Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CB43046E359111EDB8169EA4F1222468.roa
File:                     CB43046E359111EDB8169EA4F1222468.roa (raw, json)
Hash identifier:          u42uloXpcfS+QftLwI8hxFqn8/wdTRK7swya6CYMsMQ=
Subject key identifier:   76:53:33:8A:99:B4:A8:C4:3B:FD:3C:98:67:7A:A1:A0:6D:54:6C:C1
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       17F5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CB43046E359111EDB8169EA4F1222468.roa
Signing time:             Fri 16 Sep 2022 07:33:02 +0000
ROA not before:           Fri 16 Sep 2022 07:32:58 +0000
ROA not after:            Fri 30 Dec 2022 07:32:58 +0000
asID:                     35916
IP address blocks:        45.200.224.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6133 (0x17f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 16 07:32:58 2022 GMT
            Not After : Dec 30 07:32:58 2022 GMT
        Subject: CN=632426ad-62ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:21:66:e9:e8:fa:0f:ca:d8:1a:15:d2:bb:04:
                    3e:bb:27:db:2b:26:f1:f5:1c:65:c6:81:61:33:17:
                    56:dd:b7:2e:cf:0f:47:f6:39:af:9a:4d:01:dc:31:
                    f5:a5:c3:8f:47:a5:d5:ae:90:01:71:35:52:78:ea:
                    9d:d1:71:3e:fa:70:be:86:6a:24:03:d3:55:c4:3b:
                    0a:25:1d:1d:85:bf:39:54:d1:a9:ce:8c:5d:ef:c1:
                    e9:9d:50:71:a7:2f:bb:78:48:6d:db:66:99:e8:9f:
                    11:84:99:3d:1c:24:18:f4:4a:b9:91:60:9d:5f:71:
                    ba:cf:5e:ea:2d:9d:6c:a7:77:1c:9a:4a:c3:17:ba:
                    c7:bb:ab:89:ed:bc:3e:73:0f:b5:80:6d:71:dd:a6:
                    94:8d:97:25:93:6a:55:a1:12:ee:dc:d4:67:48:ab:
                    63:a1:89:0a:fd:75:5d:3a:97:c1:b9:51:3b:3a:95:
                    f0:5a:12:7f:19:e3:fb:3a:ea:44:b5:05:8f:ed:34:
                    cc:21:b6:81:9e:6a:3a:6a:10:18:37:47:21:eb:e3:
                    a5:1d:15:55:65:f6:47:8b:95:0e:b9:b6:fd:f6:91:
                    50:a8:43:54:68:d1:b8:22:5d:b8:fb:23:e8:c3:aa:
                    30:23:6f:37:a8:61:a7:af:b8:b5:98:b3:fc:4d:d4:
                    1f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:53:33:8A:99:B4:A8:C4:3B:FD:3C:98:67:7A:A1:A0:6D:54:6C:C1
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CB43046E359111EDB8169EA4F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.200.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         32:ba:0a:5c:ba:e1:22:c1:81:ad:2b:d7:03:b1:77:2e:9d:54:
         94:ec:1b:95:60:6a:5f:2c:d0:d2:e0:cd:10:ad:7f:2f:88:d6:
         f6:f3:d5:9f:8c:73:c6:ce:af:fa:c9:cc:05:37:87:3b:75:f2:
         82:cb:fa:53:38:f6:22:35:b7:69:e7:0b:65:e4:3e:6d:0d:43:
         4f:f7:a7:4e:09:39:d8:c5:b0:79:d3:50:73:6c:39:41:a7:d8:
         c5:c7:69:b6:d9:9c:05:69:43:67:d5:42:2f:38:e5:1a:50:96:
         59:f4:23:17:29:74:8b:6b:0d:e0:24:fd:ff:33:ae:0f:21:ab:
         0f:63:ec:1e:f0:78:78:2b:f6:39:2a:97:16:a0:55:1f:61:83:
         3d:97:da:46:63:e0:4c:d1:1d:b4:28:28:f3:6c:e6:06:af:22:
         7a:75:d3:69:34:a5:59:a6:ee:68:57:ca:41:71:c4:b6:ea:1d:
         0f:70:10:91:f2:0a:be:62:31:97:4f:98:a9:c8:1b:9c:7e:fe:
         44:b0:e7:62:15:fc:2c:23:38:9a:1f:89:9c:91:bd:bb:34:3d:
         27:3f:f6:30:bb:5d:5a:d8:90:74:b9:4d:ba:5a:8f:63:6b:17:
         22:9f:85:9f:5c:dd:7e:6c:37:e8:a0:0c:61:c8:a0:ca:74:6e:
         7a:5f:33:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----