJQaLor5smdzz1edxu8kI3Nk=
Subject key identifier:   96:63:21:A5:F3:BE:1D:6D:09:6B:A6:52:DA:74:E9:6C:91:B9:35:87
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0ABD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F3E751A36CE11EC9D33AF4DD8A014CE.roa
Signing time:             Wed 27 Oct 2021 02:33:19 +0000
ROA not before:           Wed 27 Oct 2021 02:33:16 +0000
ROA not after:            Thu 27 Oct 2022 02:33:16 +0000
asID:                     58895
IP address blocks:        45.206.213.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2749 (0xabd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 27 02:33:16 2021 GMT
            Not After : Oct 27 02:33:16 2022 GMT
        Subject: CN=6178ba6f-36ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:57:af:0d:7c:3c:95:fa:53:68:4c:d3:92:8f:
                    5a:c0:7a:bb:b0:bf:ae:a7:90:b2:a2:44:dd:c1:b1:
                    6d:2b:2f:fc:4d:9f:51:0f:be:36:1a:b6:ef:7e:4f:
                    16:94:6f:87:27:b5:c0:2e:44:58:d9:55:3a:b1:6d:
                    2d:de:fe:f8:c8:46:d0:78:9b:0d:d8:49:ff:f3:fd:
                    0d:ce:99:a5:4f:cb:72:b3:1a:47:94:54:9c:10:d8:
                    1e:51:43:b8:85:e1:cd:49:17:59:73:ac:83:a0:8a:
                    83:4c:f9:75:80:91:ae:02:6a:0f:b3:93:c6:14:6b:
                    2a:17:bb:6e:8e:68:be:63:e5:b2:ca:58:d7:aa:91:
                    34:8f:52:59:a5:c2:f6:50:d9:83:57:d9:2e:d2:d2:
                    bc:9a:54:15:ce:92:14:a1:ec:08:82:1e:cc:10:0a:
                    32:c2:ed:34:28:79:ad:76:4f:b4:b1:b9:0b:3a:13:
                    06:74:98:8a:54:bf:2e:48:a9:cb:6d:6c:c2:4c:ca:
                    e1:c7:08:ed:cc:50:58:22:ba:62:3e:5f:b6:5e:54:
                    b5:13:94:fe:79:97:2a:56:8d:a2:aa:93:43:b1:a6:
                    63:9e:84:fb:c9:0e:ef:d2:d2:59:cc:e7:b1:f0:8e:
                    b6:65:17:a1:29:ca:3f:8e:32:da:04:0a:fe:94:6b:
                    b7:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:63:21:A5:F3:BE:1D:6D:09:6B:A6:52:DA:74:E9:6C:91:B9:35:87
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F3E751A36CE11EC9D33AF4DD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.206.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:6a:0a:d3:49:6a:b4:a6:1b:29:ae:00:75:10:ff:a3:d1:f3:
         0e:dc:e7:82:fd:a5:15:60:b2:08:fb:ec:93:53:6e:cb:f6:c5:
         8a:b9:a4:20:8b:15:5d:a3:c4:40:a2:2f:25:de:2a:36:4f:61:
         4e:1b:c7:2b:a8:8b:63:49:a0:58:84:73:f3:6d:07:f9:5a:43:
         38:22:45:ee:95:c2:2e:3c:78:4b:07:74:dc:ac:ea:cd:9d:bb:
         33:5c:e1:11:71:7c:17:93:ba:81:49:db:97:e2:35:cc:cb:bf:
         30:5f:f9:37:4b:3c:3c:c0:56:e6:e1:8c:b8:6a:f7:9b:2b:84:
         3d:dc:e5:64:6e:dc:d2:5b:8e:c3:11:ad:41:42:b0:8f:64:f3:
         c7:3b:1d:d2:a8:c9:31:fe:d6:40:56:51:b6:bc:10:20:9a:83:
         4e:fc:29:60:61:f6:8e:00:46:3c:93:43:26:7c:98:6e:a0:c3:
         9e:34:fe:d7:9a:b2:1f:90:6b:9f:d3:f2:0d:c5:da:bc:0c:70:
         ce:89:bb:7e:43:c8:7e:19:11:c2:e4:3e:62:97:36:f4:fc:82:
         78:d7:86:4d:72:35:b5:12:e1:f5:8b:b8:8e:fd:6e:b7:a0:f1:
         bd:58:f1:1b:f4:a9:18:7f:c3:96:c0:16:ac:c4:d7:fa:22:9d:
         c7:f0:d4:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----