Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/75D3637AE89411EB8D8D792AD8A014CE.roa
File:                     75D3637AE89411EB8D8D792AD8A014CE.roa (raw, json)
Hash identifier:          R2aLrB672GC14GgRhpQ+6aO8nSqD+32Ulhoa7F6vK7A=
Subject key identifier:   4D:64:DF:42:DE:09:E3:93:63:4F:17:6A:01:33:21:C9:A4:20:02:C8
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0776
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/75D3637AE89411EB8D8D792AD8A014CE.roa
Signing time:             Mon 19 Jul 2021 13:23:16 +0000
ROA not before:           Mon 19 Jul 2021 13:23:12 +0000
ROA not after:            Mon 14 Mar 2022 13:23:12 +0000
asID:                     1239
IP address blocks:        156.235.0.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1910 (0x776)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jul 19 13:23:12 2021 GMT
            Not After : Mar 14 13:23:12 2022 GMT
        Subject: CN=60f57cc4-6283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a8:d1:4c:04:10:c1:33:4d:83:28:6e:66:e6:
                    e9:4e:24:b9:23:b0:10:63:c6:59:18:00:e7:64:74:
                    42:4a:9b:3d:b1:99:fe:33:48:36:fe:07:90:4b:16:
                    53:66:85:af:5e:c9:bb:79:45:79:29:6c:06:c7:46:
                    da:8a:4d:5a:81:92:95:fb:f4:46:c9:7b:c3:77:bf:
                    c6:4c:44:21:2a:12:42:3b:2c:28:75:9a:48:ff:f1:
                    a3:04:39:46:38:e6:fa:d4:86:9e:c1:2f:dc:c1:fb:
                    7b:9e:0a:8f:59:81:6b:ca:c8:6b:92:49:18:06:78:
                    8f:09:21:f0:f9:50:6a:73:05:a4:2f:7f:2b:6d:89:
                    07:43:13:df:96:83:54:1e:ec:ac:57:89:8f:97:41:
                    18:5d:d0:98:f2:a3:82:92:d7:5e:42:e1:a7:c2:18:
                    d9:a7:fa:07:38:44:c5:43:df:92:67:f0:ce:f0:a3:
                    65:16:2b:aa:4f:85:b6:24:d6:25:3c:ea:2c:c5:5c:
                    05:48:c7:7d:b9:6e:c7:af:93:1a:b3:27:67:15:90:
                    9a:62:3d:0b:fe:4c:6d:2a:f0:54:b0:77:81:01:31:
                    4a:1b:a4:de:33:73:a8:d4:4c:cc:57:a7:ad:a6:7f:
                    a6:c7:fb:1d:c7:e0:36:60:7c:0e:d5:f5:98:dd:d1:
                    e6:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:64:DF:42:DE:09:E3:93:63:4F:17:6A:01:33:21:C9:A4:20:02:C8
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/75D3637AE89411EB8D8D792AD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.235.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:58:b3:63:4c:bf:59:01:1d:0f:62:a6:d0:b5:ff:4d:7c:b5:
         61:c8:36:90:80:dd:16:3d:3e:18:a2:4b:f8:0d:b9:b8:22:32:
         c5:fe:ce:b6:df:6b:8f:fb:3d:54:e1:0d:66:ab:0e:87:35:df:
         bb:b9:7d:73:35:2e:b7:a3:1c:60:2f:cb:80:5e:f1:17:b1:fe:
         ea:b8:24:cd:06:6e:2b:20:ee:89:3a:96:6a:ae:e6:49:f7:34:
         dc:5b:cb:c9:bb:b1:79:b6:1c:7c:67:96:fc:97:ff:2e:2d:25:
         3f:0f:c2:9a:1b:e2:7e:11:a3:4d:2b:fb:55:12:9f:e4:6a:04:
         1b:1e:a3:be:93:7a:8b:b6:5c:ad:d1:42:e3:b0:30:00:8a:c6:
         ca:a0:76:72:4d:a5:88:05:3f:0b:93:dc:40:08:96:82:6e:ca:
         eb:ac:36:98:2e:36:bd:93:d7:ca:a6:56:ec:09:f9:04:5e:ec:
         86:56:d5:ef:2b:51:40:d3:7a:63:38:70:fa:a2:fd:29:5c:87:
         6b:5f:28:4d:a7:9f:57:96:e4:98:fc:40:3e:e4:4d:32:3f:ca:
         26:2e:a0:70:0b:99:f0:f1:2f:8a:4a:de:f9:74:23:12:d6:e1:
         6d:f9:49:1c:71:70:03:15:82:2a:56:af:d2:46:f2:92:79:c2:
         58:c7:24:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----