Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D8A7180C37B811EC81B0E541D8A014CE.roa
File:                     D8A7180C37B811EC81B0E541D8A014CE.roa (raw, json)
Hash identifier:          Pprnd18bVP/Lq502vJcxEyRUzU1S5HH7NaH0vkJ5/Ro=
Subject key identifier:   AF:26:D0:9E:9B:0F:38:BB:E4:E2:3B:01:0B:B4:EE:1C:91:A3:7A:97
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0C5F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D8A7180C37B811EC81B0E541D8A014CE.roa
Signing time:             Thu 28 Oct 2021 06:32:39 +0000
ROA not before:           Thu 28 Oct 2021 06:32:36 +0000
ROA not after:            Wed 28 Dec 2022 06:32:36 +0000
asID:                     210008
IP address blocks:        45.204.70.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3167 (0xc5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 28 06:32:36 2021 GMT
            Not After : Dec 28 06:32:36 2022 GMT
        Subject: CN=617a4407-cf5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:50:c0:3e:31:59:3e:81:42:4f:f0:7b:b0:d9:
                    aa:36:1a:24:fb:f5:bb:dc:c9:ba:3a:27:6a:1c:e4:
                    ed:13:d2:56:f3:d3:6f:6f:da:4c:8c:0f:c4:ea:31:
                    b0:9c:e3:33:0d:8f:d3:e5:f1:12:2b:7f:fe:b9:c1:
                    42:82:69:18:f6:df:7f:f9:4f:54:33:92:2a:04:c1:
                    09:35:eb:2a:b5:c1:98:5e:ca:d1:5a:2e:b3:23:7a:
                    71:17:f3:81:32:2a:7e:ba:86:a8:ef:c2:eb:f1:fa:
                    99:3d:c8:6e:53:77:1a:74:2d:e4:b9:44:2c:9a:e5:
                    26:e8:16:98:50:0c:e8:5e:0c:c1:17:a1:58:e4:8b:
                    cb:4f:7e:e1:6b:b3:c9:3f:3b:f8:60:e6:64:38:c8:
                    ee:aa:85:96:2a:03:8a:7c:ef:10:1d:b0:e8:3a:4b:
                    58:58:8d:ae:2a:eb:95:fe:4c:17:23:f7:14:18:be:
                    fc:2d:ec:b5:11:15:ef:27:42:cd:cb:30:34:83:85:
                    21:75:28:d0:f5:58:cb:e8:4b:71:63:80:63:14:d3:
                    e5:c1:94:e6:6d:84:a9:e2:12:d0:33:39:b8:b0:49:
                    33:37:ec:5f:6a:86:db:e5:9d:38:a2:8c:52:53:73:
                    00:11:01:b5:84:b9:0a:40:05:57:8e:f5:49:da:71:
                    bf:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:26:D0:9E:9B:0F:38:BB:E4:E2:3B:01:0B:B4:EE:1C:91:A3:7A:97
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D8A7180C37B811EC81B0E541D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.204.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:3d:8e:19:fe:94:01:34:6e:f5:9d:f4:5a:34:ab:81:e0:ac:
         c2:fc:ac:e3:b2:b3:1e:71:21:da:5c:c2:af:e4:42:de:2f:34:
         4a:70:30:20:d6:13:cd:e1:46:c5:36:d7:c3:4f:1c:dc:26:a9:
         8b:eb:60:60:0e:53:cb:b9:7e:9b:d3:27:b3:b5:14:53:47:70:
         58:01:38:04:aa:0c:9f:9e:23:8a:8b:0d:03:9f:bf:c4:3d:3f:
         24:8e:1b:41:af:01:d9:c6:9b:29:ea:90:09:22:86:02:14:ea:
         c5:d9:ed:83:32:07:69:5f:52:86:d7:9e:57:54:38:61:58:cd:
         82:54:7a:70:ba:6c:10:05:d8:da:5a:3b:39:60:0e:dc:df:aa:
         a4:fe:06:89:21:c4:e7:0b:53:df:bf:05:2c:28:a3:db:4d:3f:
         25:68:4d:26:23:65:d1:c5:d7:ad:a5:cb:80:6a:d2:91:a5:56:
         25:5e:a3:7b:90:50:f7:64:c2:9b:76:d5:bc:71:54:5e:2a:b2:
         ec:f1:bd:b8:83:06:d9:78:ec:1b:36:af:40:f7:03:91:9c:8c:
         2e:52:d7:bd:ef:7c:1a:0e:60:ea:4d:4a:03:e5:cd:22:82:61:
         54:6c:89:f6:95:96:dc:8e:8c:49:27:de:27:44:2b:84:b0:77:
         1e:67:7b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----