Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5EC9B90A36D611ECA58B715CD8A014CE.roa
File:                     5EC9B90A36D611ECA58B715CD8A014CE.roa (raw, json)
Hash identifier:          AkSEyJ0cZVMC/f9NxQOrzf8GgQ9/hHisSJv0eHL4hPg=
Subject key identifier:   27:7C:7E:DD:87:A4:EA:B7:09:F9:C8:B9:8D:9F:10:97:A4:DB:26:CF
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0AF0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5EC9B90A36D611ECA58B715CD8A014CE.roa
Signing time:             Wed 27 Oct 2021 03:31:28 +0000
ROA not before:           Wed 27 Oct 2021 03:31:25 +0000
ROA not after:            Thu 27 Oct 2022 03:31:25 +0000
asID:                     58895
IP address blocks:        45.206.37.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2800 (0xaf0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 27 03:31:25 2021 GMT
            Not After : Oct 27 03:31:25 2022 GMT
        Subject: CN=6178c810-ebaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:7e:6f:bd:95:2a:11:b6:51:32:3d:77:e9:5c:
                    b0:4b:ce:61:65:a4:f4:fd:36:fd:37:e5:b5:ff:cd:
                    d9:fc:93:73:76:d1:d6:a6:88:a0:69:1b:3b:96:69:
                    e0:63:b3:02:b2:2c:60:0e:25:1f:3a:77:b2:3f:1d:
                    c2:bf:7a:46:5f:63:cf:4f:25:3a:9f:16:53:b9:86:
                    98:74:97:c9:ca:f4:1c:99:38:da:11:b7:66:b5:22:
                    3a:9b:42:68:85:38:c4:0f:1a:b5:e6:a8:85:35:66:
                    d8:1e:8e:3e:6e:f5:82:32:ad:55:5a:c9:22:a4:33:
                    4d:60:a9:cc:17:dc:73:67:45:f3:c0:9c:16:cb:08:
                    32:47:8e:ee:99:07:f8:0b:2c:31:84:66:ed:01:16:
                    7d:0f:7d:45:c3:d3:26:e8:c4:01:fd:38:53:f8:5b:
                    df:a1:4b:ef:05:17:1d:6b:11:b8:70:20:76:a9:c7:
                    ae:80:50:f5:1e:2e:ca:9c:ae:dd:23:81:29:ed:cd:
                    bf:c7:b6:8e:fe:9d:27:80:87:f1:66:20:79:a7:58:
                    02:09:c0:02:79:fd:2d:f1:f0:e3:85:0d:fa:49:c9:
                    9f:8c:00:6d:f4:59:15:08:90:30:35:bb:45:19:cc:
                    97:94:00:9b:e5:f6:4b:61:47:28:f4:42:64:66:0a:
                    63:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:7C:7E:DD:87:A4:EA:B7:09:F9:C8:B9:8D:9F:10:97:A4:DB:26:CF
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5EC9B90A36D611ECA58B715CD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.206.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:89:63:6f:19:3e:11:11:ed:b3:18:43:56:13:9f:f4:b7:4c:
         d2:45:29:39:23:9f:6f:75:76:04:66:62:4d:5b:a7:be:40:d4:
         5d:23:5e:a5:09:ab:ab:82:d5:6b:76:6f:19:60:23:35:d2:b4:
         21:26:f9:84:d9:57:c1:22:d5:5b:b9:e2:8a:7d:cf:13:05:e1:
         60:56:45:f3:46:13:33:5f:63:a4:33:bf:d9:cd:36:39:f6:49:
         a4:6c:4e:a7:6c:3a:55:98:e4:8d:aa:0f:73:02:4d:57:4f:17:
         be:bc:91:ad:c5:bc:fd:78:07:d8:90:21:d4:4d:84:b8:55:41:
         a2:2a:61:11:2a:03:54:d9:9e:4b:19:7e:0d:f3:96:69:43:01:
         34:da:3e:0d:c1:c2:86:5c:85:e7:43:25:8a:c1:10:d0:6d:78:
         93:d6:c2:57:0b:88:bf:14:8e:5b:db:30:f4:61:2e:aa:33:2f:
         67:d1:1f:67:09:bb:a6:39:d5:44:44:28:cf:c0:a3:b4:89:71:
         7d:e7:d4:45:89:e8:0f:2e:1d:31:31:f6:7c:d0:73:63:11:20:
         5b:62:ef:2d:84:39:cb:da:18:1d:e9:e7:36:81:3c:a9:56:53:
         ae:03:24:e5:ef:5a:25:34:b8:d8:6e:c0:62:dd:40:28:cf:d3:
         08:b1:cb:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----