Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/402C6C0C488A11ECB55F313FD8A014CE.roa
File:                     402C6C0C488A11ECB55F313FD8A014CE.roa (raw, json)
Hash identifier:          ycN99DWMxfnCqAKFKXO0oK6i9qUmySf+w/JTH/NX2+0=
Subject key identifier:   22:D8:DA:4E:37:17:FC:35:9E:79:1D:A1:E0:78:0A:F7:2E:63:72:82
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0E33
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/402C6C0C488A11ECB55F313FD8A014CE.roa
Signing time:             Thu 18 Nov 2021 16:11:56 +0000
ROA not before:           Fri 19 Nov 2021 16:11:53 +0000
ROA not after:            Sat 19 Nov 2022 16:11:53 +0000
asID:                     139879
IP address blocks:        156.249.200.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3635 (0xe33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 19 16:11:53 2021 GMT
            Not After : Nov 19 16:11:53 2022 GMT
        Subject: CN=61967b4c-7dd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:60:39:d7:d0:23:50:49:5c:b6:c6:64:0b:f9:
                    87:3b:31:da:91:f1:5b:f2:69:8c:58:1f:0b:b6:01:
                    f3:3c:cf:30:61:55:88:9c:56:28:5c:3f:39:dd:23:
                    e8:b2:c6:c4:28:67:02:f0:12:b5:21:4c:fa:37:47:
                    51:e0:39:80:71:32:9e:76:a0:7a:b6:b8:8e:49:34:
                    a9:0f:cd:db:7f:ab:92:fe:fb:c8:cc:7f:65:27:54:
                    4a:75:75:ca:76:a7:9b:c7:26:9e:b1:aa:f6:61:9c:
                    59:c2:dc:40:1c:de:85:9b:33:4d:6d:d0:af:fb:79:
                    d1:4a:9f:37:4c:bb:88:6b:18:0a:21:14:92:f5:d5:
                    14:68:05:bd:95:85:05:8d:8b:24:08:ca:4d:9b:dc:
                    db:11:1b:68:fb:55:da:fc:79:bc:d9:52:1d:a0:de:
                    68:f3:4c:14:ed:5a:ff:92:42:50:e2:f8:e9:cf:9e:
                    99:e6:79:cb:0a:26:c5:74:ea:26:17:93:8a:df:dd:
                    36:4a:94:f2:60:39:cb:93:21:21:98:4a:97:5f:85:
                    ba:80:66:26:19:dd:53:f8:15:74:b0:74:29:58:b0:
                    e6:29:c9:31:c2:92:1e:5b:8a:fe:cf:c3:0f:ee:fe:
                    5c:38:6d:31:32:31:06:a8:f4:6b:6f:81:59:b4:ce:
                    a0:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:D8:DA:4E:37:17:FC:35:9E:79:1D:A1:E0:78:0A:F7:2E:63:72:82
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/402C6C0C488A11ECB55F313FD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.249.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:94:ca:fc:04:c3:a5:4b:89:54:4e:69:17:6a:ca:df:bc:e3:
         70:d8:c9:7a:08:4a:07:88:53:44:3d:4f:a9:a8:51:f3:50:80:
         38:d1:5f:35:eb:c2:46:1d:f0:73:ca:a0:0a:06:6c:3c:47:c1:
         5f:58:1c:e0:10:84:6a:b7:3d:27:c7:95:a1:a0:dc:c3:09:f8:
         34:bc:2f:c1:09:87:8a:a0:ca:f9:6d:69:e8:d5:cd:4d:f3:d8:
         f3:71:8e:65:f3:2d:3d:ea:1e:d4:aa:ab:02:e6:14:f1:2b:cc:
         d2:0a:c8:f4:c1:fc:37:ef:85:6b:8c:1e:af:a7:cc:d7:a8:4b:
         eb:2e:72:b2:47:f4:af:66:42:0d:7b:b7:0e:ac:28:7e:17:3a:
         0e:eb:19:c6:61:20:c3:d3:92:c7:50:f1:ed:5d:fa:25:23:01:
         78:19:8e:2e:41:b6:f7:92:61:1c:49:16:3f:6f:96:50:17:46:
         51:f8:fe:27:70:b3:4d:ea:61:09:35:90:6d:0d:fa:23:27:6e:
         7e:a5:32:e8:4b:9e:02:8f:13:e1:20:0c:03:85:b6:9e:74:31:
         d7:ef:15:5d:02:49:f7:b7:70:39:a0:4d:ca:5b:32:5f:63:bc:
         c3:91:35:e9:21:92:96:a6:6f:f9:af:37:8f:5d:a0:44:8a:8e:
         6a:8d:1b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----