Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C49E27F257EC11ECAD7DE28D5A40D577.roa
File:                     C49E27F257EC11ECAD7DE28D5A40D577.roa (raw, json)
Hash identifier:          jGunHjS6m4dckKPz7XhWuy9q/VoucLkSzcGnqCVMizw=
Subject key identifier:   29:FB:5C:D2:14:D6:D2:47:A6:05:DD:D7:CE:DC:BC:90:8F:E2:E0:41
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       10B8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C49E27F257EC11ECAD7DE28D5A40D577.roa
Signing time:             Wed 08 Dec 2021 06:04:57 +0000
ROA not before:           Wed 08 Dec 2021 06:04:53 +0000
ROA not after:            Sun 30 Oct 2022 06:04:53 +0000
asID:                     135386
IP address blocks:        156.230.128.0/17 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4280 (0x10b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec  8 06:04:53 2021 GMT
            Not After : Oct 30 06:04:53 2022 GMT
        Subject: CN=61b04b08-c5e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:00:ac:13:e1:68:e3:03:32:c4:b9:b2:62:ac:
                    13:0a:04:5f:2f:b1:87:ba:53:7b:36:91:10:f9:84:
                    28:cd:73:41:9b:e2:ec:cd:2a:2a:07:e6:98:fb:13:
                    24:5e:a2:a5:48:96:ca:3b:b2:2a:fb:b5:f2:86:f2:
                    22:44:d8:fd:5d:f0:eb:ee:2c:3a:2e:8c:56:3f:b6:
                    9a:b4:a5:81:0b:4e:a6:26:3e:33:28:a6:fd:28:05:
                    52:c5:f6:df:1a:44:fb:63:2f:1d:f0:14:ad:ef:82:
                    4e:07:89:49:61:17:28:37:fd:a6:17:79:dc:11:6c:
                    c9:a3:69:f5:9c:42:a6:ca:14:61:17:e5:b3:a1:cb:
                    bf:65:1b:ee:2c:9f:57:6d:67:18:f6:0f:42:c5:8e:
                    05:ab:ff:4b:61:3c:a9:85:be:bf:97:ac:23:18:fd:
                    e7:27:ec:b3:e6:87:a0:49:c3:3a:9a:21:ff:d7:64:
                    6f:52:60:be:3b:9c:a9:1c:e1:8b:c1:fc:84:16:e9:
                    ae:a9:ac:ef:59:ed:43:99:96:d0:91:e1:0e:5d:05:
                    48:85:2a:48:68:7b:17:cd:8b:d9:6c:4f:64:a3:ba:
                    d1:e7:2e:28:5e:7f:1c:ec:77:47:de:01:6a:1f:16:
                    c0:52:c3:d5:b5:fe:51:72:2d:a8:77:11:b1:a5:bd:
                    02:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:FB:5C:D2:14:D6:D2:47:A6:05:DD:D7:CE:DC:BC:90:8F:E2:E0:41
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C49E27F257EC11ECAD7DE28D5A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.230.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         2e:3a:5d:dd:49:fb:9d:71:36:d1:f7:80:a9:8b:44:57:61:8f:
         98:c2:c4:8c:4c:8a:48:a7:1f:8b:5e:fe:0d:5a:cb:81:10:64:
         a6:ad:87:e0:e4:fb:ff:d9:a9:d9:89:54:26:d3:22:34:f3:0d:
         50:19:5d:32:c5:6d:23:35:4d:26:e8:42:ba:7d:5b:ec:0a:d7:
         5a:77:4c:fe:71:14:b9:d3:dc:43:43:ec:00:04:1a:57:5b:90:
         67:85:cc:5d:67:e6:a0:0c:28:4e:95:23:19:bb:33:d5:6b:4e:
         ef:55:f2:41:92:b0:49:3f:c7:db:4a:c3:54:10:ea:65:7f:8b:
         c4:f2:ad:42:2d:03:84:c2:57:f8:e1:1b:fe:d0:9e:8f:d6:f4:
         70:3d:c4:6c:f2:b1:c1:c2:60:c6:bc:72:2e:eb:21:34:7d:30:
         08:45:09:38:25:ca:5a:43:a4:d5:05:ef:f5:81:26:91:a1:7f:
         d8:a7:fe:68:4a:06:38:78:ab:93:24:fd:9c:74:a6:4d:ea:ca:
         1e:e0:03:85:7d:2e:04:b2:47:1e:30:58:6a:36:bc:64:3b:05:
         c6:2a:ec:b8:0b:d8:34:08:2c:93:9f:70:c1:aa:ee:ec:f3:46:
         0e:ef:78:69:99:d1:ae:93:ae:19:e2:5c:74:17:da:3a:db:da:
         9a:99:65:7a
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICELgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMTEyMDgwNjA0NTNaFw0yMjEwMzAwNjA0NTNaMBgxFjAU
BgNVBAMMDTYxYjA0YjA4LWM1ZTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC2AKwT4WjjAzLEubJirBMKBF8vsYe6U3s2kRD5hCjNc0Gb4uzNKioH5pj7
EyReoqVIlso7sir7tfKG8iJE2P1d8OvuLDoujFY/tpq0pYELTqYmPjMopv0oBVLF
9t8aRPtjLx3wFK3vgk4HiUlhFyg3/aYXedwRbMmjafWcQqbKFGEX5bOhy79lG+4s
n1dtZxj2D0LFjgWr/0thPKmFvr+XrCMY/ecn7LPmh6BJwzqaIf/XZG9SYL47nKkc
4YvB/IQW6a6prO9Z7UOZltCR4Q5dBUiFKkhoexfNi9lsT2SjutHnLihefxzsd0fe
AWofFsBSw9W1/lFyLah3EbGlvQK7AgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUKftc
0hTW0kemBd3Xzty8kI/i4EEwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4L0M0OUUyN0YyNTdFQzExRUNBRDdERTI4RDVBNDBENTc3LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAec5oAwDQYJKoZIhvcNAQELBQAD
ggEBAC46Xd1J+51xNtH3gKmLRFdhj5jCxIxMikinH4te/g1ay4EQZKath+Dk+//Z
qdmJVCbTIjTzDVAZXTLFbSM1TSboQrp9W+wK11p3TP5xFLnT3END7AAEGldbkGeF
zF1n5qAMKE6VIxm7M9VrTu9V8kGSsEk/x9tKw1QQ6mV/i8TyrUItA4TCV/jhG/7Q
no/W9HA9xGzyscHCYMa8ci7rITR9MAhFCTglylpDpNUF7/WBJpGhf9in/mhKBjh4
q5Mk/Zx0pk3qyh7gA4V9LgSyRx4wWGo2vGQ7BcYq7LgL2DQILJOfcMGq7uzzRg7v
eGmZ0a6TrhniXHQX2jrb2pqZZXo=
-----END CERTIFICATE-----