Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E33A50A0693A11EC978A5B8D5A40D577.roa
File:                     E33A50A0693A11EC978A5B8D5A40D577.roa (raw, json)
Hash identifier:          rk6nI8bkLLSyG9rPZv27zDXem8D8FclEYp23gt2j5f4=
Subject key identifier:   A5:12:F7:E2:BA:5D:BB:6B:D3:9D:5C:D3:B3:FA:D2:8D:3A:8F:E7:F4
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       112E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E33A50A0693A11EC978A5B8D5A40D577.roa
Signing time:             Thu 30 Dec 2021 06:36:59 +0000
ROA not before:           Thu 30 Dec 2021 06:36:54 +0000
ROA not after:            Tue 30 Aug 2022 06:36:54 +0000
asID:                     1239
IP address blocks:        156.251.96.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4398 (0x112e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 30 06:36:54 2021 GMT
            Not After : Aug 30 06:36:54 2022 GMT
        Subject: CN=61cd538a-73f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e0:8d:8b:af:5d:2e:10:0a:3f:df:08:c2:71:
                    2f:57:c0:e5:c0:9e:4d:f1:b1:2e:82:02:4d:b5:d1:
                    02:cc:79:2e:cf:ac:c9:38:c4:b4:09:a5:cb:fc:bd:
                    48:89:5f:de:91:a3:a5:27:d6:09:96:ff:61:37:76:
                    d1:07:a4:42:c1:be:89:15:10:c8:d5:89:10:38:81:
                    40:50:31:2e:9e:60:5c:c7:65:d8:6b:57:0f:75:cd:
                    6d:b0:19:f7:f4:a0:b9:53:09:d9:40:ea:5e:88:28:
                    e3:b4:c3:6c:99:58:7f:bb:cb:82:b4:e2:d6:ca:8f:
                    b9:12:56:48:97:8d:af:0c:87:1c:e7:c1:14:d4:4d:
                    c3:b9:0b:9e:92:33:44:86:64:6a:25:82:88:74:39:
                    ed:22:89:13:07:7e:3c:07:96:fe:d4:19:e4:9a:69:
                    d9:cf:89:95:17:77:b8:f9:79:12:fa:a5:a7:78:f4:
                    b0:18:5d:95:d4:f8:7e:07:b4:20:4d:23:19:8c:ee:
                    9c:90:1b:a3:16:5b:07:b8:5d:27:66:91:2f:a8:05:
                    5e:ae:6e:4e:cb:76:f5:9a:5c:cb:6e:3f:49:c4:b9:
                    6b:94:32:12:a0:89:c0:1c:0d:cd:d3:1c:74:20:18:
                    2e:d0:15:30:88:0e:40:9d:8c:65:af:4f:4a:c0:db:
                    b5:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:12:F7:E2:BA:5D:BB:6B:D3:9D:5C:D3:B3:FA:D2:8D:3A:8F:E7:F4
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E33A50A0693A11EC978A5B8D5A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.251.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         bc:2e:80:df:f0:1f:4d:54:8c:35:04:c6:69:0c:eb:26:4a:d4:
         72:c0:d0:93:81:25:cc:f7:5e:3c:a6:66:87:1c:fa:c6:05:c2:
         7c:33:8e:58:df:a8:1e:33:84:d4:14:74:d8:63:ce:86:8d:96:
         24:21:fe:cd:58:37:e7:96:39:8f:67:ea:84:84:20:e3:35:94:
         a1:5c:e5:63:1f:b4:d0:9c:4b:15:a1:91:ae:fd:d7:81:13:8e:
         58:24:e2:fb:96:88:36:35:58:7d:1b:c3:55:a7:3e:6d:cd:70:
         ce:f9:a3:f8:60:e5:dc:8e:38:d7:0f:69:16:32:3e:7f:18:45:
         48:98:21:df:ea:e3:1b:c4:a5:dd:aa:15:fa:c4:49:74:10:9f:
         f5:bf:21:54:da:f2:fb:5c:ce:06:d5:28:0d:85:2c:96:5a:0d:
         38:31:fb:5a:4a:2f:75:f5:cb:26:55:96:ed:cc:e6:0a:c0:8c:
         43:b5:1b:ae:72:6c:21:1a:06:0a:ec:81:a7:7c:c9:d8:c7:8c:
         37:3f:19:b8:8b:68:9a:b2:55:72:7c:4a:1e:6e:d1:34:cf:90:
         84:58:91:28:fd:6e:f7:ba:56:9f:0f:1b:ac:d7:0e:c0:59:d9:
         e6:0a:f0:56:43:61:75:e0:4b:67:d7:c0:e4:1f:29:e0:63:4e:
         ad:8a:2c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----