Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/78606E0A188E11EDA1FDCEB7F1222468.roa
File:                     78606E0A188E11EDA1FDCEB7F1222468.roa (raw, json)
Hash identifier:          I25uY54d+A5iwBwMOiznjtVIUAGarWHgOmt+h5l5j3I=
Subject key identifier:   AB:FC:BD:3E:8C:1A:19:2D:38:B2:CF:D9:CC:15:48:60:AA:DF:24:C5
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       16C6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/78606E0A188E11EDA1FDCEB7F1222468.roa
Signing time:             Wed 10 Aug 2022 09:26:10 +0000
ROA not before:           Wed 10 Aug 2022 09:26:06 +0000
ROA not after:            Fri 30 Dec 2022 09:26:06 +0000
asID:                     328608
IP address blocks:        156.225.129.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5830 (0x16c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 10 09:26:06 2022 GMT
            Not After : Dec 30 09:26:06 2022 GMT
        Subject: CN=62f379b2-7c6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0b:7b:74:a0:71:ae:70:82:0b:6f:27:5a:14:
                    89:9e:69:c4:62:1a:48:c2:a5:5c:dd:61:7c:9f:95:
                    08:55:fd:f7:b2:81:5b:4d:bd:3a:bf:fc:2c:7e:d5:
                    36:85:81:62:e3:92:4f:5f:73:93:18:c6:44:00:85:
                    b0:9d:a3:ee:4e:8e:c4:c3:6a:e8:5e:c5:56:de:55:
                    3b:e6:c4:8a:fb:a9:05:82:3c:d9:ab:cf:8d:ae:97:
                    40:ee:6c:1e:58:c5:e9:bd:d5:d2:7f:7c:b3:12:67:
                    54:c6:34:d1:f6:01:8e:a2:59:8c:23:f0:37:70:8a:
                    80:fa:77:2a:66:6b:1e:85:28:7e:cc:5a:2a:60:ff:
                    0d:30:b7:ad:a3:2d:85:c3:f8:7c:66:4f:06:03:98:
                    49:77:0a:1d:87:65:89:da:89:2f:0d:d2:7f:ff:ed:
                    e4:ca:6a:1d:a9:30:09:b1:13:4f:8a:4e:d5:5f:42:
                    0b:f6:d8:29:f9:6d:61:e6:97:d3:c2:f1:ec:54:26:
                    42:54:22:e1:b3:2a:1d:78:20:5c:f6:68:c8:2c:73:
                    5a:9c:47:11:04:63:80:bc:40:68:a2:96:c9:eb:f8:
                    ed:36:be:33:3e:95:44:20:7b:42:91:2a:29:8f:42:
                    1a:31:0a:17:bc:9e:26:91:7a:62:8d:d8:eb:9a:99:
                    76:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:FC:BD:3E:8C:1A:19:2D:38:B2:CF:D9:CC:15:48:60:AA:DF:24:C5
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/78606E0A188E11EDA1FDCEB7F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.225.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:85:bc:7c:20:43:a8:04:39:fb:b0:ba:90:c9:37:7c:9a:0e:
         09:4a:02:fd:bd:96:1f:b1:56:98:6b:28:23:7d:78:98:e8:69:
         c3:02:50:54:27:7d:5b:62:54:1c:e3:17:ee:90:33:fc:1c:76:
         3b:d8:e7:cd:a7:4d:6d:d3:e2:e1:7c:37:15:ac:08:31:76:ea:
         81:4b:61:a8:34:01:29:31:0b:14:25:0d:02:ef:bb:a4:04:78:
         25:d1:50:7d:1e:c6:25:6e:02:c8:d7:8b:0e:1f:cd:0e:84:1e:
         42:31:1d:ca:1b:75:ff:0e:af:48:c3:fe:67:82:82:60:83:a0:
         d3:13:29:88:cd:04:41:13:98:bf:19:46:39:28:99:d8:27:bf:
         84:14:67:d2:cc:4f:23:f9:6c:cb:01:e4:dd:35:e8:aa:e5:f9:
         72:98:ce:e2:7c:17:d1:58:8e:88:73:c8:8a:b3:61:d7:b1:37:
         1b:b5:52:92:02:7f:78:72:82:81:e1:0f:43:9f:2a:e3:a1:78:
         5c:e9:60:39:1d:dc:cf:90:4d:2e:2d:d0:6a:14:0e:37:e8:3b:
         13:02:90:d8:83:ce:3e:2d:b3:55:9c:6f:95:cd:96:b1:e1:9e:
         cf:97:c2:86:eb:9e:25:3a:f3:cb:2a:19:ad:95:df:bb:af:94:
         23:5d:3b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----