Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7B7ACD4825C111EDB6D82AAEF1222468.roa
File:                     7B7ACD4825C111EDB6D82AAEF1222468.roa (raw, json)
Hash identifier:          tmgrgNtxbEHFzZ1F3HzazzwsO1avhUCBLJQIpVK3Xzs=
Subject key identifier:   10:D4:3E:F4:D6:A0:31:7A:9B:C8:B8:39:1B:8C:45:E9:93:49:88:1C
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       172B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7B7ACD4825C111EDB6D82AAEF1222468.roa
Signing time:             Sat 27 Aug 2022 04:34:05 +0000
ROA not before:           Sat 27 Aug 2022 04:34:01 +0000
ROA not after:            Fri 30 Sep 2022 04:34:01 +0000
asID:                     271965
IP address blocks:        45.195.76.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5931 (0x172b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 27 04:34:01 2022 GMT
            Not After : Sep 30 04:34:01 2022 GMT
        Subject: CN=63099ebd-d153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:31:82:66:b5:a2:cf:ba:b2:8a:96:5c:85:3f:
                    e4:63:89:0a:f3:56:97:f7:ce:d1:df:1c:78:eb:34:
                    0f:9d:80:83:e4:f9:5f:f8:64:f7:5a:23:ae:95:ba:
                    0e:fc:5c:ea:7d:49:e6:c5:96:b2:e9:5a:93:33:2d:
                    83:2b:1f:d1:04:df:e6:30:1a:e6:71:e4:43:e8:5c:
                    3b:9f:b2:95:2f:67:b7:e8:62:9d:80:96:2d:d4:8a:
                    cc:2f:de:2f:81:d5:37:33:e2:71:f2:1a:2c:c2:c7:
                    a6:28:74:04:fe:dc:c9:1d:05:5b:94:15:5a:8d:53:
                    70:8d:e9:f9:63:97:af:88:52:52:bd:3e:ab:cb:f1:
                    29:ae:00:08:10:bc:c8:99:d0:6b:95:e1:5c:32:a5:
                    70:64:9b:fe:27:77:df:93:fa:ea:be:20:f4:3a:17:
                    49:3f:40:6d:63:67:b4:52:eb:97:8c:d6:66:f9:55:
                    8c:a6:96:7c:47:d6:36:4c:29:b5:8a:e4:ca:3f:65:
                    0b:45:28:bc:06:0c:80:15:3d:32:4d:64:94:ae:80:
                    8f:3b:f3:fc:d5:a7:db:bc:95:48:d0:5d:f1:bf:30:
                    5f:c5:a2:38:a6:17:3b:10:cb:59:d9:e5:fc:b4:0b:
                    95:15:b4:d3:24:8d:1d:4a:8d:80:6a:6a:ff:e5:0a:
                    a6:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:D4:3E:F4:D6:A0:31:7A:9B:C8:B8:39:1B:8C:45:E9:93:49:88:1C
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7B7ACD4825C111EDB6D82AAEF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:cf:ed:86:b6:75:13:fe:63:2d:1b:d5:5e:34:9a:9b:5c:1f:
         23:0f:74:59:3f:10:0f:e3:e6:d4:c9:99:90:48:53:9d:e3:c5:
         5c:16:7c:12:b8:f1:49:81:db:e2:cd:7a:9d:45:97:51:17:f2:
         ac:3e:db:66:d2:b9:d2:a1:3c:79:c2:91:49:21:e6:7f:5e:d0:
         40:16:cd:f6:b5:ca:6e:14:ee:89:d6:5f:08:37:7c:58:75:57:
         f7:a2:7f:93:33:4c:ec:1c:01:8a:a2:d5:64:6c:57:38:5e:73:
         f9:18:10:a9:93:b8:27:bd:75:19:dc:f8:d8:e2:4c:65:c2:9a:
         bb:83:4d:55:a7:42:ff:db:3d:49:66:ee:fe:4f:90:0b:2f:46:
         df:db:64:18:1c:e5:c4:47:c7:2f:a8:9c:18:78:a2:56:8a:17:
         95:21:f9:e4:f9:e3:74:d2:34:a7:7e:f8:ec:53:fe:bd:6f:3d:
         75:e1:d0:88:44:c8:03:cd:bc:d3:45:10:f4:59:57:56:82:a6:
         12:d8:a2:4a:be:5b:67:0f:17:8c:08:c5:72:fc:47:ae:00:ff:
         d9:69:66:38:fc:4a:fd:db:73:dc:2b:bc:6d:39:35:76:f8:ed:
         01:18:9f:a9:1a:4d:3d:83:00:3e:9d:64:62:a6:1a:c8:88:b5:
         47:27:3c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----