Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/622BC56CBC6E11EBB088107BF8AEA228.roa
File:                     622BC56CBC6E11EBB088107BF8AEA228.roa (raw, json)
Hash identifier:          FPEL2484qloKG98Ewk+C8yyw++KJ7R1DeXLwTdRI7KU=
Subject key identifier:   6D:1A:9A:ED:97:71:4E:1B:C2:42:6D:07:85:36:5D:B6:7E:7F:3C:89
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       05EF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/622BC56CBC6E11EBB088107BF8AEA228.roa
Signing time:             Mon 24 May 2021 08:59:44 +0000
ROA not before:           Mon 24 May 2021 08:59:40 +0000
ROA not after:            Sun 24 Jul 2022 08:59:40 +0000
asID:                     1239
IP address blocks:        45.195.80.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1519 (0x5ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: May 24 08:59:40 2021 GMT
            Not After : Jul 24 08:59:40 2022 GMT
        Subject: CN=60ab6b00-0be0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c7:4a:ea:24:4e:a4:a2:d6:fd:b7:16:86:b2:
                    7d:6e:74:16:d4:0f:54:da:93:be:c9:89:c3:07:0c:
                    18:72:c9:38:80:92:60:fc:6b:11:41:4d:95:8f:50:
                    c5:d3:01:9a:95:5a:e3:83:7f:a9:42:8a:4e:ab:d0:
                    64:43:e9:30:0e:4a:b9:83:00:c4:e8:0a:55:75:ca:
                    4b:f3:5f:60:74:65:32:3d:05:f2:78:48:b6:e7:aa:
                    49:8d:c3:93:c8:fc:2a:8f:07:9f:87:91:26:cf:8c:
                    1a:99:2c:12:30:7a:6f:94:83:ce:b3:23:71:37:9f:
                    29:08:7b:49:aa:0e:f2:d7:53:77:a3:c4:6e:30:5b:
                    4a:bb:12:31:0d:e8:40:1a:02:77:fe:bc:1d:81:fe:
                    59:1c:c1:cb:e3:18:7b:bc:a9:17:85:6a:2f:7f:a6:
                    00:96:66:e4:23:c2:8d:e3:df:9e:6c:f6:f8:0a:30:
                    fd:64:c9:06:31:52:2c:c6:ce:ca:82:d0:37:a6:d3:
                    aa:8c:d0:bb:3f:76:29:6e:06:7b:de:b2:16:a6:9a:
                    1e:35:f8:af:93:83:68:c5:33:d1:a3:92:59:63:f1:
                    8e:4f:67:b2:d3:7c:63:1e:56:ff:66:ee:88:e3:bb:
                    2a:3c:a1:da:8d:c5:99:bd:1d:34:83:cf:43:1b:d5:
                    a5:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:1A:9A:ED:97:71:4E:1B:C2:42:6D:07:85:36:5D:B6:7E:7F:3C:89
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/622BC56CBC6E11EBB088107BF8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:ff:4b:15:a9:c7:b7:37:15:90:33:e2:d1:7e:b7:4f:db:6b:
         92:6a:df:60:ef:76:80:bd:18:77:8d:1e:76:8f:36:e9:60:9a:
         cf:db:7d:2b:fa:17:ab:b3:54:a4:42:d8:ea:ab:f2:83:a9:ba:
         76:19:09:d2:7d:c8:28:1f:5a:66:c1:30:76:6f:51:be:9e:76:
         e6:fb:0c:23:7b:8c:f7:63:42:0a:2c:4f:ff:3a:64:0d:74:c7:
         7c:69:f9:91:c6:13:0b:eb:c8:e2:5c:9f:01:61:09:b1:47:9b:
         12:b6:42:fc:03:f4:ca:98:26:ba:ab:78:2d:de:37:95:92:66:
         bf:41:a0:98:35:b0:54:13:9f:18:ba:14:f2:bd:31:aa:06:d0:
         42:c6:97:bd:44:36:2e:52:25:36:05:e7:60:ad:3c:19:4f:37:
         9a:c9:2f:94:4a:41:b2:82:bf:34:4b:7f:3d:3f:30:7c:a2:ba:
         5f:ba:54:c8:2e:dd:1d:fe:93:70:25:c9:9e:0e:1c:39:e1:d8:
         74:81:c7:05:c0:97:77:e3:58:e9:44:95:79:3b:5b:10:df:5f:
         67:b1:f5:e5:35:09:b4:17:13:85:a1:1d:9f:26:ba:f5:f6:55:
         10:13:f1:a6:9f:24:11:44:60:4d:f4:b8:c2:4c:e4:b5:e0:f5:
         ce:42:f4:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----