Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9C2A33E236E011ECAABE586DD8A014CE.roa
File:                     9C2A33E236E011ECAABE586DD8A014CE.roa (raw, json)
Hash identifier:          vCacGMyJnusLp3WzPqB/GDtexq9n/vI5hHONcVTfg4Y=
Subject key identifier:   5B:92:53:6A:AD:94:78:12:33:6C:9D:78:4F:F2:2E:82:18:14:60:56
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0B99
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9C2A33E236E011ECAABE586DD8A014CE.roa
Signing time:             Wed 27 Oct 2021 04:44:46 +0000
ROA not before:           Wed 27 Oct 2021 04:44:43 +0000
ROA not after:            Thu 27 Oct 2022 04:44:43 +0000
asID:                     58895
IP address blocks:        45.206.121.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2969 (0xb99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 27 04:44:43 2021 GMT
            Not After : Oct 27 04:44:43 2022 GMT
        Subject: CN=6178d93e-8991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:78:0b:c4:09:87:ca:ed:e9:4d:98:f7:ba:56:
                    46:9e:ea:b9:33:ea:8f:fd:3f:32:b9:4b:2f:3a:f4:
                    a2:1d:49:28:68:26:e5:39:04:94:86:fd:c5:16:24:
                    35:16:f5:b5:ee:4b:43:55:e9:8e:ee:74:d7:c0:6e:
                    35:6f:d9:20:2c:10:4d:bb:c3:c0:b2:a4:f6:2f:75:
                    cd:58:dd:e9:b3:16:67:ca:7b:94:fc:5e:69:44:c5:
                    ac:62:67:9d:4f:6d:64:cf:45:3b:be:02:d7:22:70:
                    75:b3:4a:33:07:b0:b5:09:9e:7e:97:f1:71:45:b8:
                    37:93:f6:2b:b9:89:6e:eb:32:8e:ac:1e:89:d9:35:
                    50:ab:f3:13:29:08:ad:f6:74:e8:ab:9a:23:fc:0a:
                    a6:a6:a4:ed:94:53:63:36:da:49:af:71:ee:1a:0a:
                    c8:19:58:a2:e0:ba:f4:ba:b7:87:5e:c4:c0:f2:6b:
                    65:10:31:bd:ab:83:74:39:0b:f8:b5:a2:3f:b0:23:
                    c9:af:e7:37:7f:e4:06:44:0e:40:66:f3:7c:51:e9:
                    c0:19:b0:ca:b0:ee:a1:2b:7b:29:c8:c5:55:51:86:
                    9d:fb:b6:43:a7:7c:d7:4a:54:47:36:75:94:ea:ce:
                    de:5c:38:f4:31:67:01:0e:d8:ac:d4:59:d1:27:6a:
                    35:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:92:53:6A:AD:94:78:12:33:6C:9D:78:4F:F2:2E:82:18:14:60:56
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9C2A33E236E011ECAABE586DD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.206.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:26:3b:c9:52:2d:8e:eb:42:6f:b2:17:92:35:6b:92:1b:15:
         19:99:47:9e:bb:f7:ac:a0:a2:c2:0f:8c:7f:14:d9:0b:bd:52:
         1b:e8:0d:fc:a6:54:0a:30:25:55:73:55:ba:a9:9e:82:81:2f:
         56:20:ff:fc:2f:96:ea:63:09:b8:7d:7c:c5:f3:76:22:6c:dd:
         0a:18:d7:70:97:c2:81:2c:65:20:50:49:16:77:8a:24:cc:91:
         85:cf:2c:76:69:5e:22:f9:b1:e9:de:8f:39:97:67:74:62:17:
         71:1d:73:cb:b5:0a:2f:cf:de:58:5d:2c:c1:c3:e6:ab:a4:ef:
         e1:22:d0:f5:25:aa:ea:bf:e7:8c:d1:3f:34:50:c6:23:d3:51:
         1d:37:3d:87:76:a1:a4:d0:39:54:e3:8c:e2:8a:20:22:4e:8d:
         59:49:a3:64:69:1a:99:d4:38:cd:d6:63:ab:1a:f2:b4:eb:b9:
         ae:25:67:8e:8a:44:df:cf:1f:3d:47:e1:b8:3e:2e:7d:ec:71:
         d9:7b:4d:50:bc:e4:46:7a:f3:70:44:6a:de:68:03:38:93:2d:
         b8:23:e2:ed:1e:9d:71:1f:9e:95:c4:5f:df:be:29:19:b8:97:
         c7:e1:97:3b:17:ac:40:5b:af:ab:22:dd:de:08:c1:99:24:5a:
         79:a1:15:5d
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICC5kwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMTEwMjcwNDQ0NDNaFw0yMjEwMjcwNDQ0NDNaMBgxFjAU
BgNVBAMMDTYxNzhkOTNlLTg5OTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCdeAvECYfK7elNmPe6Vkae6rkz6o/9PzK5Sy869KIdSShoJuU5BJSG/cUW
JDUW9bXuS0NV6Y7udNfAbjVv2SAsEE27w8CypPYvdc1Y3emzFmfKe5T8XmlExaxi
Z51PbWTPRTu+AtcicHWzSjMHsLUJnn6X8XFFuDeT9iu5iW7rMo6sHonZNVCr8xMp
CK32dOirmiP8CqampO2UU2M22kmvce4aCsgZWKLguvS6t4dexMDya2UQMb2rg3Q5
C/i1oj+wI8mv5zd/5AZEDkBm83xR6cAZsMqw7qEreynIxVVRhp37tkOnfNdKVEc2
dZTqzt5cOPQxZwEO2KzUWdEnajVvAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUW5JT
aq2UeBIzbJ14T/IughgUYFYwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzlDMkEzM0UyMzZFMDExRUNBQUJFNTg2REQ4QTAxNENFLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtznkwDQYJKoZIhvcNAQELBQAD
ggEBAGImO8lSLY7rQm+yF5I1a5IbFRmZR56796ygosIPjH8U2Qu9UhvoDfymVAow
JVVzVbqpnoKBL1Yg//wvlupjCbh9fMXzdiJs3QoY13CXwoEsZSBQSRZ3iiTMkYXP
LHZpXiL5senejzmXZ3RiF3Edc8u1Ci/P3lhdLMHD5quk7+Ei0PUlquq/54zRPzRQ
xiPTUR03PYd2oaTQOVTjjOKKICJOjVlJo2RpGpnUOM3WY6sa8rTrua4lZ46KRN/P
Hz1H4bg+Ln3scdl7TVC85EZ683BEat5oAziTLbgj4u0enXEfnpXEX9++KRm4l8fh
lzsXrEBbr6si3d4IwZkkWnmhFV0=
-----END CERTIFICATE-----