Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CD78259CDCEB11EC95E933E3F1222468.roa
File:                     CD78259CDCEB11EC95E933E3F1222468.roa (raw, json)
Hash identifier:          /bbGuk2BVbObIiqjOtj3uaTafg3SlfrRskgz7OgFbLA=
Subject key identifier:   25:BE:FB:01:DF:1C:BC:BF:17:EE:F7:0F:FB:02:8B:AA:BA:E3:54:C0
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       1412
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CD78259CDCEB11EC95E933E3F1222468.roa
Signing time:             Thu 26 May 2022 12:03:07 +0000
ROA not before:           Thu 26 May 2022 12:03:02 +0000
ROA not after:            Thu 30 Jun 2022 12:03:02 +0000
asID:                     328608
IP address blocks:        45.192.160.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5138 (0x1412)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: May 26 12:03:02 2022 GMT
            Not After : Jun 30 12:03:02 2022 GMT
        Subject: CN=628f6c7a-b936
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:07:62:99:cf:d0:58:05:05:ac:b7:8a:8d:b6:
                    6f:9e:39:49:7f:72:4b:f9:9f:ab:7b:ad:bb:2f:a0:
                    63:5b:b8:83:f3:4b:c7:a5:11:0e:c9:e6:9c:46:94:
                    e8:05:24:af:bb:fe:27:6a:40:60:b4:c2:98:ad:55:
                    21:90:56:1c:f0:70:82:2a:50:cb:b0:a2:1f:e7:a2:
                    2c:97:c7:98:72:59:e4:ee:59:4d:fa:b2:c0:d5:ad:
                    09:33:f8:d5:b7:80:6b:9c:ec:9b:cd:92:3b:ab:ea:
                    3f:ef:cd:a6:a5:d0:33:cb:3a:5e:e0:96:bd:2e:4b:
                    c4:80:49:54:ca:93:b8:84:92:03:e7:f9:4d:95:15:
                    59:49:c0:b5:dd:a4:93:ba:3d:8f:9f:07:4b:2e:15:
                    f2:7e:0e:16:0a:ed:40:76:aa:3f:21:c7:bc:22:ed:
                    c3:89:90:62:d1:45:d4:ed:6d:d9:70:23:44:89:28:
                    07:25:42:5b:e9:cb:2d:58:bf:96:55:c7:ab:0c:cd:
                    c0:1e:41:7e:e1:8b:bb:6c:49:4f:0b:55:92:fa:94:
                    b5:c9:57:8f:33:21:fd:5a:c8:9e:4f:d2:b0:96:32:
                    81:b6:78:16:e2:d2:26:0a:fb:fd:1f:96:e2:8a:11:
                    86:2d:c0:f3:83:10:ae:4e:11:1c:2c:13:e9:6b:66:
                    a2:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:BE:FB:01:DF:1C:BC:BF:17:EE:F7:0F:FB:02:8B:AA:BA:E3:54:C0
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CD78259CDCEB11EC95E933E3F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b5:ec:03:85:0b:9c:4e:62:0a:b6:8c:a1:d3:c3:61:f8:3c:9c:
         23:5a:1c:7d:be:74:8b:2c:54:33:c8:ac:3e:1c:64:e0:b1:55:
         80:b2:ac:f5:c9:23:df:12:35:6b:b5:7b:bc:6f:90:ba:f6:72:
         46:26:a7:44:e1:46:4b:00:7a:1d:59:2d:82:01:1c:e6:0c:7b:
         7c:74:53:c1:72:5a:ba:88:98:42:9e:48:14:8f:ee:7f:6e:ad:
         74:59:2e:61:70:88:ae:1c:31:90:05:65:2a:19:38:e8:8b:ee:
         25:c0:30:30:89:98:c2:bd:d0:65:e9:04:61:79:f3:53:12:9f:
         82:ff:9d:76:4e:c2:d4:31:c3:9d:69:87:d2:ae:18:91:ae:d2:
         cf:e9:0a:88:f2:89:63:d3:6a:59:c0:2a:91:cb:f1:75:20:2d:
         3c:2a:1c:48:67:da:09:dd:fd:63:af:6e:22:47:1a:f4:39:d8:
         24:a7:8a:47:3e:4e:cd:52:8e:0e:e3:2a:ff:11:26:c2:dc:8e:
         d3:ff:bc:39:1d:2a:53:59:f8:07:bb:84:0d:bf:be:dd:66:4f:
         05:55:cd:99:db:05:7e:45:0b:82:ef:c4:65:a5:40:e3:90:14:
         8d:da:2b:41:1d:80:d3:88:be:76:37:4d:d2:ca:3e:c5:3d:bf:
         dc:03:bc:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----