Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/93034FFA34DD11ED9305AFC1F1222468.roa
File:                     93034FFA34DD11ED9305AFC1F1222468.roa (raw, json)
Hash identifier:          opCBD4TdA9h/45s9dz0iFfumI2EoaJYbBP/9FoBJbDM=
Subject key identifier:   2D:35:3C:37:73:07:71:EE:FD:C0:5C:19:A9:9E:8D:CE:01:BD:BF:2D
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       17EA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/93034FFA34DD11ED9305AFC1F1222468.roa
Signing time:             Thu 15 Sep 2022 10:02:58 +0000
ROA not before:           Sat 14 Jan 2023 10:02:54 +0000
ROA not after:            Thu 22 Jun 2023 10:02:54 +0000
asID:                     1239
IP address blocks:        45.205.112.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6122 (0x17ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 14 10:02:54 2023 GMT
            Not After : Jun 22 10:02:54 2023 GMT
        Subject: CN=6322f852-085c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:72:74:6c:c7:02:56:e4:82:3c:b0:73:06:59:
                    d1:72:75:a6:31:87:d9:2f:ac:36:29:32:5c:5f:ea:
                    17:d7:26:b8:32:e4:4c:6d:b5:09:31:cd:3e:8a:e3:
                    99:f2:13:12:b1:78:ec:96:90:26:83:19:3f:4b:f5:
                    1c:34:67:6f:7d:6f:40:4f:0b:92:ff:98:44:86:ab:
                    59:6b:3d:fc:13:60:8e:02:45:e4:57:bd:15:92:fb:
                    b4:b7:e3:84:3f:49:df:c0:cd:58:86:44:bb:c1:0d:
                    d4:62:e8:80:3f:7d:ff:b1:ec:54:f2:8c:0d:9a:d2:
                    ba:1b:29:63:b9:f2:10:5e:92:1f:f6:dd:84:b7:e2:
                    a2:c9:e6:e1:f2:27:22:4f:0b:ec:1f:44:62:99:fd:
                    c7:47:9e:db:6b:3d:bf:7a:08:8d:e0:3f:ff:94:87:
                    7b:0f:1b:16:b1:3f:b0:44:80:4b:98:c1:8a:cb:87:
                    af:27:73:f6:94:3f:88:96:34:dc:28:4d:bc:4f:7b:
                    ff:c9:da:8a:39:34:12:bf:2e:f5:38:03:43:ea:bb:
                    3b:b3:b5:41:a4:ed:73:90:b2:bb:44:c3:67:6c:63:
                    e7:0f:22:dd:7b:62:b0:9a:1d:3c:30:cf:38:8b:b7:
                    4a:fd:33:0a:09:87:ed:99:f2:90:c2:da:ab:39:f1:
                    83:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:35:3C:37:73:07:71:EE:FD:C0:5C:19:A9:9E:8D:CE:01:BD:BF:2D
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/93034FFA34DD11ED9305AFC1F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.205.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         74:f3:cf:bd:b2:5e:4d:f6:21:ca:5b:45:87:49:1a:68:78:cc:
         4c:b1:8a:fe:4b:0d:f2:fa:ba:97:3b:14:2c:81:43:87:88:f0:
         bf:8c:9c:11:16:a2:26:33:c6:f1:96:1f:e1:a1:86:d1:f3:cb:
         d0:54:84:6e:25:23:c2:0b:db:f3:da:e1:e7:dc:83:f5:bb:e8:
         35:70:12:45:0c:62:70:c4:3f:70:20:a2:c3:1d:c2:c6:88:db:
         0a:39:22:33:cf:a5:02:1f:04:5e:87:e9:62:87:9d:cf:74:10:
         e0:d6:85:21:b6:79:53:d7:be:a6:e7:63:1b:cd:2f:3e:18:c0:
         e9:46:4a:ed:01:77:65:b7:76:d9:2f:4e:1e:d7:f3:28:06:70:
         42:bf:d5:f0:71:ee:ab:a5:7c:be:4f:ca:b4:95:06:fe:ef:12:
         56:bb:2f:e0:84:00:b0:e4:8e:0e:1d:fb:2e:e7:94:e6:f1:fc:
         0a:c7:42:38:e9:3d:0e:19:b8:98:53:3f:e8:f7:ba:d2:23:06:
         e5:97:7a:4b:e3:d4:78:6f:1b:83:35:db:01:cc:f8:1b:e9:78:
         f0:d0:e1:18:33:24:83:b6:f3:70:40:0e:fa:c9:38:78:47:51:
         49:21:c3:9f:24:d0:20:e0:8a:14:b3:69:df:c9:67:4c:50:d8:
         25:2c:c7:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----