Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD4CBF9E3E2A11ED9F28EAF6F1222468.roa
File:                     AD4CBF9E3E2A11ED9F28EAF6F1222468.roa (raw, json)
Hash identifier:          hHHVQ35QuwB4JyhAY+us8OmSRo9k269a4zan47jYKEw=
Subject key identifier:   A4:47:6A:92:26:F1:DC:E0:7F:2B:93:D6:17:5B:91:AE:BA:96:7F:B3
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       1880
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD4CBF9E3E2A11ED9F28EAF6F1222468.roa
Signing time:             Tue 27 Sep 2022 06:07:34 +0000
ROA not before:           Tue 27 Sep 2022 06:07:30 +0000
ROA not after:            Sun 15 Jan 2023 06:07:30 +0000
asID:                     1239
IP address blocks:        45.200.176.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6272 (0x1880)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 27 06:07:30 2022 GMT
            Not After : Jan 15 06:07:30 2023 GMT
        Subject: CN=63329325-babc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:17:67:73:0f:f1:61:97:43:aa:92:f6:2d:70:
                    90:5d:f8:a4:cc:9a:b8:91:7a:8f:2e:43:60:7f:b3:
                    4a:09:db:2d:8f:04:67:79:c8:b1:10:e3:37:5d:3c:
                    40:83:fb:86:90:4d:8f:4e:a3:b8:8d:54:3b:2e:ee:
                    42:a6:76:7a:b5:2c:ec:bd:36:45:03:cc:cd:1d:cd:
                    26:99:6a:0c:6b:00:ad:9f:88:cc:1d:81:8a:98:12:
                    7b:c1:fd:e2:60:96:29:96:c8:1f:a2:ca:cc:1c:c2:
                    63:06:88:f6:ba:92:bc:bf:bf:36:d9:42:27:ec:f1:
                    05:51:1e:71:b3:c7:d0:ca:2f:0c:5e:07:19:37:7b:
                    a2:e2:a2:e3:87:75:4f:38:60:b5:72:90:f8:84:e5:
                    a4:2c:fb:38:d3:0c:ef:3b:e5:6e:dd:9e:1d:36:41:
                    b7:77:a3:0e:fe:6a:5a:cd:92:94:4d:f9:fa:c3:a7:
                    b2:80:5f:93:ba:b9:ce:49:90:69:c3:53:fb:4e:14:
                    11:6f:a4:68:32:20:55:a7:85:5d:02:a4:9f:27:8d:
                    d9:d7:c5:31:9e:45:8d:b9:e3:31:1d:31:e4:61:1a:
                    39:01:75:f6:d5:56:c5:56:24:2d:f0:f7:5c:69:97:
                    4d:b5:bf:ea:33:9b:8b:0a:3b:23:62:83:82:cb:17:
                    fa:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:47:6A:92:26:F1:DC:E0:7F:2B:93:D6:17:5B:91:AE:BA:96:7F:B3
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD4CBF9E3E2A11ED9F28EAF6F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.200.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0f:a5:49:54:c4:ab:6b:01:14:49:08:6a:09:12:d8:09:e1:b4:
         92:ac:1d:2a:e3:09:d5:f8:58:cb:96:7e:7e:21:a0:f1:52:05:
         13:ba:c1:5c:01:65:e2:0e:59:17:7a:ba:81:24:54:e7:76:62:
         fd:bb:b5:02:8d:82:82:1f:d1:42:d5:a2:e4:5f:07:18:eb:01:
         9f:3a:f2:09:3d:71:c4:9c:a9:55:8c:80:5b:32:47:42:a4:93:
         6e:67:dd:2d:ee:fd:28:1a:63:38:94:17:9b:23:25:91:41:d2:
         ce:ec:a9:f5:2d:5c:fe:b8:2c:31:6a:cb:6d:d5:e4:c1:0a:50:
         5f:61:34:59:a5:eb:b8:8d:45:73:03:d1:6e:5b:9f:36:97:a5:
         6e:29:ba:e3:a8:39:ab:91:4c:1f:71:2a:f3:f9:d2:5a:a1:04:
         c5:e1:c9:0d:32:2c:01:04:f7:5c:c2:7a:4e:c5:ad:84:0f:ba:
         44:99:ec:25:ef:42:53:11:40:7b:0b:ec:b5:f5:65:72:09:31:
         97:6b:cf:22:2c:c0:bc:f6:23:c2:90:8b:1c:e6:dc:e1:df:46:
         a8:04:18:ee:58:09:3b:c6:25:cd:5c:23:6f:84:dc:0a:86:9d:
         56:48:04:23:43:d5:90:dc:a2:9c:12:3f:ae:f3:17:8d:50:cc:
         26:35:d5:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----