Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C8BF6AD0488311ECBA1B0931D8A014CE.roa
File:                     C8BF6AD0488311ECBA1B0931D8A014CE.roa (raw, json)
Hash identifier:          DbVNPSImWRCKdAYIiwg/C2w9m3QiT4b3gVaCv95EtlQ=
Subject key identifier:   B4:42:D3:DC:11:A9:59:41:7C:14:0C:65:15:33:92:97:C9:D5:41:BC
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0CC8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C8BF6AD0488311ECBA1B0931D8A014CE.roa
Signing time:             Thu 18 Nov 2021 15:25:39 +0000
ROA not before:           Fri 19 Nov 2021 15:25:36 +0000
ROA not after:            Sat 19 Nov 2022 15:25:36 +0000
asID:                     139879
IP address blocks:        156.247.132.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3272 (0xcc8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 19 15:25:36 2021 GMT
            Not After : Nov 19 15:25:36 2022 GMT
        Subject: CN=61967073-5124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d2:dd:b0:82:20:e3:a9:c7:35:af:5e:a0:d1:
                    a2:3b:3f:db:10:95:b0:e9:5b:73:77:b8:b2:1d:00:
                    c5:57:09:60:ac:94:c2:c3:37:1f:fa:4c:29:e6:d7:
                    cf:45:49:2c:c4:30:1b:b4:e6:70:30:ba:3d:5f:88:
                    f8:95:0f:4a:ad:cc:1b:92:1a:a8:ac:e5:e0:bb:d2:
                    7e:dd:a1:6c:13:51:b1:05:23:b6:f6:d5:2e:55:96:
                    e3:28:b8:fa:f8:65:43:da:18:a4:1c:fe:a4:63:dc:
                    4d:9e:d1:b1:8c:bf:74:7c:fc:dc:e4:32:c8:b8:40:
                    20:fc:96:c1:5e:50:6a:0b:c0:b7:b9:57:ac:76:68:
                    bd:53:72:c8:f4:52:d3:51:16:d4:87:e1:ff:0d:7b:
                    05:60:45:b0:50:eb:61:51:b6:95:9f:e5:0a:69:ad:
                    bd:cf:f0:59:4e:e4:91:ca:f3:5d:3f:c2:5b:dd:6f:
                    6c:f8:36:46:83:35:db:8d:d7:d5:1c:e0:77:9f:55:
                    54:e9:8c:54:e7:fd:93:b6:07:21:c9:ef:92:b5:0e:
                    ae:c3:f4:6d:16:e0:dc:17:ee:eb:d8:c0:7f:1d:88:
                    f8:08:13:f0:d3:44:37:90:0d:62:e9:7d:68:d4:1f:
                    e1:d4:f1:cb:63:15:eb:5d:33:ba:9c:55:98:14:06:
                    14:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:42:D3:DC:11:A9:59:41:7C:14:0C:65:15:33:92:97:C9:D5:41:BC
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C8BF6AD0488311ECBA1B0931D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.247.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:f1:6d:96:6a:c6:99:2b:a2:22:3a:92:cf:cd:32:ff:4d:d3:
         98:af:3b:cf:fb:0b:f4:54:e4:f0:da:81:21:78:18:ab:3b:c5:
         39:d5:ba:70:ca:e5:6b:1d:54:63:7f:6a:3c:31:d0:e6:3e:0c:
         9a:3d:49:89:9b:c8:1b:9f:17:c2:d7:3f:36:1c:cf:ec:44:28:
         92:7a:ce:cb:d2:d0:27:04:82:4a:44:cd:9f:0c:3b:e0:90:78:
         12:af:43:9b:e3:87:d6:3c:38:ff:5a:dc:57:bd:75:dd:3c:01:
         e7:25:d1:f1:57:97:8f:87:55:3c:3b:ed:5e:d1:9d:42:32:49:
         de:f8:e7:56:1d:d5:f6:50:53:e6:14:7d:99:31:0e:77:e0:7e:
         ee:4c:30:d1:4a:5f:d0:c0:ef:26:9c:91:1d:fc:cb:55:16:a7:
         8c:4c:79:95:c0:17:86:47:4c:db:df:a0:0f:2c:fa:11:98:9c:
         26:46:1a:97:b1:6c:5f:e5:ed:28:a1:4e:3b:08:72:89:a8:7c:
         40:bd:e0:99:f9:f6:c2:c2:e8:e6:8f:df:5e:28:a1:0f:84:c8:
         d9:a4:43:a2:ab:76:68:cb:d1:a0:8b:e7:77:e3:e3:62:6e:6a:
         d8:42:eb:ac:97:37:8d:3e:92:53:2c:3f:fa:2c:c6:f4:10:1e:
         a0:e9:2c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----