Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4F40AB50F1F711EDA98DB3694AD9E6FC.roa
File:                     4F40AB50F1F711EDA98DB3694AD9E6FC.roa (raw, json)
Hash identifier:          QAKSNWIa39v3Jrucz0Svr9pCDr7htbP5e+kjUcxjYDY=
Subject key identifier:   8C:81:04:BA:87:1D:2B:2A:70:41:D8:4C:C3:ED:9A:B6:93:D9:46:FE
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       24F0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4F40AB50F1F711EDA98DB3694AD9E6FC.roa
Signing time:             Sun 14 May 2023 01:33:21 +0000
ROA not before:           Sun 14 May 2023 01:33:17 +0000
ROA not after:            Thu 15 Jun 2023 01:33:17 +0000
asID:                     138995
IP address blocks:        156.227.29.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9456 (0x24f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: May 14 01:33:17 2023 GMT
            Not After : Jun 15 01:33:17 2023 GMT
        Subject: CN=64603a61-829e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:08:87:b2:b3:98:ca:51:95:6c:81:fd:e1:20:
                    f1:e9:5c:b1:0b:2d:3e:f9:c8:25:05:98:57:c6:c1:
                    10:c9:98:73:eb:2d:72:9b:4f:46:f7:cb:f1:70:f1:
                    f0:3d:a5:37:07:58:3d:76:2d:e0:64:1f:3a:80:c5:
                    77:91:3e:4d:b6:04:12:9c:0e:68:17:d3:3a:24:0f:
                    f7:f9:cb:b0:0a:ba:b3:4f:18:55:02:03:14:9e:b5:
                    b8:6f:04:9d:cd:f3:18:e8:1d:a2:2c:af:66:81:cb:
                    99:22:61:e8:92:dc:e2:56:8f:12:8f:1e:d5:19:2d:
                    6e:02:4d:a7:76:62:46:a6:38:d1:2a:1e:30:34:3d:
                    d7:31:4b:e4:4d:36:a8:44:59:47:5b:39:17:58:4d:
                    b2:38:69:89:c2:97:17:e7:a3:07:1c:56:5c:ce:bb:
                    96:8c:e7:29:42:d3:15:41:20:b5:c4:2f:cc:90:57:
                    55:6d:83:40:56:61:40:b6:6f:d5:6d:69:97:ec:e0:
                    ac:4f:6a:b1:ed:e8:69:a9:96:e2:02:67:e7:fb:9c:
                    a5:51:85:4e:65:5b:d7:b5:a3:f5:ee:bb:1e:e1:a3:
                    71:98:d5:b6:10:e2:31:8f:f2:43:46:0a:12:a4:e4:
                    be:04:49:31:2a:9f:7f:c7:f1:d4:28:0c:5d:fd:9d:
                    8e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:81:04:BA:87:1D:2B:2A:70:41:D8:4C:C3:ED:9A:B6:93:D9:46:FE
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4F40AB50F1F711EDA98DB3694AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.227.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:66:f6:8d:ac:2d:89:23:e9:73:02:22:4f:f3:39:bc:98:ee:
         2c:95:4e:b8:f8:02:8e:f9:1b:59:4b:4f:84:fd:2f:2a:2e:da:
         0f:ae:24:9d:64:95:f0:3c:c4:03:84:e5:99:29:88:fb:44:23:
         c9:c3:47:96:01:b5:c9:91:e6:dd:8d:b9:ed:46:c3:d0:a6:e5:
         83:cf:a1:cd:e3:77:15:ca:0b:a6:b9:70:86:5a:05:c3:e4:f9:
         ea:fd:f0:b8:bd:59:8d:c3:db:46:9c:ae:ce:a3:15:d3:af:2f:
         a6:4f:59:eb:ce:4d:20:ce:97:80:79:66:f2:36:d9:9a:fa:58:
         a0:e8:ae:fa:d9:76:1c:e8:2f:4f:0f:c8:ce:b0:03:ae:65:cd:
         40:6d:3d:44:5e:9d:a6:7e:a5:c0:c5:e9:4a:f2:d1:cc:25:fe:
         89:9d:1b:63:97:3a:10:e6:75:3c:b5:04:7d:fe:96:c4:54:e6:
         9d:19:a5:0a:04:7c:01:d6:50:e7:8c:7f:30:19:39:e1:ae:33:
         ef:f5:60:af:17:dd:b2:e4:8a:b9:94:de:2a:2b:74:d8:b2:68:
         b2:0e:c9:77:18:ef:97:db:82:e8:af:04:e2:ac:9d:71:1a:c3:
         47:19:42:89:21:e5:41:e1:60:3e:b9:80:2e:ee:80:55:9c:c0:
         0e:10:34:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----