Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D20C0242693A11EC8DD4328D5A40D577.roa
File:                     D20C0242693A11EC8DD4328D5A40D577.roa (raw, json)
Hash identifier:          pU4MT1+imtUCBDQRcB0bpvw1l9fy/bjLQdAVzfUVnA8=
Subject key identifier:   CB:D1:17:CF:01:E0:7F:9B:7B:03:3B:93:24:81:CF:F6:4E:06:A3:03
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       112C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D20C0242693A11EC8DD4328D5A40D577.roa
Signing time:             Thu 30 Dec 2021 06:36:29 +0000
ROA not before:           Thu 30 Dec 2021 06:36:26 +0000
ROA not after:            Tue 30 Aug 2022 06:36:26 +0000
asID:                     1239
IP address blocks:        156.242.80.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4396 (0x112c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 30 06:36:26 2021 GMT
            Not After : Aug 30 06:36:26 2022 GMT
        Subject: CN=61cd536d-7fd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c3:79:a6:0c:4b:c9:19:22:ac:7b:08:da:cc:
                    41:24:fa:09:ad:0b:0f:b4:c5:87:e2:37:50:85:e3:
                    08:8f:f2:0e:1c:07:13:45:17:03:58:02:90:57:ae:
                    76:f3:a3:80:ef:9f:69:d9:d9:3f:dc:88:f7:19:d9:
                    4f:cb:3b:e4:de:4b:ae:e4:4c:9b:05:33:75:a4:01:
                    c2:e6:65:f5:d5:1e:9a:0c:21:30:d8:52:a9:26:23:
                    e8:1e:ff:ec:90:ca:af:ce:b4:5f:14:74:89:67:da:
                    75:0a:98:11:06:cd:86:0e:12:d2:5d:bc:ee:4a:29:
                    08:d7:5c:a4:50:b9:e6:f3:bb:e0:c5:5a:09:21:bb:
                    5a:f8:ed:b4:fe:3f:5b:dc:02:b4:bc:66:eb:df:a2:
                    7e:ee:82:8b:4a:61:48:24:6d:42:77:45:57:7d:7c:
                    ef:f0:c7:10:d9:bd:26:48:70:31:fb:f2:30:eb:c6:
                    ef:47:e4:c2:da:96:2c:80:1c:3d:28:1d:ea:d2:fb:
                    11:bd:43:ef:7a:18:06:3b:12:35:17:35:d4:99:21:
                    58:f1:b1:25:66:35:0c:8f:e1:16:df:86:da:54:2f:
                    6c:26:d1:b8:c4:c8:e3:65:cf:c8:45:08:d8:d3:e7:
                    10:b2:83:65:e7:d9:75:13:6f:78:91:2d:ec:d7:ef:
                    99:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:D1:17:CF:01:E0:7F:9B:7B:03:3B:93:24:81:CF:F6:4E:06:A3:03
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D20C0242693A11EC8DD4328D5A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.242.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         24:31:ef:81:27:d4:35:ee:a6:dc:e2:d3:bc:33:3d:a3:b6:c5:
         34:15:4c:86:d2:86:77:41:b6:15:1b:21:d9:91:e9:a3:1a:e8:
         d3:c5:59:6d:3a:44:9e:4c:39:05:e5:16:d6:ef:6d:5c:de:59:
         f9:84:c9:09:89:b8:99:74:d6:22:b3:96:ba:a0:4d:79:ef:f0:
         db:4e:ef:ce:2e:bb:5d:eb:d4:19:17:ca:1f:5a:28:45:82:2b:
         c7:7f:24:53:d6:a3:ee:bb:af:af:2c:8e:11:2f:1a:2f:ba:1d:
         3b:f0:87:16:fb:dc:96:30:91:f5:a6:ec:f0:df:70:b5:66:2e:
         db:72:d7:07:b8:56:93:32:9d:90:3c:37:0d:78:fb:8d:b0:a0:
         5a:35:29:7c:27:38:f5:9f:2e:74:5b:57:d8:de:07:97:67:17:
         b8:26:f4:ea:62:3e:8a:df:d3:48:24:9e:34:bc:62:27:33:6b:
         19:4a:b3:99:0c:97:cc:6b:fc:74:f5:02:6d:37:a8:91:b9:fa:
         bd:dd:f9:b4:01:b2:4c:8c:0a:c5:1d:35:c9:a4:4a:56:63:89:
         cd:f3:05:f5:0f:bd:a9:f5:60:73:53:3b:bf:d7:5a:c9:01:13:
         cb:7f:69:42:fd:a6:ed:b0:1c:1d:cc:01:39:15:66:8c:5d:e0:
         73:d7:13:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----