Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9BBAE1D2327411ED851FFED1F1222468.roa
File:                     9BBAE1D2327411ED851FFED1F1222468.roa (raw, json)
Hash identifier:          E+/OF2L7GtLiktOZYDW6x8c1isVUtUUkIw3UKFzyBMs=
Subject key identifier:   DA:C0:C4:2C:4F:90:6D:B6:F9:55:1D:C7:F8:02:F7:FC:61:F3:CE:CB
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       179F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9BBAE1D2327411ED851FFED1F1222468.roa
Signing time:             Mon 12 Sep 2022 08:26:33 +0000
ROA not before:           Mon 12 Sep 2022 08:26:29 +0000
ROA not after:            Sun 15 Jan 2023 08:26:29 +0000
asID:                     1239
IP address blocks:        45.205.112.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6047 (0x179f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 12 08:26:29 2022 GMT
            Not After : Jan 15 08:26:29 2023 GMT
        Subject: CN=631eed39-fe70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:b3:e1:7a:f6:db:bd:4d:ec:e1:a3:36:6c:1a:
                    26:44:69:4a:24:2b:7c:4e:a8:85:5e:ea:0b:6c:1f:
                    0c:94:e0:fe:8b:0d:b9:b1:e1:42:29:90:88:9d:15:
                    34:53:3e:99:98:3a:1a:85:56:f8:e8:c6:47:91:e8:
                    76:36:eb:e4:1e:a4:e2:73:2b:1f:57:4c:d5:17:d2:
                    f5:9b:99:c7:e1:50:89:5f:7a:63:7b:07:ac:04:9b:
                    38:ef:9c:44:1a:17:cd:a3:76:03:aa:73:ec:07:b8:
                    12:c3:bf:6b:e5:b5:f0:57:7b:ab:fd:8b:a2:a8:c5:
                    9d:93:9e:64:3c:2d:4c:df:0c:e7:cb:e5:f0:f0:8c:
                    24:3d:91:3d:73:46:45:53:f6:cc:6e:2b:b0:c2:65:
                    8a:13:1e:d5:a4:14:af:6a:de:aa:30:69:11:f7:ee:
                    d9:73:7b:fe:6f:22:af:7d:42:86:0a:9f:e8:ba:80:
                    7e:47:b2:5b:72:1d:12:ce:34:eb:bb:45:95:ee:50:
                    73:3e:92:56:45:30:05:ce:22:58:a7:25:f5:11:53:
                    98:7c:63:cf:15:8f:81:58:90:45:5d:07:97:93:60:
                    e8:32:52:60:b7:b9:35:a9:a0:78:2a:ca:cf:8d:91:
                    3a:4c:75:20:36:c3:1f:35:1a:c2:76:2a:53:07:31:
                    7d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:C0:C4:2C:4F:90:6D:B6:F9:55:1D:C7:F8:02:F7:FC:61:F3:CE:CB
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9BBAE1D2327411ED851FFED1F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.205.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         46:45:d6:23:fb:f5:2b:bf:8f:5f:af:2d:7d:4d:4c:cf:3f:65:
         4e:7f:04:47:3e:44:04:c4:c8:73:b4:b9:eb:45:03:93:95:81:
         5d:0a:9d:fc:db:71:98:66:d0:20:b7:c3:cf:2b:74:0e:84:64:
         a7:47:11:19:6f:e6:04:e8:e3:3a:02:c5:0c:9e:04:0f:2a:48:
         6e:aa:4e:63:f9:cd:36:ce:4a:2a:8e:68:b8:f4:62:16:a1:8a:
         0d:db:2b:88:05:c6:d8:b7:dd:48:27:f9:69:55:b4:89:30:24:
         e7:2e:36:90:dc:a4:d4:5d:b7:1c:a6:5e:8f:c2:9c:c6:b6:72:
         d0:52:9f:30:37:33:6f:e4:ba:9d:e1:85:1a:74:9e:c0:83:61:
         81:38:a2:92:d5:61:62:25:73:78:54:d4:80:79:50:3a:cb:85:
         ce:c3:ba:08:74:c4:52:4d:98:c2:18:2b:64:45:fe:c9:08:ff:
         e4:bc:8f:29:e8:4f:04:7f:39:2c:da:4d:9a:ea:45:b5:7a:8c:
         46:4e:2b:5c:fb:fe:3c:04:52:ed:13:6b:60:f9:62:07:ea:ce:
         05:85:d1:78:f4:a8:fc:67:d5:3d:80:d0:b3:bf:ae:e2:77:f4:
         d2:91:f0:c2:6c:54:6d:c0:c2:ac:00:28:6b:53:5e:b1:19:71:
         ca:d3:c7:77
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICF58wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMjA5MTIwODI2MjlaFw0yMzAxMTUwODI2MjlaMBgxFjAU
BgNVBAMMDTYzMWVlZDM5LWZlNzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDts+F69tu9TezhozZsGiZEaUokK3xOqIVe6gtsHwyU4P6LDbmx4UIpkIid
FTRTPpmYOhqFVvjoxkeR6HY26+QepOJzKx9XTNUX0vWbmcfhUIlfemN7B6wEmzjv
nEQaF82jdgOqc+wHuBLDv2vltfBXe6v9i6KoxZ2TnmQ8LUzfDOfL5fDwjCQ9kT1z
RkVT9sxuK7DCZYoTHtWkFK9q3qowaRH37tlze/5vIq99QoYKn+i6gH5HsltyHRLO
NOu7RZXuUHM+klZFMAXOIlinJfURU5h8Y88Vj4FYkEVdB5eTYOgyUmC3uTWpoHgq
ys+NkTpMdSA2wx81GsJ2KlMHMX09AgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU2sDE
LE+Qbbb5VR3H+AL3/GHzzsswHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzlCQkFFMUQyMzI3NDExRUQ4NTFGRkVEMUYxMjIyNDY4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQtzXAwDQYJKoZIhvcNAQELBQAD
ggEBAEZF1iP79Su/j1+vLX1NTM8/ZU5/BEc+RATEyHO0uetFA5OVgV0KnfzbcZhm
0CC3w88rdA6EZKdHERlv5gTo4zoCxQyeBA8qSG6qTmP5zTbOSiqOaLj0Yhahig3b
K4gFxti33Ugn+WlVtIkwJOcuNpDcpNRdtxymXo/CnMa2ctBSnzA3M2/kup3hhRp0
nsCDYYE4opLVYWIlc3hU1IB5UDrLhc7Dugh0xFJNmMIYK2RF/skI/+S8jynoTwR/
OSzaTZrqRbV6jEZOK1z7/jwEUu0Ta2D5YgfqzgWF0Xj0qPxn1T2A0LO/ruJ39NKR
8MJsVG3AwqwAKGtTXrEZccrTx3c=
-----END CERTIFICATE-----