Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DED30C4036EB11ECB1741B01D8A014CE.roa
File:                     DED30C4036EB11ECB1741B01D8A014CE.roa (raw, json)
Hash identifier:          9OJGEwIdRjMizDUcN39yCK53jR9vXDwpO7+2yiDzplM=
Subject key identifier:   41:3E:3C:E5:06:14:14:BC:73:33:F9:0C:04:3E:E6:FE:4C:6F:7F:D6
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0C31
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DED30C4036EB11ECB1741B01D8A014CE.roa
Signing time:             Wed 27 Oct 2021 06:05:23 +0000
ROA not before:           Wed 27 Oct 2021 06:05:19 +0000
ROA not after:            Thu 27 Oct 2022 06:05:19 +0000
asID:                     58895
IP address blocks:        45.206.199.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3121 (0xc31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 27 06:05:19 2021 GMT
            Not After : Oct 27 06:05:19 2022 GMT
        Subject: CN=6178ec23-29fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c9:93:91:e2:17:3e:7e:0f:66:37:17:9d:6b:
                    60:c5:08:01:6c:70:a7:e4:fa:38:88:9f:97:70:7d:
                    4f:5c:91:e5:f7:5a:03:36:87:f3:83:a6:8d:18:67:
                    cf:b0:b3:c7:d4:e0:1b:50:4f:7e:09:e5:b8:42:89:
                    4e:38:c2:3f:d0:85:9d:ba:e2:2d:7b:ab:37:04:7d:
                    70:08:60:10:66:e2:ed:31:8b:66:6f:65:f0:87:73:
                    12:f6:88:c8:97:54:fa:e1:03:50:47:1a:20:85:22:
                    ea:5c:74:b0:9b:2a:fc:bc:a1:ce:87:1b:a0:66:c2:
                    47:67:ae:42:80:03:c9:8c:37:d9:27:84:21:57:17:
                    c4:35:19:b7:8e:70:46:25:92:92:ae:40:f5:ad:4f:
                    2b:e8:d3:35:b4:c1:87:7e:58:04:be:bf:8a:3f:cb:
                    a1:49:15:db:a2:0a:35:9b:3e:24:ec:d4:04:3e:32:
                    7b:b5:6d:45:9e:1c:2e:16:e0:89:d8:97:4f:d6:da:
                    06:3f:c3:0b:8b:1a:5f:7a:93:e9:08:27:1d:dd:c9:
                    36:65:48:a7:71:d1:2d:b9:d1:75:05:39:b7:3d:ee:
                    d7:2a:9f:95:8a:60:b1:21:aa:0d:11:71:8a:b5:79:
                    81:19:32:e8:81:dc:c3:53:47:ce:b4:6f:cf:76:a9:
                    db:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:3E:3C:E5:06:14:14:BC:73:33:F9:0C:04:3E:E6:FE:4C:6F:7F:D6
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DED30C4036EB11ECB1741B01D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.206.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:74:3a:e1:8b:59:2b:92:94:16:83:1a:14:79:ee:40:fc:43:
         54:bd:56:ce:c7:25:e7:c0:50:58:72:c9:ad:74:4e:36:7a:c5:
         1c:01:9e:35:94:f1:0f:88:08:90:f7:b4:09:08:fe:03:ae:b9:
         aa:83:ca:b7:ef:1b:7d:69:10:81:d4:a4:14:be:dc:9d:cc:a3:
         2d:46:b5:e9:8c:2e:2e:5d:9d:e5:7c:79:ae:6a:44:55:29:df:
         c4:2f:19:f6:35:9c:99:e1:23:76:cc:37:49:cd:b5:5a:ea:bc:
         6e:55:d7:96:20:30:87:7d:64:85:8b:55:fc:dd:9d:d9:5a:b4:
         3c:dc:9c:6e:96:94:3f:81:0b:96:40:7a:41:85:c8:d1:90:6f:
         ec:45:db:d4:b3:4f:58:aa:b3:4b:c5:f4:49:2f:9c:ee:5b:ca:
         c5:8b:3a:fb:8b:5e:f6:d5:81:ce:10:56:01:0f:83:29:c5:f4:
         6e:7f:9a:52:fc:bc:da:d5:ed:21:cc:1a:01:78:b8:3c:4b:0a:
         4f:70:34:a5:fe:88:73:8b:fe:f0:81:a5:ec:cd:59:4b:e6:5c:
         d6:71:61:90:e4:8e:c6:96:e2:09:4f:a5:59:40:08:fc:e8:d3:
         87:13:51:70:c7:55:a8:ec:68:8f:8d:a4:fc:66:21:9f:73:cd:
         10:5c:ee:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----