Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7AEA65A83E2D11EDACC7DD7FF1222468.roa
File:                     7AEA65A83E2D11EDACC7DD7FF1222468.roa (raw, json)
Hash identifier:          y949i5879ldxGJrtODcGg808ooG/TauaKcHDf9gNicA=
Subject key identifier:   1F:68:74:AD:7D:85:1B:92:3B:89:AF:E0:5A:2B:AF:3F:74:67:CF:85
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       188B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7AEA65A83E2D11EDACC7DD7FF1222468.roa
Signing time:             Tue 27 Sep 2022 06:27:37 +0000
ROA not before:           Tue 27 Sep 2022 06:27:34 +0000
ROA not after:            Fri 30 Dec 2022 06:27:34 +0000
asID:                     35916
IP address blocks:        156.233.52.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6283 (0x188b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 27 06:27:34 2022 GMT
            Not After : Dec 30 06:27:34 2022 GMT
        Subject: CN=633297d9-f92a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:1d:41:81:c2:8a:97:52:aa:c0:5f:75:de:0f:
                    6d:9b:2d:00:ea:d8:4b:5f:59:1a:26:78:8b:4c:f7:
                    d2:80:4e:93:33:16:c0:36:fb:a8:35:7b:93:45:76:
                    68:1d:44:cc:d8:27:2d:88:03:eb:c9:fd:b0:d8:20:
                    c2:c3:38:c2:df:55:f7:95:01:1b:62:5c:03:fa:8c:
                    4f:09:6f:40:0a:44:ba:92:61:60:c1:2c:7f:94:2f:
                    d2:f9:88:4e:a8:c1:b2:4e:dd:09:db:19:86:6b:04:
                    11:30:87:36:a6:e2:11:6c:14:16:59:73:c4:e0:70:
                    2b:0f:0f:bc:c5:b0:2f:4a:a0:9e:e9:94:20:c5:c5:
                    f1:d5:02:06:1e:97:50:e5:1f:5f:99:12:40:7c:e7:
                    92:c0:9c:6d:7b:3b:c1:50:93:a6:fe:34:6a:06:22:
                    07:5a:1d:e7:ff:30:74:dd:5a:ec:fd:63:2d:0b:bf:
                    49:fa:88:0f:ae:51:4f:2d:c7:02:6e:e2:9e:37:b4:
                    c8:91:e6:4d:3d:24:d5:11:81:5f:11:dc:e8:b2:b5:
                    7f:16:69:24:57:c4:39:46:ec:8f:5f:fe:9f:bf:21:
                    f8:ce:56:2f:e1:be:ca:82:70:6f:9c:28:d3:78:cc:
                    6f:28:93:86:0f:27:72:e6:cc:c8:48:f1:55:99:36:
                    c9:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:68:74:AD:7D:85:1B:92:3B:89:AF:E0:5A:2B:AF:3F:74:67:CF:85
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7AEA65A83E2D11EDACC7DD7FF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.233.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:cd:da:df:3c:66:fb:b8:86:64:e6:b2:36:28:dc:cd:0d:b7:
         29:a6:bc:71:7c:f2:bc:2d:ea:88:2c:6a:1b:05:37:2d:05:1d:
         1f:22:3f:28:59:7e:07:16:4a:11:fe:55:c7:ec:44:da:84:1a:
         a9:b7:51:97:fb:f9:ab:28:50:42:bf:a0:00:f8:04:c5:56:0f:
         03:36:79:d7:e7:dc:ea:d4:96:9c:82:cc:2f:3d:9f:d0:c8:b3:
         ef:a8:21:8a:a4:59:c7:d5:78:90:df:c3:ed:6c:38:71:4e:58:
         ef:69:38:c3:9c:96:d2:99:d7:b9:01:83:b6:81:05:24:49:33:
         cb:34:bc:d0:20:f8:c2:ea:a4:68:7f:0b:76:b2:c2:a1:d4:3f:
         b9:7a:eb:49:ba:83:3b:ea:b5:6e:73:78:88:08:0a:9a:44:68:
         e0:bb:ec:4a:d8:d1:3d:48:ff:51:c3:d1:35:ac:d4:7f:18:43:
         cf:38:06:cd:00:f3:cb:46:1c:57:c4:10:e5:78:d3:aa:87:c0:
         b1:61:bf:91:62:1c:c6:bc:8e:15:56:94:ff:26:da:2a:8d:e1:
         4e:57:86:65:97:b5:0e:23:1b:4f:b3:c5:a5:92:e7:78:64:f2:
         2d:f2:75:22:9a:72:14:c2:26:c4:8e:1c:5d:88:72:ff:d7:95:
         66:6f:6e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----