Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/530BC958A43311ECAE20859D5A40D577.roa
File:                     530BC958A43311ECAE20859D5A40D577.roa (raw, json)
Hash identifier:          RkDj+02WpwWiDkI8fcp8OFQO7ASwDfIL/BOxVJj+89g=
Subject key identifier:   88:55:34:D1:77:A2:57:71:73:8D:DA:65:07:B9:75:A4:D0:E2:71:36
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       125D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/530BC958A43311ECAE20859D5A40D577.roa
Signing time:             Tue 15 Mar 2022 07:41:29 +0000
ROA not before:           Tue 15 Mar 2022 07:41:25 +0000
ROA not after:            Sat 31 Dec 2022 07:41:25 +0000
asID:                     133201
IP address blocks:        156.255.8.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4701 (0x125d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Mar 15 07:41:25 2022 GMT
            Not After : Dec 31 07:41:25 2022 GMT
        Subject: CN=62304328-c928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3d:0d:a0:aa:07:84:e7:c2:b9:16:8c:70:00:
                    c5:4a:33:59:ed:d9:d3:0c:30:4b:13:50:df:f2:ed:
                    b6:86:cc:50:79:fc:e0:21:9a:26:b7:ff:51:18:c5:
                    0d:87:5e:3c:18:e7:9a:90:c3:cd:f4:f9:ba:5e:fb:
                    4e:08:b2:24:6d:98:f8:91:36:da:3f:91:9f:a3:f9:
                    c3:af:ce:01:2d:ea:c1:59:c4:17:55:d5:54:1a:cf:
                    0d:e8:26:49:24:2d:f1:68:ef:91:ab:0e:1d:e0:a9:
                    d4:57:d1:0c:05:28:45:39:9a:d3:af:1d:22:8a:a1:
                    16:bf:5c:eb:66:32:2a:17:5d:32:c7:1f:0c:62:34:
                    51:0f:54:c1:bd:71:fc:66:8a:aa:4f:54:5e:3a:2a:
                    57:c5:33:f9:81:df:62:3b:e6:1c:94:af:72:78:58:
                    38:cf:17:34:5f:67:2d:a7:5f:a3:bf:df:75:66:a1:
                    67:8b:08:dd:c4:6f:25:bb:93:c8:39:07:f4:37:2c:
                    c0:55:ad:2f:00:d3:02:eb:05:50:a7:d1:8a:c3:9c:
                    ed:09:57:68:16:8a:35:97:9e:cd:59:77:fb:84:33:
                    d6:49:79:4c:a8:c2:e6:c9:a1:ee:5e:ae:de:56:30:
                    19:16:62:b4:d3:3f:c8:ea:5e:d2:82:b8:eb:8f:da:
                    8a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:55:34:D1:77:A2:57:71:73:8D:DA:65:07:B9:75:A4:D0:E2:71:36
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/530BC958A43311ECAE20859D5A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.255.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:d5:38:56:1e:35:b6:c2:15:3c:dd:71:77:39:61:f1:bd:83:
         f7:eb:54:ff:55:86:27:1e:ea:3e:cd:d5:33:c0:9f:80:6a:77:
         d9:ec:df:e1:83:77:d5:8f:dd:82:eb:b3:33:20:74:04:7f:4b:
         e9:3d:bc:7b:81:c2:e5:6e:49:17:7f:6a:48:6e:bc:fd:5a:4a:
         48:b2:cb:b7:02:83:95:c2:78:b9:07:e0:9c:b9:41:f8:3d:fb:
         6f:79:a5:c6:49:89:88:76:e7:f6:16:5a:db:d5:20:50:ce:c7:
         07:1c:1c:6f:2d:34:41:60:9f:11:9c:0b:81:e8:b2:dc:e4:ef:
         15:61:2a:b3:66:34:d2:6a:75:46:57:f6:b9:ed:4c:5a:5a:4e:
         63:5d:d7:d6:66:f2:aa:63:71:c4:4a:a5:59:a6:4b:92:be:8d:
         d8:c5:e9:d3:1d:60:3f:9e:c9:10:e8:cf:a8:df:82:b7:02:0e:
         39:e5:e4:4c:bb:be:76:df:8e:5b:1e:1b:30:ec:26:39:45:b7:
         a3:f9:f1:03:64:0c:21:db:db:28:fd:c6:7a:5d:b5:a0:50:d4:
         4c:6b:a6:79:dd:55:31:a4:47:f6:ae:5c:f9:ad:c0:fd:bb:b0:
         f5:11:a2:fd:ab:70:d9:f9:e5:30:e2:8e:03:1d:89:d1:97:ac:
         df:ac:3c:b3
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICEl0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMjAzMTUwNzQxMjVaFw0yMjEyMzEwNzQxMjVaMBgxFjAU
BgNVBAMMDTYyMzA0MzI4LWM5MjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDOPQ2gqgeE58K5FoxwAMVKM1nt2dMMMEsTUN/y7baGzFB5/OAhmia3/1EY
xQ2HXjwY55qQw830+bpe+04IsiRtmPiRNto/kZ+j+cOvzgEt6sFZxBdV1VQazw3o
JkkkLfFo75GrDh3gqdRX0QwFKEU5mtOvHSKKoRa/XOtmMioXXTLHHwxiNFEPVMG9
cfxmiqpPVF46KlfFM/mB32I75hyUr3J4WDjPFzRfZy2nX6O/33VmoWeLCN3EbyW7
k8g5B/Q3LMBVrS8A0wLrBVCn0YrDnO0JV2gWijWXns1Zd/uEM9ZJeUyowubJoe5e
rt5WMBkWYrTTP8jqXtKCuOuP2oonAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUiFU0
0XeiV3FzjdplB7l1pNDicTYwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzUzMEJDOTU4QTQzMzExRUNBRTIwODU5RDVBNDBENTc3LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKc/wgwDQYJKoZIhvcNAQELBQAD
ggEBAIzVOFYeNbbCFTzdcXc5YfG9g/frVP9Vhice6j7N1TPAn4Bqd9ns3+GDd9WP
3YLrszMgdAR/S+k9vHuBwuVuSRd/akhuvP1aSkiyy7cCg5XCeLkH4Jy5Qfg9+295
pcZJiYh25/YWWtvVIFDOxwccHG8tNEFgnxGcC4Hostzk7xVhKrNmNNJqdUZX9rnt
TFpaTmNd19Zm8qpjccRKpVmmS5K+jdjF6dMdYD+eyRDoz6jfgrcCDjnl5Ey7vnbf
jlseGzDsJjlFt6P58QNkDCHb2yj9xnpdtaBQ1ExrpnndVTGkR/auXPmtwP27sPUR
ov2rcNn55TDijgMdidGXrN+sPLM=
-----END CERTIFICATE-----