Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CCA9810A3B8D11EDBB3598F2F1222468.roa
File:                     CCA9810A3B8D11EDBB3598F2F1222468.roa (raw, json)
Hash identifier:          ZyiIw15C5+P7dHnmUMvmtXoM852x8asvSUJoTraAoRE=
Subject key identifier:   73:9A:49:84:21:CA:E0:CA:0C:69:49:F9:A1:18:8D:1A:74:C9:22:61
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       1860
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CCA9810A3B8D11EDBB3598F2F1222468.roa
Signing time:             Fri 23 Sep 2022 22:19:33 +0000
ROA not before:           Sat 24 Sep 2022 22:19:29 +0000
ROA not after:            Tue 10 Jan 2023 22:19:29 +0000
asID:                     1239
IP address blocks:        156.251.96.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6240 (0x1860)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 24 22:19:29 2022 GMT
            Not After : Jan 10 22:19:29 2023 GMT
        Subject: CN=632e30f5-c353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f5:49:7f:83:4c:d5:92:9f:33:6d:bb:88:de:
                    53:fa:fd:3e:13:53:f5:8d:df:27:74:a2:72:c4:a1:
                    35:5e:07:f8:8c:c1:84:ed:d2:8e:c2:bb:7e:79:de:
                    4f:45:db:81:e9:f3:c1:de:e1:fe:f0:7e:7c:a0:89:
                    d4:4d:57:b2:e9:dd:a6:94:c1:22:e2:bb:8f:ad:0f:
                    c0:24:57:a4:5b:1b:6a:eb:9a:46:18:57:1a:d7:c4:
                    e9:53:37:61:92:56:a3:02:e2:74:de:62:a2:df:d4:
                    17:16:9a:ff:25:6d:f5:3e:f4:85:18:3e:16:36:3f:
                    01:b4:43:b6:00:4c:3d:ff:4f:a4:46:15:03:49:c0:
                    c7:c4:1a:ff:bf:a3:cb:96:ac:f3:96:2f:b3:33:c8:
                    ca:71:68:71:e3:5f:fa:fd:f3:ff:8f:4f:cf:21:34:
                    34:f3:68:5b:15:f4:b2:af:86:01:ab:ac:09:2e:90:
                    00:1f:0a:ff:9b:1f:86:a2:11:86:98:30:a3:76:f2:
                    41:da:84:b4:4e:98:11:31:1a:13:3e:24:17:de:b6:
                    2d:b7:94:2e:3a:50:9c:73:60:f5:93:a9:fe:d6:96:
                    d8:c6:d4:78:bf:37:32:b7:16:13:8a:fc:97:c7:32:
                    22:cf:1a:95:bd:b2:7c:9d:94:7a:40:9b:3d:9b:64:
                    3e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:9A:49:84:21:CA:E0:CA:0C:69:49:F9:A1:18:8D:1A:74:C9:22:61
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CCA9810A3B8D11EDBB3598F2F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.251.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         40:ba:35:d4:53:b6:83:fe:e6:4a:86:db:3f:87:a6:39:6c:28:
         c7:f8:1e:25:bd:26:8a:6b:72:1a:2a:a1:17:c1:6f:a7:01:b8:
         63:5b:60:9a:cb:a8:01:41:aa:58:03:e5:d0:77:3d:07:75:85:
         bb:1a:fd:a5:1d:b1:33:b9:e6:b0:4b:ae:b4:28:63:b0:92:58:
         5f:8b:a0:19:c9:e1:5e:41:2c:99:a1:2d:d6:32:81:fe:32:60:
         b7:50:33:e1:03:7f:38:5b:95:76:63:ac:ce:d3:27:43:df:cf:
         3b:18:19:0f:91:7e:8b:f6:0c:ff:04:de:24:b8:49:4f:d6:c4:
         fe:fb:3d:9f:2f:22:26:d6:e5:79:ca:8c:26:db:5f:d4:64:3a:
         64:de:d1:a4:2c:9b:c4:90:87:87:8d:63:e0:59:b5:86:ae:31:
         be:09:d7:49:10:fc:7e:16:c3:df:ee:66:b4:8b:67:6d:27:97:
         4b:fd:c8:a5:15:b5:b1:b5:5e:63:41:72:86:96:cf:bf:bc:3f:
         41:e0:ad:c6:36:0b:82:81:5b:5c:77:fe:01:cd:ac:c2:62:69:
         c0:03:3c:3b:25:92:2a:ee:88:a2:b0:ce:1f:9c:e1:b6:3b:68:
         79:58:8c:6e:ed:6d:f7:b5:87:7e:6e:03:3c:95:f3:95:77:f5:
         1e:8f:fc:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----