Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/82EC7F1234DB11ED8B183BBCF1222468.roa
File:                     82EC7F1234DB11ED8B183BBCF1222468.roa (raw, json)
Hash identifier:          QWXS3OvdcGxJ3mIENZeUMKSmNusNkRucW8dNuwLm6oY=
Subject key identifier:   A4:6A:69:06:58:83:62:B6:A8:5A:E1:ED:73:D6:A0:61:E7:C8:A0:14
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       17D7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/82EC7F1234DB11ED8B183BBCF1222468.roa
Signing time:             Thu 15 Sep 2022 09:48:12 +0000
ROA not before:           Thu 15 Sep 2022 09:48:08 +0000
ROA not after:            Wed 31 May 2023 09:48:08 +0000
asID:                     1239
IP address blocks:        45.197.188.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6103 (0x17d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 15 09:48:08 2022 GMT
            Not After : May 31 09:48:08 2023 GMT
        Subject: CN=6322f4dc-7ff3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:60:d8:af:c6:9a:1c:54:5e:b1:18:1e:8f:cd:
                    12:23:23:1b:1f:e3:fe:f9:2f:af:7f:c7:9a:71:fd:
                    3c:c3:73:cb:8c:59:04:78:b9:4b:4c:bd:de:e0:f5:
                    56:d3:fa:58:14:4a:ae:44:15:0a:c7:df:25:a2:98:
                    e0:ff:f3:15:8d:9f:47:a9:2c:c2:a9:8f:c5:c4:69:
                    19:0d:38:6b:0d:13:74:25:44:d3:9b:15:fa:e0:85:
                    77:3a:f0:0c:f9:a1:98:1e:b6:7b:a2:48:f8:3c:88:
                    df:19:45:65:76:f0:36:d2:a7:76:88:42:d2:49:0b:
                    03:46:9e:8b:85:45:17:b2:ac:c3:7c:e8:4f:22:6d:
                    1a:43:0c:36:59:07:98:e1:c2:d7:51:96:8a:40:b2:
                    95:90:f7:12:cf:15:15:d3:9b:b2:4c:61:cd:b1:6e:
                    2c:69:13:1e:98:90:61:76:3e:72:ca:56:1c:ee:74:
                    23:07:0e:29:96:5b:75:3b:42:6e:91:a9:3c:25:84:
                    9f:98:b5:1b:d5:3e:c5:67:25:a7:0b:6e:56:a6:88:
                    4b:2c:2b:36:16:f3:09:06:88:2d:c6:d6:5f:5f:6c:
                    4b:3e:43:6e:1f:5d:15:70:23:59:50:a9:bf:be:b4:
                    75:e6:84:a1:c5:e6:f5:fb:b7:7b:44:dc:bc:b7:e8:
                    8a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:6A:69:06:58:83:62:B6:A8:5A:E1:ED:73:D6:A0:61:E7:C8:A0:14
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/82EC7F1234DB11ED8B183BBCF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.197.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:ee:1c:e3:50:af:9c:e6:71:8a:0f:a8:b8:3e:86:67:eb:e9:
         2c:c1:3c:c6:52:1b:4f:99:82:5b:05:aa:2f:8e:af:63:e7:94:
         77:cc:a1:16:0c:47:21:31:fb:85:a7:ed:ec:76:a3:86:43:86:
         61:4c:48:c7:0a:d1:cd:07:fa:47:5c:f4:92:e4:05:63:83:35:
         67:fc:3a:5e:de:3b:cf:84:b4:a6:dc:0c:f2:1b:86:0b:a9:36:
         39:e2:e1:47:67:59:80:90:51:3f:47:b5:b4:d8:c8:32:63:af:
         40:f3:20:e3:f8:fc:b4:b3:92:84:74:c3:91:a9:bc:ed:fa:23:
         4e:f1:72:76:5a:61:7e:8c:7f:00:31:0e:8e:ff:96:15:da:a9:
         8b:85:5f:11:31:7c:b6:f4:4f:45:09:05:fa:8f:a6:62:a0:a9:
         bc:4e:d1:6e:ab:db:82:5a:93:55:97:5e:52:3c:68:1a:4a:1a:
         10:9c:19:4b:b7:9f:b0:b4:ec:7c:6a:eb:f8:2a:ee:14:e4:51:
         0e:24:b0:8e:f6:d2:34:27:e7:fc:3c:61:51:1e:27:07:b6:36:
         c2:0b:a0:fa:62:f7:bb:9f:82:69:f6:2d:9b:46:ed:1e:b7:95:
         d4:c5:d6:36:ee:8b:66:1f:5a:10:2e:d8:63:ad:5e:b5:3c:8a:
         bf:4e:1d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----