Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/67A7B4768F1111EC89FCC5885A40D577.roa
File:                     67A7B4768F1111EC89FCC5885A40D577.roa (raw, json)
Hash identifier:          0ekdZkWrA6bfAP6uuPAht2Un9GPHzeE7lUcSVJiKjrM=
Subject key identifier:   98:78:B8:4E:E4:DF:7B:39:97:83:5A:BB:CB:AE:77:8F:2D:85:2E:B9
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       11EC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/67A7B4768F1111EC89FCC5885A40D577.roa
Signing time:             Wed 16 Feb 2022 10:15:46 +0000
ROA not before:           Wed 16 Feb 2022 10:15:43 +0000
ROA not after:            Fri 30 Dec 2022 10:15:43 +0000
asID:                     141711
IP address blocks:        45.206.12.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4588 (0x11ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Feb 16 10:15:43 2022 GMT
            Not After : Dec 30 10:15:43 2022 GMT
        Subject: CN=620cced2-5d5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4b:fa:fc:7d:3e:70:ef:80:f1:72:95:80:e7:
                    1f:f9:88:4a:00:2e:3e:b3:24:57:be:5e:53:9b:2f:
                    33:c1:c0:9b:8f:ee:a7:bd:aa:c7:a2:da:43:07:9d:
                    90:75:c5:5e:5c:6b:6e:88:88:64:02:53:bb:ef:82:
                    c4:49:6c:51:da:8c:6d:82:b0:ca:40:e6:e9:e7:2f:
                    33:90:4b:7a:08:d1:19:54:33:97:08:c1:88:ce:fe:
                    17:1c:47:ff:b7:15:1c:23:80:55:71:13:ec:db:31:
                    07:c7:c8:f1:c4:bc:a6:45:b9:b4:14:27:c2:8d:16:
                    9d:0c:70:c9:85:06:e1:1e:c0:d0:85:83:ce:58:d0:
                    e8:73:4a:ff:46:98:93:50:14:d5:6f:a4:25:10:b1:
                    94:d5:89:cc:b8:cf:a1:c6:9e:e1:55:67:80:36:01:
                    34:4c:66:81:27:fe:ad:19:fe:82:ac:97:69:07:5a:
                    38:e4:a2:0d:7c:2d:48:4e:0b:7f:00:4c:7b:86:e7:
                    06:bb:cc:7e:85:7b:01:8d:09:3a:86:0f:eb:42:cc:
                    4e:99:0f:a2:52:ea:93:d9:16:fe:9f:1b:dc:31:b9:
                    01:ad:1f:5f:41:df:48:f6:5b:c7:86:92:6b:3d:d6:
                    57:f7:8f:15:d8:eb:c7:2f:c6:5d:d8:db:c6:09:27:
                    cc:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:78:B8:4E:E4:DF:7B:39:97:83:5A:BB:CB:AE:77:8F:2D:85:2E:B9
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/67A7B4768F1111EC89FCC5885A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.206.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:b6:db:38:80:85:9e:b8:30:b2:f4:59:10:88:e5:5d:14:11:
         89:7c:f7:cb:1f:6e:c7:2f:b3:4e:cb:33:97:2a:01:c9:b4:78:
         1b:51:98:c0:14:8e:81:c0:64:90:a7:18:c1:b7:f4:a0:e3:c8:
         22:a8:33:b4:1b:e5:63:ab:06:75:54:7d:a0:47:13:50:75:61:
         bb:6f:58:4a:e1:92:46:86:97:e7:cf:64:2a:f4:cc:fb:18:24:
         9d:12:a7:b9:49:3f:b6:41:a3:51:40:52:85:20:45:9a:78:c6:
         07:fa:52:9e:5a:f1:75:28:66:a2:a9:f7:c7:cd:50:f7:8a:51:
         af:28:3c:d8:c0:35:48:b3:1a:ce:38:e7:e4:55:1c:b1:ae:09:
         db:3a:50:9f:6b:d9:a2:3c:6c:e2:c5:8a:4c:6d:ba:1d:fa:f3:
         2e:ab:a9:b5:1e:cf:57:9c:1c:50:66:c6:e6:95:4b:33:16:83:
         88:aa:f6:3f:e2:1e:ef:68:f0:15:f4:dd:9c:cc:4f:6b:57:89:
         a0:c4:50:7c:52:b6:cc:08:ee:d5:b7:23:74:b3:c9:19:a1:14:
         d9:43:7f:91:a9:6a:9d:68:62:17:86:bd:20:f7:c7:0e:b3:0e:
         c5:46:c3:37:c1:15:be:9b:01:b6:22:90:28:28:17:71:2f:8e:
         4b:ae:a7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----