Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DF1DD6BC488411EC81CA6333D8A014CE.roa
File:                     DF1DD6BC488411EC81CA6333D8A014CE.roa (raw, json)
Hash identifier:          /2Ooqc6pYVZR2exAgfoYQIthHs6Wczn+QA5Fg9KQjyM=
Subject key identifier:   9D:DC:DF:31:C4:43:36:BF:4F:DF:82:27:CA:C7:4F:79:8A:64:BD:08
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0D07
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DF1DD6BC488411EC81CA6333D8A014CE.roa
Signing time:             Thu 18 Nov 2021 15:33:26 +0000
ROA not before:           Fri 19 Nov 2021 15:33:23 +0000
ROA not after:            Sat 19 Nov 2022 15:33:23 +0000
asID:                     139879
IP address blocks:        156.231.146.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3335 (0xd07)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 19 15:33:23 2021 GMT
            Not After : Nov 19 15:33:23 2022 GMT
        Subject: CN=61967246-dc23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:63:18:01:af:52:30:21:b1:cb:1b:05:50:30:
                    f2:23:8c:ed:ce:be:50:0e:c8:5a:bc:e5:f4:70:4d:
                    89:b5:45:7b:cb:bd:98:a7:c2:89:4d:d7:05:60:c9:
                    77:93:e9:83:67:0a:8b:28:09:0e:9a:d9:d0:a6:a0:
                    1b:10:76:a6:ed:25:45:2d:3e:3d:73:27:07:6d:39:
                    72:33:f8:6f:c2:aa:d2:39:12:bf:77:f5:88:2a:e6:
                    1c:1c:9f:15:44:05:99:ce:2d:98:6f:db:05:26:30:
                    28:93:fd:50:37:2e:dd:77:7f:a8:12:5a:ed:47:0c:
                    a4:ae:41:5d:9c:d7:eb:68:c2:9f:9f:4a:aa:51:d5:
                    e3:d5:61:07:7b:44:53:10:47:42:b1:7d:e6:d7:0e:
                    fa:ac:cf:93:8e:25:b0:bb:4e:b1:b4:4a:6b:a7:39:
                    3d:6f:ff:22:5b:8b:cd:e4:99:82:44:b5:ec:03:bf:
                    22:eb:1c:c7:73:95:23:c1:42:2a:72:ea:c1:1f:b4:
                    15:f0:e4:f7:5e:65:21:67:1d:ce:f0:62:78:ac:0b:
                    81:50:99:83:f5:5f:ce:e6:99:89:c1:3f:9b:1e:c2:
                    c1:de:35:e2:f9:80:89:21:a0:12:7e:ca:e1:de:a3:
                    15:7e:37:72:5c:73:68:27:a5:4c:24:80:c1:bd:1a:
                    e7:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:DC:DF:31:C4:43:36:BF:4F:DF:82:27:CA:C7:4F:79:8A:64:BD:08
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DF1DD6BC488411EC81CA6333D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.231.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:26:6c:62:12:32:ba:74:83:d9:86:1f:3a:c8:e4:76:87:c5:
         0b:cd:cc:33:57:a6:b0:75:ee:8d:e8:9b:d8:16:2f:5d:68:98:
         66:03:86:a0:77:b2:03:fc:35:b4:df:ef:f1:e0:41:a8:3f:01:
         f6:ce:5e:19:ba:e8:18:30:1d:59:80:9e:d8:2f:ff:2d:39:55:
         21:6f:46:80:c9:c6:34:ef:a1:c6:8e:77:86:98:8b:fe:35:79:
         e4:9e:26:55:0c:8e:0d:b5:2d:4f:b0:b8:3e:a8:b1:01:e8:0d:
         44:e5:0a:c7:ec:29:bd:18:9b:f0:c4:84:77:e3:ca:20:88:c0:
         06:4c:cb:07:3c:f5:21:b8:bb:6c:cf:c5:5c:da:17:ce:fe:01:
         6d:94:c5:d3:36:00:c5:a1:a4:e3:ef:5a:be:fb:52:e1:a6:93:
         36:12:69:54:24:bc:c5:94:3c:3d:c7:a7:0f:d5:32:2a:b4:ea:
         09:64:85:4c:99:c0:2d:7e:83:33:ef:9b:52:b0:dd:54:7f:33:
         70:fd:5c:20:ca:94:ee:2b:fb:4f:f2:a6:ff:1c:b0:6c:7c:de:
         82:04:6a:53:96:26:13:fa:6a:c2:21:a4:d4:74:e3:df:89:1b:
         37:db:ac:0d:64:57:ab:4e:df:63:df:cf:72:35:ca:ff:26:85:
         0c:e6:52:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----