Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB96BF94F81B11ECBFAD0A99F1222468.roa
File:                     DB96BF94F81B11ECBFAD0A99F1222468.roa (raw, json)
Hash identifier:          RMx51gQh5g/F3hl599HMd6PextpDqn0pSVvapgKjLH4=
Subject key identifier:   69:9A:AB:44:73:50:CF:DF:36:E1:A7:2A:CF:73:69:6D:2B:AF:47:8B
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       1525
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB96BF94F81B11ECBFAD0A99F1222468.roa
Signing time:             Thu 30 Jun 2022 02:25:08 +0000
ROA not before:           Thu 30 Jun 2022 02:25:04 +0000
ROA not after:            Fri 30 Dec 2022 02:25:04 +0000
asID:                     328608
IP address blocks:        45.196.32.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5413 (0x1525)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jun 30 02:25:04 2022 GMT
            Not After : Dec 30 02:25:04 2022 GMT
        Subject: CN=62bd0983-ec7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:56:95:40:d1:ba:28:d8:0b:b0:65:19:81:16:
                    b1:a5:16:92:e4:66:14:b2:9b:0c:31:55:5f:72:49:
                    50:c2:40:a7:a8:ad:c5:60:71:e1:52:dc:5f:d3:de:
                    10:be:f7:9b:3a:5d:81:18:67:5a:a9:65:0f:e7:b3:
                    61:0d:66:78:71:90:c2:af:5e:09:9c:3e:8e:b1:b2:
                    47:de:fe:d7:e5:ca:5b:9c:b5:b7:3a:42:27:6c:02:
                    89:64:21:11:12:e8:1b:15:f0:c8:f2:29:e2:72:47:
                    37:11:f1:15:43:12:5b:00:cd:ba:9c:55:72:e2:3d:
                    23:29:12:15:e8:e9:6e:42:a9:0b:e3:7d:7d:5d:3b:
                    0e:d8:f6:34:42:57:72:da:53:da:8d:23:ad:fa:b3:
                    49:d5:2f:94:c5:86:b6:d3:a4:f2:a2:26:96:b5:67:
                    51:0a:11:50:06:bb:65:36:dd:bf:02:90:45:cc:c3:
                    ca:4e:a6:ee:7d:e0:56:1c:43:d9:19:4f:e1:22:ad:
                    c9:d4:ea:3a:61:02:ec:ae:4b:63:b4:09:17:3c:65:
                    40:ea:2b:cc:0d:13:ac:59:5e:ee:b1:b1:e4:cc:93:
                    9d:ad:22:65:0f:bc:fe:33:f5:ac:18:e4:cd:35:aa:
                    73:c5:f7:3e:4c:e4:08:dd:a6:05:cc:34:f7:9b:28:
                    32:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:9A:AB:44:73:50:CF:DF:36:E1:A7:2A:CF:73:69:6D:2B:AF:47:8B
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB96BF94F81B11ECBFAD0A99F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.196.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4b:6b:5e:cd:4d:94:fb:52:6b:70:ff:bb:fd:30:38:47:c2:ce:
         7a:68:c4:58:f6:94:58:ac:96:76:b3:2d:e4:56:eb:aa:fa:fe:
         00:9e:a4:0a:90:df:75:7f:3f:31:07:ed:1f:6e:3d:b7:27:ee:
         e2:ed:f0:d4:64:85:36:bb:51:e5:53:19:55:c9:f3:ee:65:cb:
         54:07:36:6b:7b:0b:dc:50:30:1d:e0:6d:cf:19:6c:5a:0a:60:
         a3:68:fb:ff:74:68:14:80:45:5b:f7:fb:15:f1:51:89:bd:ee:
         b5:d9:a2:76:c7:eb:9b:aa:da:44:17:86:e5:7c:4c:a3:0b:1a:
         52:7e:cf:7f:ca:4b:2e:c9:2e:8c:e1:05:a3:52:c7:42:15:d3:
         49:b2:34:1c:ad:cc:3b:37:a8:af:05:29:2b:16:ac:7c:16:cc:
         43:9c:a5:d5:3a:54:77:d9:7b:2c:81:ae:70:f3:e0:60:51:3d:
         53:9c:22:95:cd:a8:a5:43:d0:79:71:72:fd:fd:a9:6a:25:4c:
         ff:76:15:18:40:f3:87:44:49:9e:f8:0d:a5:d7:c4:8b:90:06:
         12:13:61:cd:58:9f:58:a0:87:24:37:2a:8c:fa:93:c2:fa:f6:
         70:de:98:14:2c:f7:23:1f:1f:dd:0d:59:21:b8:cf:fe:21:bc:
         2d:8e:d7:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----