Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5DE5856CE90D11EBA8DF0F6AD8A014CE.roa
File:                     5DE5856CE90D11EBA8DF0F6AD8A014CE.roa (raw, json)
Hash identifier:          NJmLtjdMnyDYDUEGUoYWEaOpJYyKLpbpLOxwRJSMNHE=
Subject key identifier:   78:74:87:E8:B1:D2:FD:0F:FD:0D:43:B6:85:D7:3B:9D:CA:35:23:1F
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0786
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5DE5856CE90D11EBA8DF0F6AD8A014CE.roa
Signing time:             Tue 20 Jul 2021 03:48:46 +0000
ROA not before:           Tue 20 Jul 2021 03:48:42 +0000
ROA not after:            Thu 15 Sep 2022 03:48:42 +0000
asID:                     1239
IP address blocks:        45.197.176.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1926 (0x786)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jul 20 03:48:42 2021 GMT
            Not After : Sep 15 03:48:42 2022 GMT
        Subject: CN=60f6479e-f257
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:10:68:7d:96:69:17:57:49:fe:34:2c:24:08:
                    f4:9a:4b:19:88:15:28:98:ad:ef:a2:0d:a1:e7:02:
                    63:87:84:28:6c:69:9c:72:79:22:d8:f4:27:0b:a4:
                    22:c6:12:22:d4:75:a6:14:6f:14:2f:c7:18:a7:df:
                    21:1a:e6:3d:f3:73:89:2a:9e:66:12:76:a5:5d:32:
                    0a:07:8a:51:08:1c:ec:de:53:76:93:f9:2a:94:d6:
                    f2:bf:d6:d0:7c:0d:4f:3f:42:d2:ef:a3:b7:9e:0e:
                    cc:de:22:63:99:91:40:dc:e2:fe:b3:c3:bd:e4:94:
                    0e:89:a8:80:53:99:1c:47:f4:78:a9:d9:a1:0e:75:
                    3a:c8:7f:fe:ee:b1:69:40:e2:6d:a7:9b:4d:9e:7c:
                    18:7b:ed:59:6b:b7:e1:3f:08:88:ba:0c:ed:2e:45:
                    90:46:0c:a9:99:40:5a:c6:34:01:51:33:3d:37:ef:
                    e4:0e:e8:44:23:25:af:80:b0:a6:91:58:63:b4:c3:
                    73:ae:c1:3f:0f:2b:1f:82:9e:d0:be:61:74:92:20:
                    1e:ce:9e:a6:06:57:c2:17:33:19:63:3c:a9:72:08:
                    57:ba:c2:e2:f9:65:b8:a4:4a:6a:ae:3b:cf:ab:55:
                    70:a0:77:9f:ef:5c:ab:3a:da:78:a3:3e:da:54:8d:
                    f4:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:74:87:E8:B1:D2:FD:0F:FD:0D:43:B6:85:D7:3B:9D:CA:35:23:1F
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5DE5856CE90D11EBA8DF0F6AD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.197.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         79:3d:90:ec:6f:7a:2a:23:99:6f:fe:73:9c:b7:03:a1:1d:c0:
         c3:ba:4a:87:57:63:9c:bf:d7:9d:b7:7f:8f:1a:c8:d4:44:db:
         03:e7:29:1e:2d:83:86:84:88:2e:3e:30:57:26:74:db:3b:6a:
         ea:aa:25:9f:66:97:f1:60:4a:e3:33:19:c5:d2:01:0d:14:ce:
         29:2c:06:a1:8f:b9:ab:73:5f:50:aa:52:13:5d:0f:f1:af:01:
         d1:ef:94:31:33:5d:bd:62:c6:54:ec:d3:7b:59:18:21:12:c4:
         2d:10:27:c2:f7:7d:89:e9:a6:f1:62:45:bd:a1:37:f3:1e:30:
         da:ab:3b:19:f2:87:a8:27:f1:ee:9a:7d:db:45:d8:64:7f:78:
         da:d5:0c:1b:d8:f7:0d:41:e8:bf:9e:33:9a:dd:c5:4d:fe:90:
         5e:2d:28:00:b0:8d:9a:96:3f:e9:d3:72:4d:3d:b3:51:95:f1:
         04:b2:13:6d:d0:f5:d1:b0:f9:4e:3a:9e:de:87:9e:3c:74:88:
         65:27:9e:73:5e:e0:35:43:c5:2e:2c:50:3a:57:5a:b7:41:2a:
         64:8a:ba:8b:df:c5:f3:a1:e8:12:57:39:4a:6a:20:81:43:00:
         01:c3:75:b4:e3:65:5a:ed:37:e0:40:9f:14:3a:7c:fd:26:a9:
         27:35:89:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----