Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DD44E00236EA11ECB1B4AA7DD8A014CE.roa
File:                     DD44E00236EA11ECB1B4AA7DD8A014CE.roa (raw, json)
Hash identifier:          /GfUhmzgzY/W7tyqPgc3IvghoyB/Y7PuHtqQNWbu+Fc=
Subject key identifier:   D9:3D:60:E1:26:F1:5D:DE:D1:5C:5C:88:98:6F:78:79:1F:B9:67:F3
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0C05
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DD44E00236EA11ECB1B4AA7DD8A014CE.roa
Signing time:             Wed 27 Oct 2021 05:58:11 +0000
ROA not before:           Wed 27 Oct 2021 05:58:07 +0000
ROA not after:            Thu 27 Oct 2022 05:58:07 +0000
asID:                     58895
IP address blocks:        45.206.235.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3077 (0xc05)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 27 05:58:07 2021 GMT
            Not After : Oct 27 05:58:07 2022 GMT
        Subject: CN=6178ea73-44f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:41:b9:f1:53:d2:1a:5b:85:04:16:d0:ec:ee:
                    60:de:ef:11:8b:39:d4:f9:bd:f7:44:2e:97:28:d2:
                    8d:59:8e:ff:37:25:c0:f9:a2:dd:f9:1d:20:64:40:
                    fd:a0:e8:97:00:02:68:d8:c9:a7:aa:55:3a:5e:cf:
                    de:40:c6:84:8f:71:a8:b4:e2:57:32:c8:d2:0f:16:
                    57:4b:de:4c:70:84:a3:c0:fa:36:a1:f0:49:81:b6:
                    88:22:b9:29:e5:b6:ae:e1:d5:e8:89:be:29:72:a6:
                    41:9e:74:ea:f0:b7:39:33:37:5b:80:93:e1:73:37:
                    57:dc:4b:30:7d:db:33:bc:d7:96:32:64:d9:9c:20:
                    91:f4:47:52:38:d0:9d:7f:e7:82:c9:db:fa:83:3e:
                    85:93:49:4f:33:3f:66:2b:5d:9d:07:4c:c4:9f:32:
                    23:84:9e:99:22:86:4f:c6:a7:84:39:07:e9:55:78:
                    d4:6c:6d:e8:e3:35:8d:11:dc:ed:04:35:66:54:d9:
                    e1:50:eb:6b:37:d2:7a:57:03:34:8d:c8:58:75:f0:
                    fd:07:37:e1:18:a2:ce:f0:40:58:36:20:e5:69:92:
                    47:7a:17:27:07:19:fe:10:be:bd:c4:62:eb:1c:19:
                    9c:8b:46:39:6c:c5:9d:98:45:d7:75:21:52:9b:be:
                    a0:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:3D:60:E1:26:F1:5D:DE:D1:5C:5C:88:98:6F:78:79:1F:B9:67:F3
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DD44E00236EA11ECB1B4AA7DD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.206.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:5c:ef:54:4b:ee:d3:ca:64:c7:3a:41:80:6e:c9:4d:46:2f:
         29:1b:c0:c2:87:a3:72:79:8a:cb:0a:ec:2b:90:51:9a:59:c5:
         3a:da:0d:7c:b3:ab:b0:b2:2d:c6:42:05:eb:ac:5d:b0:23:2e:
         2a:7a:79:01:ae:b6:d7:4e:60:3e:6d:d2:d0:30:17:a4:30:ad:
         4f:d7:f8:57:2d:a5:7e:3f:fc:8b:62:09:7b:6a:48:c4:18:fe:
         42:68:68:48:eb:f8:09:0e:8e:48:e8:2f:01:91:45:ee:b6:ad:
         e2:66:19:d7:ad:3d:8f:b8:4b:f4:59:0e:57:bc:2d:a1:6b:56:
         b5:ad:d8:df:55:7f:74:fb:61:4d:3f:80:ec:fe:a9:b1:41:4e:
         f2:9b:88:7f:cb:73:96:f2:c5:02:32:d0:89:c4:6e:ba:87:60:
         cd:70:ed:4b:b3:d6:f3:50:91:37:ae:2a:4a:6c:57:52:33:db:
         5b:85:80:29:40:f5:07:82:69:83:88:6e:ba:39:c2:81:ee:d6:
         68:6e:26:36:cd:56:7c:4f:cf:83:bc:67:e6:90:86:cd:8b:33:
         49:17:5b:a1:cc:ac:32:10:64:73:25:5c:94:cc:cc:c1:ad:88:
         89:64:3e:30:38:3e:04:52:ed:9b:ae:e7:84:97:77:01:69:87:
         29:dc:3e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----